Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32332d3233203d3e20323731353132.roa
File:                     3138312e3233322e3132382e302f32332d3233203d3e20323731353132.roa (raw, json)
Hash identifier:          BbY5Gt3+QUAlK1llxHQ5NUAUJyUhBF+KJu6SifyhKIQ=
Subject key identifier:   30:CD:B9:67:38:70:09:93:EB:6F:90:CD:FF:5E:3B:A8:C9:59:B4:4C
Certificate issuer:       /CN=A8E21D506BD647922C7407C92DF2E0618175A5B3
Certificate serial:       363D497F1449DAC99F2C91AC33E3C1B1CFD3A5CC
Authority key identifier: A8:E2:1D:50:6B:D6:47:92:2C:74:07:C9:2D:F2:E0:61:81:75:A5:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32332d3233203d3e20323731353132.roa
Signing time:             Tue 24 Oct 2023 02:15:21 +0000
ROA not before:           Tue 24 Oct 2023 02:10:21 +0000
ROA not after:            Tue 22 Oct 2024 02:15:21 +0000
asID:                     271512
IP address blocks:        181.232.128.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3d:49:7f:14:49:da:c9:9f:2c:91:ac:33:e3:c1:b1:cf:d3:a5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8E21D506BD647922C7407C92DF2E0618175A5B3
        Validity
            Not Before: Oct 24 02:10:21 2023 GMT
            Not After : Oct 22 02:15:21 2024 GMT
        Subject: CN=30CDB96738700993EB6F90CDFF5E3BA8C959B44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:90:c1:d2:ec:4d:bf:96:e4:39:a4:69:34:
                    1d:b1:b0:16:a3:8c:70:a5:c3:dc:60:5a:97:45:b9:
                    08:75:09:03:ca:f9:34:4d:8d:5a:bd:db:d6:e9:40:
                    ae:d7:f2:8e:43:3c:81:3e:11:2b:83:73:70:26:c8:
                    c2:c0:62:27:61:8b:c9:5b:a7:5d:f5:9e:2a:be:77:
                    a1:b8:f5:f5:70:ea:c3:a9:b0:62:1f:81:11:af:19:
                    3d:47:bc:0b:95:dd:99:2e:16:28:e4:b2:19:27:18:
                    73:95:8a:b8:cd:db:6f:93:47:05:5f:eb:0c:19:bb:
                    56:2d:02:98:49:cd:9b:04:40:10:8b:4b:e9:4f:64:
                    39:56:95:6b:88:90:e5:f5:84:61:84:85:95:44:dd:
                    bf:90:a3:22:f4:f2:2a:7c:75:71:b9:5c:16:49:62:
                    4e:82:0d:f9:f2:05:dd:af:6f:d0:06:f4:51:18:eb:
                    52:38:03:f8:06:06:61:6b:f6:03:f2:61:86:62:4a:
                    56:7c:aa:7b:99:e1:8b:b0:11:15:fd:45:73:05:6f:
                    4f:7a:88:d3:ed:96:dc:bc:5d:19:d2:88:e2:25:e8:
                    7f:46:1d:8e:db:51:84:2c:ef:1b:4f:94:42:74:5e:
                    5b:03:41:5b:36:27:5d:fb:23:79:82:92:fa:4c:df:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:B9:67:38:70:09:93:EB:6F:90:CD:FF:5E:3B:A8:C9:59:B4:4C
            X509v3 Authority Key Identifier:
                keyid:A8:E2:1D:50:6B:D6:47:92:2C:74:07:C9:2D:F2:E0:61:81:75:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32332d3233203d3e20323731353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:19:db:b5:08:ed:af:50:3d:a2:bb:d3:80:65:f2:1b:c2:
         3c:be:de:66:db:63:da:ed:00:ae:b4:ef:25:fb:4e:c9:a0:c2:
         7f:16:05:eb:17:75:f6:ca:71:04:c8:ac:3f:d2:1b:7f:7e:e8:
         ac:b6:54:66:1a:67:0d:13:5a:d6:17:51:78:c3:aa:10:f3:55:
         50:9d:e5:ae:8c:5c:44:11:f9:60:c7:2c:b7:dc:78:f7:f7:7a:
         62:ab:e6:64:44:9e:56:ee:bc:2f:2c:0d:d7:84:f9:39:57:fc:
         8f:fa:f6:97:2c:6c:ca:1c:9b:c6:b3:ae:5a:0c:57:36:40:c8:
         79:13:57:2d:b8:1a:70:04:25:fe:b2:dc:fd:31:5a:b7:cd:37:
         b1:43:43:23:a1:1c:a5:5f:3f:d4:29:47:d1:4b:73:a7:6e:02:
         46:7e:00:04:81:c6:b7:52:b0:de:61:a8:11:5b:59:7a:9d:40:
         a0:31:16:e5:19:8b:55:72:a2:a0:58:15:3d:33:b2:5e:e1:37:
         55:ba:2e:7e:da:30:5e:00:c2:d8:e8:d9:f0:70:e1:02:41:4c:
         47:6d:cb:88:8e:ac:58:18:6e:40:fe:9a:74:a6:2d:3f:29:4d:
         91:26:1b:74:8f:d6:8a:96:e8:05:c3:ea:11:97:03:26:1a:52:
         98:02:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 03:50:01 2023 by rpki-client on console-ams.rpki-client.org