Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32342d3234203d3e20323731333535.roa
File:                     3138312e3233322e3133362e302f32342d3234203d3e20323731333535.roa (raw, json)
Hash identifier:          wqI5PQeI3rVOZFXnNcvnTb650u73+sZasBTP2NJcDOk=
Subject key identifier:   91:E7:1C:F3:26:82:FB:72:F6:5E:A1:6C:E2:C5:D2:A7:07:09:12:AF
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       57E6E55D6C65EE509350D7A11D487C1FE10BC274
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32342d3234203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:25 +0000
ROA not before:           Thu 07 Nov 2024 16:38:25 +0000
ROA not after:            Thu 06 Nov 2025 16:43:25 +0000
asID:                     271355
IP address blocks:        181.232.136.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e6:e5:5d:6c:65:ee:50:93:50:d7:a1:1d:48:7c:1f:e1:0b:c2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:25 2024 GMT
            Not After : Nov  6 16:43:25 2025 GMT
        Subject: CN=91E71CF32682FB72F65EA16CE2C5D2A7070912AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:8b:63:d2:56:77:9b:85:03:0d:4c:24:9f:
                    66:b5:a9:d1:f0:58:5e:3a:88:a3:bd:08:42:69:fb:
                    48:52:a3:fe:a1:7e:d7:9a:cd:93:0f:63:fb:c9:e3:
                    a9:d6:e3:f6:f2:cc:da:e4:11:77:e4:15:c1:fe:57:
                    fd:64:3b:08:e6:de:20:60:5b:d5:4e:01:bf:87:73:
                    cb:c9:2c:85:5a:64:68:cb:ce:df:7b:21:0c:fb:f5:
                    0f:62:e3:6b:c8:f4:08:66:1b:ed:29:b1:68:1f:7f:
                    51:f5:d6:b0:b2:5b:42:37:d8:de:a4:de:eb:f4:c2:
                    63:2b:6b:e8:e2:e1:70:4a:1f:dc:49:34:f9:86:50:
                    4a:72:69:36:d9:c3:53:bc:be:53:39:45:a8:9f:9f:
                    e8:ee:8d:21:63:96:19:45:14:4b:d2:a7:67:30:be:
                    9e:9d:a9:4f:e7:89:b5:e7:88:4d:1a:11:e7:35:37:
                    c6:5f:e3:f3:a4:b8:1f:9b:3e:36:b1:c7:d6:e1:fe:
                    50:1f:a9:29:e0:b0:9d:d4:ea:44:ee:48:5b:e5:07:
                    aa:c3:07:be:5a:25:1f:ea:f7:09:72:49:c6:33:94:
                    de:a0:20:6c:36:5d:ea:7e:1b:d6:3d:c6:8b:7f:a8:
                    5a:c9:90:73:20:63:f1:f2:a6:39:14:79:37:26:e3:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:1C:F3:26:82:FB:72:F6:5E:A1:6C:E2:C5:D2:A7:07:09:12:AF
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32342d3234203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:ae:73:13:f9:8f:fb:99:a3:d0:59:b0:d7:5a:a7:f1:9f:
         26:95:71:63:08:b2:84:51:68:8c:88:ee:3b:7b:f5:94:1e:19:
         92:5a:5b:b2:ab:11:bb:03:34:35:e3:7f:d7:11:e2:95:22:f7:
         8e:de:09:9f:13:6a:1d:01:d2:fc:ec:44:d8:da:29:41:c0:35:
         d0:c4:eb:ff:6c:ae:b7:4e:b7:be:0f:16:22:fc:7c:50:47:fe:
         01:65:ba:f6:01:87:7d:36:8f:fd:c3:c5:6c:a0:ba:b0:9b:2f:
         11:07:00:3e:9b:aa:ea:45:cb:94:06:8c:1f:d1:b7:7d:eb:fc:
         37:0c:66:b8:87:e7:e2:47:c0:8b:b9:fe:5a:1e:90:63:16:ec:
         f8:0e:26:a2:b5:61:d6:de:27:60:59:4f:bd:98:54:1b:28:78:
         61:54:89:83:a1:f7:b8:97:21:e9:54:b6:ce:b1:14:37:6b:71:
         b8:5e:26:74:2b:86:1e:fd:0f:c8:ef:34:ba:2d:ce:44:1b:d0:
         49:f5:af:99:8d:18:d1:1b:1c:91:67:4d:55:bb:e8:88:6d:33:
         15:6f:d0:a3:9e:ba:17:41:b1:e4:c2:75:90:7c:b3:c9:87:cb:
         a0:36:b7:91:b5:ac:9e:d0:0a:ae:d3:84:f6:95:b3:35:ef:af:
         70:96:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 01:22:05 2024 by rpki-client on console-ams.rpki-client.org