Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa
File:                     3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa (raw, json)
Hash identifier:          Cc3Xe1dvUcTXQNtbXEqZw+JaVu1mI0RVOZob7rHH4zM=
Subject key identifier:   CC:E2:9B:70:71:B2:43:E4:51:74:D7:CA:7B:1D:B1:C5:5E:D1:6D:1A
Certificate issuer:       /CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
Certificate serial:       36760F5E2AAFFD065037BD34F60CF51D72ECA06B
Authority key identifier: 7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:59 +0000
ROA not before:           Fri 12 Apr 2024 16:14:59 +0000
ROA not after:            Fri 11 Apr 2025 16:19:59 +0000
asID:                     271390
IP address blocks:        181.189.106.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:76:0f:5e:2a:af:fd:06:50:37:bd:34:f6:0c:f5:1d:72:ec:a0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
        Validity
            Not Before: Apr 12 16:14:59 2024 GMT
            Not After : Apr 11 16:19:59 2025 GMT
        Subject: CN=CCE29B7071B243E45174D7CA7B1DB1C55ED16D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:71:38:80:17:c6:16:7d:5f:2c:4d:91:78:2c:
                    fc:77:9d:90:ee:35:57:5f:a1:0c:78:f1:22:96:e1:
                    89:66:15:bb:b0:94:cb:89:7e:2e:96:23:9c:03:4f:
                    a9:9f:c1:5b:81:d8:35:f7:66:6e:f4:36:9d:d1:44:
                    45:cb:dd:5f:96:bf:e3:ed:09:f5:27:e8:b6:76:43:
                    74:16:a7:0a:60:59:2c:9a:36:9b:93:ef:3a:c0:75:
                    8f:af:11:8c:7c:d6:d7:5a:3b:f8:d2:cc:8c:9a:13:
                    59:9c:3c:8e:40:2e:15:37:a2:21:62:37:2e:92:e7:
                    2f:6a:0a:b5:51:b7:22:d3:a3:5d:96:be:70:c1:ec:
                    69:4b:3b:8a:ba:8d:27:ec:3c:5b:f8:de:d7:08:f3:
                    35:b3:34:1d:1b:5d:c8:6f:65:f5:5e:dc:60:b3:ab:
                    d6:94:16:cd:66:79:73:be:ec:e3:ad:82:00:c5:cd:
                    f8:bb:4a:85:27:31:df:2e:e5:74:a8:aa:91:44:43:
                    97:6a:18:5f:f4:d2:c1:90:dc:1c:82:78:05:c2:f5:
                    ec:66:a6:77:5a:aa:55:4c:5f:c8:7a:14:6b:88:00:
                    33:7e:31:52:11:51:61:4a:db:5a:fa:4f:5d:fd:49:
                    e5:ab:45:2e:1d:56:fa:96:28:6b:b2:49:9e:ea:1f:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E2:9B:70:71:B2:43:E4:51:74:D7:CA:7B:1D:B1:C5:5E:D1:6D:1A
            X509v3 Authority Key Identifier:
                keyid:7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/7FE491F0B2990CDA06DE14C265B0E6968745689B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:66:61:74:a7:dd:07:69:bc:32:11:a5:ca:bb:7e:a4:50:bf:
         88:85:32:09:0b:98:eb:ce:0e:9d:bf:d3:dc:b2:41:ea:f7:e9:
         4e:6a:7b:1b:eb:7c:6b:b8:35:e6:d1:66:2e:ea:24:5d:30:70:
         4c:ec:90:7f:ff:69:a4:70:20:94:36:ee:b9:2e:87:e7:c3:f1:
         5e:f2:ed:92:21:11:13:fc:04:dd:ee:31:db:08:ec:d0:f6:3b:
         97:c8:96:98:80:b5:91:69:ff:e1:98:75:c8:44:ad:72:1b:7d:
         17:6c:44:f4:44:2c:d1:58:47:b6:e8:96:50:74:dc:99:a8:04:
         60:e6:51:41:70:91:45:c4:18:10:1f:86:f7:13:8d:20:e4:15:
         22:1e:78:92:13:03:3f:3c:53:9d:80:95:f2:e2:32:26:f3:70:
         6a:73:98:e5:38:e2:0f:4e:12:6a:58:75:6c:8b:69:3b:a5:bf:
         20:e3:b4:a8:22:eb:ed:b5:0b:e2:0a:9d:8c:ae:31:fd:29:52:
         0e:e8:00:42:3c:49:aa:7e:a9:9f:e7:fe:67:4d:39:2b:3f:d7:
         39:e6:81:f5:67:d1:78:89:4e:8c:4c:d8:66:b7:76:37:ca:8d:
         ba:26:9e:a4:55:06:1e:47:bc:77:32:8e:cd:f4:2a:93:08:34:
         9c:ce:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:21:42 2024 by rpki-client on console-ams.rpki-client.org