Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          mebgPI7uHqfAR9kVN4tSa6+cjvfh/+oJ/wbTmlRAK00=
Subject key identifier:   D4:FF:4A:B2:A6:74:BD:2A:26:76:BE:F3:67:C0:60:A9:1D:22:CC:21
Certificate issuer:       /CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
Certificate serial:       35079D49FA63E2E1B43AEA4244F5281FA0A663D7
Authority key identifier: 7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:58 +0000
ROA not before:           Fri 12 Apr 2024 16:14:58 +0000
ROA not after:            Fri 11 Apr 2025 16:19:58 +0000
asID:                     271390
IP address blocks:        181.189.105.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:07:9d:49:fa:63:e2:e1:b4:3a:ea:42:44:f5:28:1f:a0:a6:63:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
        Validity
            Not Before: Apr 12 16:14:58 2024 GMT
            Not After : Apr 11 16:19:58 2025 GMT
        Subject: CN=D4FF4AB2A674BD2A2676BEF367C060A91D22CC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:73:ab:ff:59:a0:07:8c:9f:93:15:51:31:
                    e2:a2:a3:3f:7c:bd:ae:3c:ae:e3:40:b7:4a:9d:45:
                    61:c7:b3:36:cc:21:d8:50:98:1a:a1:f3:2a:fb:2a:
                    88:89:86:86:4c:ea:82:54:04:c1:4a:0f:da:b6:32:
                    fc:c1:19:99:9d:c4:88:75:03:5b:27:de:e3:fc:35:
                    e8:d7:23:c4:68:2b:88:d7:9f:ea:b8:44:ac:00:99:
                    1d:0b:89:68:4a:e1:10:0c:51:7b:1b:e7:a1:2d:dc:
                    ab:5e:2e:a0:36:8c:7f:d3:fa:c0:65:f1:99:82:9b:
                    da:b6:49:ec:d8:11:59:86:30:ea:3f:d6:64:88:f8:
                    ab:9e:6a:02:49:6c:2b:23:2c:7c:96:96:ea:06:30:
                    34:c3:fc:1c:30:5c:72:a6:0a:12:10:85:65:45:c4:
                    7a:6a:3f:68:72:21:2f:dc:8a:d0:d9:f2:e7:a1:b9:
                    ea:7a:30:1c:9a:9e:3b:62:a4:68:dd:e2:d1:38:ea:
                    5f:92:e5:83:c1:29:7e:f3:fe:2c:de:73:16:5e:b8:
                    e0:bc:ce:a9:a9:62:9a:d9:ea:7e:8c:55:a0:62:04:
                    eb:f9:2d:dd:b3:9f:56:62:9c:e6:78:51:bf:34:61:
                    29:73:70:01:b9:a3:82:27:12:17:85:8f:94:af:62:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FF:4A:B2:A6:74:BD:2A:26:76:BE:F3:67:C0:60:A9:1D:22:CC:21
            X509v3 Authority Key Identifier:
                keyid:7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/7FE491F0B2990CDA06DE14C265B0E6968745689B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:99:b7:86:33:bd:45:0b:d0:f0:10:12:0b:5b:4c:7b:c9:
         93:d5:a2:fa:eb:e8:1c:7d:da:d4:3e:31:c7:52:bd:af:ff:2c:
         6f:86:e6:ec:34:6a:1e:e4:fa:63:bf:18:f7:07:c8:e9:66:a4:
         f1:2c:27:3d:c6:e3:bc:2b:99:92:fd:af:75:14:e5:83:06:8d:
         4d:b5:68:f4:d7:3e:45:df:9e:80:82:cc:1c:9f:22:0b:cc:23:
         ca:17:c8:1d:b1:6f:db:b0:d5:92:42:f4:ae:7b:64:72:79:21:
         94:eb:f6:b3:db:d6:19:57:00:68:45:b8:46:60:3d:d2:7f:6e:
         83:cc:bf:3d:ae:6d:27:a3:ef:b0:41:5e:79:23:e2:75:a9:87:
         d1:4f:42:b7:5c:f3:ec:9c:3f:cd:96:20:a5:9f:0b:41:77:9f:
         b6:fa:b7:fd:32:4b:c8:38:c2:4a:fe:f3:39:ac:62:62:5e:e9:
         14:2b:c8:2b:69:74:1b:40:08:39:ee:9e:c5:5e:84:b1:88:f5:
         54:a8:e0:14:26:fb:17:9b:35:8b:9e:16:1f:fb:40:cb:5f:23:
         92:5b:6c:5c:5a:d4:6b:47:c1:46:81:a2:7c:85:19:26:af:8e:
         8b:16:a3:5e:c2:80:92:34:9b:c2:ff:8c:4b:d8:98:28:b3:4c:
         21:c8:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:21:42 2024 by rpki-client on console-ams.rpki-client.org