Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/3138312e3139312e302e302f32322d3234203d3e20323637343336.roa
File:                     3138312e3139312e302e302f32322d3234203d3e20323637343336.roa (raw, json)
Hash identifier:          hwOOEwQupTvwJNcts4pJU/NfjDjZ/xiWRUrjToumYss=
Subject key identifier:   E8:AE:6A:4B:59:58:73:7F:9E:60:6C:13:05:A6:05:72:69:A6:F6:9B
Certificate issuer:       /CN=287D3948CD018DC083CEF786858DF019B1D3111B
Certificate serial:       301F3530BB876411B614506BEA17D8B515949C39
Authority key identifier: 28:7D:39:48:CD:01:8D:C0:83:CE:F7:86:85:8D:F0:19:B1:D3:11:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/287D3948CD018DC083CEF786858DF019B1D3111B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/3138312e3139312e302e302f32322d3234203d3e20323637343336.roa
Signing time:             Thu 04 Apr 2024 05:44:24 +0000
ROA not before:           Thu 04 Apr 2024 05:39:24 +0000
ROA not after:            Thu 03 Apr 2025 05:44:24 +0000
asID:                     267436
IP address blocks:        181.191.0.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1f:35:30:bb:87:64:11:b6:14:50:6b:ea:17:d8:b5:15:94:9c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=287D3948CD018DC083CEF786858DF019B1D3111B
        Validity
            Not Before: Apr  4 05:39:24 2024 GMT
            Not After : Apr  3 05:44:24 2025 GMT
        Subject: CN=E8AE6A4B5958737F9E606C1305A6057269A6F69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:e4:99:bc:c4:10:45:b0:91:50:fb:bc:84:
                    94:25:40:91:0b:5a:54:19:1b:df:ab:44:80:5f:7e:
                    d1:f1:2f:ba:2e:d3:5e:7d:20:5f:6a:9e:be:7d:9f:
                    62:7e:bc:8d:f3:8c:f4:d0:1c:8d:ba:67:89:f7:ef:
                    d5:0e:39:f5:f8:45:37:15:34:40:af:08:93:24:82:
                    ef:bc:50:16:ab:10:7b:0d:d6:aa:f5:55:15:32:08:
                    d6:7b:79:87:47:cd:2d:5b:e7:73:74:41:ac:1d:fa:
                    12:3a:22:b5:28:56:bb:59:70:0d:68:a8:df:35:52:
                    a3:54:a2:8d:0e:41:72:22:34:47:cf:bf:30:e6:7a:
                    89:96:05:04:95:49:ca:13:c7:27:a0:57:40:43:e6:
                    b0:9f:f3:c9:62:1b:32:4d:02:1c:18:98:1c:7f:bb:
                    a8:d3:da:51:fd:57:cd:e5:45:27:4e:f4:af:00:d4:
                    b5:e4:66:47:05:8c:7d:d1:3b:27:59:3c:ae:a1:3e:
                    33:c8:01:36:5c:4f:22:a0:40:aa:0b:26:90:30:c0:
                    8c:64:1f:0c:36:2d:40:f1:da:88:5e:92:59:2b:7b:
                    62:35:b0:35:19:01:5d:da:db:3c:37:0f:6b:61:6c:
                    59:1c:a1:50:3b:58:f8:d5:1a:d3:d2:ea:68:8a:a9:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:6A:4B:59:58:73:7F:9E:60:6C:13:05:A6:05:72:69:A6:F6:9B
            X509v3 Authority Key Identifier:
                keyid:28:7D:39:48:CD:01:8D:C0:83:CE:F7:86:85:8D:F0:19:B1:D3:11:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/287D3948CD018DC083CEF786858DF019B1D3111B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/287D3948CD018DC083CEF786858DF019B1D3111B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/3138312e3139312e302e302f32322d3234203d3e20323637343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:2e:ce:60:b3:1a:06:77:60:62:87:30:b9:d3:70:bc:e1:bf:
         2c:82:14:17:d8:be:15:4a:72:3c:20:06:3e:7c:f9:3e:ec:f2:
         a9:8e:c0:a6:68:a0:1b:a6:c5:a0:9e:15:24:65:74:62:ba:bf:
         63:44:7c:3b:9b:a6:d8:e3:62:ea:66:fb:4d:99:7e:59:eb:14:
         f9:4a:a2:fa:fe:c2:52:f3:61:79:8d:5d:51:d0:48:89:10:76:
         c3:09:8c:54:aa:18:c7:b5:d6:c2:f8:33:ba:d3:c8:cf:b0:fd:
         0d:de:47:46:3d:5b:b3:04:60:92:f5:e2:b2:15:ad:5b:43:c5:
         06:03:c8:33:15:26:43:ba:e7:b0:f1:2c:8b:98:a9:1c:46:01:
         74:4c:38:95:b0:2f:fe:67:56:df:66:0e:d1:c7:66:95:79:60:
         f6:0a:9a:0b:e3:2e:27:15:5e:40:73:7b:94:54:24:a9:15:f9:
         b8:d4:8b:45:15:9a:6e:36:5a:7e:56:f3:24:dd:56:f2:38:e0:
         12:fb:e2:8d:bd:23:da:ce:6b:e3:fc:0a:e7:90:8c:59:3d:ce:
         95:b9:d3:2a:7c:d2:f8:db:04:99:c1:5d:d2:ca:0c:e1:31:05:
         ac:f6:00:bc:b3:b6:cb:bc:7d:ae:7e:88:43:21:84:52:60:3d:
         42:d3:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 01:34:18 2024 by rpki-client on console-fra.rpki-client.org