Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          fWknKBnuwSvzSdqQHXorSwOvd09Ddbrj2D4k0Sr2JTY=
Subject key identifier:   43:2D:33:D1:A5:47:11:62:16:D0:AE:CA:CA:0C:B1:B9:25:47:21:D5
Certificate issuer:       /CN=41780D761AAB6860C84344D2502C54C1F09D6825
Certificate serial:       5A07095243BF87B7A7938B25063F01DEB3099B0A
Authority key identifier: 41:78:0D:76:1A:AB:68:60:C8:43:44:D2:50:2C:54:C1:F0:9D:68:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41780D761AAB6860C84344D2502C54C1F09D6825.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
Signing time:             Thu 04 Apr 2024 01:11:11 +0000
ROA not before:           Thu 04 Apr 2024 01:06:11 +0000
ROA not after:            Thu 03 Apr 2025 01:11:11 +0000
asID:                     270579
IP address blocks:        189.126.86.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:07:09:52:43:bf:87:b7:a7:93:8b:25:06:3f:01:de:b3:09:9b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41780D761AAB6860C84344D2502C54C1F09D6825
        Validity
            Not Before: Apr  4 01:06:11 2024 GMT
            Not After : Apr  3 01:11:11 2025 GMT
        Subject: CN=432D33D1A547116216D0AECACA0CB1B9254721D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:47:e0:44:48:44:00:0a:e5:4a:e9:f7:be:
                    46:27:0a:17:2f:56:48:17:8f:04:10:4d:c6:e0:f6:
                    ad:8b:16:f3:73:2e:cd:be:df:b9:09:eb:49:8c:f3:
                    7e:03:4c:cb:ed:19:a1:57:c3:89:bf:ac:17:ff:20:
                    1e:16:8b:37:e2:40:ef:db:24:bd:ed:17:0a:2a:8d:
                    dd:92:91:29:b2:27:63:d6:1f:46:ae:e0:8d:81:bf:
                    22:28:d0:50:54:1a:61:4e:18:22:25:72:c0:78:b3:
                    ba:7e:8c:43:e0:1d:20:b0:8c:71:8d:fc:bd:1b:c9:
                    b0:c3:49:d4:df:11:41:42:3f:67:59:53:83:ad:8d:
                    a8:70:c5:db:e2:78:60:6b:0f:3a:d9:53:66:ad:05:
                    5e:a8:45:49:3b:b3:ac:b0:6b:5c:c3:3e:44:2b:21:
                    51:fd:75:06:be:50:2d:89:70:ad:03:ef:68:b4:e1:
                    cb:ab:41:9d:9a:1f:25:7b:de:cc:4e:1c:bd:76:b6:
                    04:32:0f:c8:15:34:f4:f5:79:d1:3d:3a:f5:2c:2f:
                    35:59:0c:98:f3:a3:e1:e8:ec:8d:77:cb:4c:6e:14:
                    10:8a:cf:f9:ef:18:75:ab:14:9d:f9:45:2e:13:4a:
                    7f:3e:4c:a0:19:a4:0b:d9:fb:72:6d:7a:fa:e5:9a:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2D:33:D1:A5:47:11:62:16:D0:AE:CA:CA:0C:B1:B9:25:47:21:D5
            X509v3 Authority Key Identifier:
                keyid:41:78:0D:76:1A:AB:68:60:C8:43:44:D2:50:2C:54:C1:F0:9D:68:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/41780D761AAB6860C84344D2502C54C1F09D6825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41780D761AAB6860C84344D2502C54C1F09D6825.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:26:71:ba:3f:c2:62:a7:a4:da:d1:d4:03:eb:66:4e:f7:57:
         7e:5f:f8:9c:c2:7c:27:96:89:6b:98:a4:9b:4a:a1:16:38:c2:
         95:c2:23:05:de:2d:b1:30:52:f2:29:87:94:5a:23:5e:48:97:
         7e:60:e3:44:9e:cf:1b:3e:41:f1:77:7c:8e:e0:c1:31:f1:62:
         c0:f5:eb:8b:88:03:76:32:21:af:67:81:14:6b:dd:03:dc:da:
         31:9a:e5:da:30:0d:94:b2:32:0d:93:63:60:7a:8e:e1:d8:26:
         f1:6c:84:aa:93:8c:b0:b0:fc:d3:45:ff:ef:f5:23:65:96:e8:
         30:14:58:7a:fe:a7:4b:64:b9:c8:c2:7d:8c:13:1f:25:7b:b9:
         7f:fc:96:84:5a:e2:cc:c5:35:04:a3:ee:ca:e8:2a:ee:c0:c3:
         b9:06:12:40:58:25:83:02:2e:72:e5:54:41:74:3e:02:b0:47:
         e1:ff:a7:98:7f:04:bf:58:1f:f7:50:73:40:63:05:5a:cd:a7:
         3b:8b:34:cd:96:29:62:93:54:32:39:be:d7:8f:48:be:06:1b:
         b7:a3:8f:da:a0:20:07:33:23:af:6c:e6:6b:b4:0e:41:5a:ba:
         f1:9d:47:9d:62:ab:22:4f:47:3d:64:e6:d9:7a:07:c4:33:b7:
         86:45:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 04:02:50 2024 by rpki-client on console-ams.rpki-client.org