Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133382e302f32342d3234203d3e20323731333535.roa
File:                     3138312e3233322e3133382e302f32342d3234203d3e20323731333535.roa (raw, json)
Hash identifier:          X9qNAjvfCvH0WytmL4sEN9hqeNERc6vgbWu17PGi118=
Subject key identifier:   6B:5A:5C:34:F2:70:91:E6:C1:B0:7A:75:DC:5B:D9:9F:99:39:EC:32
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       70F0384CDF32D699AF160F0D9C803AA2F1A8BFDC
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133382e302f32342d3234203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:27 +0000
ROA not before:           Thu 07 Nov 2024 16:38:27 +0000
ROA not after:            Thu 06 Nov 2025 16:43:27 +0000
asID:                     271355
IP address blocks:        181.232.138.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f0:38:4c:df:32:d6:99:af:16:0f:0d:9c:80:3a:a2:f1:a8:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:27 2024 GMT
            Not After : Nov  6 16:43:27 2025 GMT
        Subject: CN=6B5A5C34F27091E6C1B07A75DC5BD99F9939EC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:f7:6a:a2:22:6e:c0:8d:37:fd:86:98:c5:
                    10:00:b2:e3:ab:2d:82:37:66:fe:25:4e:0e:da:25:
                    f2:9b:9e:a7:4f:7e:87:10:f5:d9:99:0c:de:1b:3a:
                    f9:93:ac:9a:1c:3b:74:4e:91:37:8c:f7:80:1c:91:
                    74:06:0e:27:9c:25:30:0f:cd:37:35:92:86:79:27:
                    7a:a3:49:2f:80:eb:45:7d:b1:88:e8:47:3d:12:44:
                    3e:7f:90:7c:19:65:d5:ba:50:cf:c2:83:18:93:db:
                    a8:5d:29:03:fe:bf:fd:b5:ad:a1:28:c6:ec:dd:07:
                    a2:8b:83:f4:a0:5f:24:e1:34:60:d2:8f:a2:50:ec:
                    b5:43:30:d3:c8:09:79:f0:f4:4d:fe:8b:f8:0b:29:
                    2d:3f:c8:05:47:c2:5b:a9:a3:78:62:4e:eb:df:6a:
                    68:c6:70:4f:8d:62:d7:69:99:2e:5c:22:94:60:d3:
                    a2:dd:f0:c4:86:a5:f0:0b:c5:80:a0:3a:40:12:0a:
                    ea:da:5c:76:41:d6:13:e1:8d:d4:a6:11:c8:37:17:
                    73:85:09:cd:be:85:6b:4d:07:4e:c0:bc:f9:5e:14:
                    e4:29:0a:de:e3:74:28:c0:f8:f5:05:16:d4:f9:58:
                    37:43:c6:10:e0:d7:8a:5f:bd:6a:fb:8d:72:11:93:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:5C:34:F2:70:91:E6:C1:B0:7A:75:DC:5B:D9:9F:99:39:EC:32
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133382e302f32342d3234203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:31:8b:6b:2d:22:ee:6c:4d:f0:43:4e:05:13:52:26:7d:f9:
         e6:5e:59:11:34:25:de:74:0b:2c:53:a4:5f:55:51:c7:a2:49:
         e3:94:87:70:1e:db:5c:05:30:b4:51:3d:6e:a6:d3:6e:e3:e4:
         68:cd:b7:74:06:7e:f7:43:65:b3:cc:12:0d:5e:e2:e4:6c:be:
         42:7e:63:91:01:19:eb:56:77:17:29:2d:f6:cf:51:48:94:fc:
         4c:35:89:46:1f:73:85:20:80:8f:ea:ae:fc:bd:de:8b:10:03:
         85:66:71:c4:6b:ad:45:25:90:40:1f:98:ac:44:11:91:6e:9b:
         87:01:76:75:79:85:90:42:27:1b:bf:77:9c:54:a2:55:23:8b:
         e2:0b:c0:a0:a2:71:ae:79:42:44:de:9c:01:e1:4d:96:0c:0b:
         5e:36:60:eb:39:b7:21:22:be:68:58:29:c9:24:ab:1c:75:d9:
         c2:50:e5:32:62:37:bf:56:07:72:8e:14:20:cd:13:83:2d:0a:
         fa:2c:22:1c:65:93:1b:e7:44:9d:73:cb:d4:f5:6c:28:f7:f7:
         80:4f:98:da:dc:37:45:09:86:3a:87:db:86:29:39:39:ea:7a:
         d9:6c:c9:1f:80:d4:0f:53:32:40:5d:ef:53:e7:c6:8a:72:b5:
         a9:5f:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 01:22:05 2024 by rpki-client on console-ams.rpki-client.org