Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38322e302f32342d3234203d3e20323632393838.roa
File:                     3136382e39302e38322e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          hBetY5AywBfD+QUbAwFD53NrItO3Tr64EeCYZLO4ZxE=
Subject key identifier:   E9:AC:8F:31:93:0D:6B:09:A8:EB:65:E9:94:28:38:9E:6B:FE:CD:12
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       0B39504427D58D67F81C56EC2CAD67D89AB2352E
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38322e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:40 +0000
ROA not before:           Mon 15 Jul 2024 15:13:40 +0000
ROA not after:            Mon 14 Jul 2025 15:18:40 +0000
asID:                     262988
IP address blocks:        168.90.82.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:39:50:44:27:d5:8d:67:f8:1c:56:ec:2c:ad:67:d8:9a:b2:35:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:40 2024 GMT
            Not After : Jul 14 15:18:40 2025 GMT
        Subject: CN=E9AC8F31930D6B09A8EB65E99428389E6BFECD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ca:bd:db:1d:f8:27:91:56:56:8e:86:60:d4:
                    b4:3c:fc:74:f8:f2:bf:c1:f6:53:f7:1b:f9:2f:20:
                    c1:46:04:24:ca:8e:38:9a:85:cb:9a:76:40:36:c1:
                    bd:5f:77:96:3b:aa:05:61:83:09:42:70:85:2f:39:
                    8f:fb:f6:14:79:2b:f2:ed:cd:83:11:f4:63:25:57:
                    28:bb:5b:d4:00:31:cb:f3:22:dd:28:a9:46:e6:8b:
                    27:08:53:d0:b8:15:be:f2:8d:e7:ae:19:b1:ad:b2:
                    d4:ef:85:fb:1d:6e:29:c6:68:7e:61:43:f6:6c:84:
                    99:eb:d0:67:42:2a:fe:7f:71:b7:46:00:72:f7:65:
                    6c:ba:38:27:7d:6b:21:62:90:77:e7:5a:63:72:8c:
                    b8:be:ea:4c:95:3a:ca:a0:24:7c:ca:73:6b:44:51:
                    06:65:22:7c:0f:d1:c4:3a:82:56:c2:c4:cc:6c:16:
                    a1:1c:1c:92:04:94:9e:3c:e9:ef:83:60:ca:6d:2a:
                    6b:db:f9:e8:ab:5d:e4:68:94:7d:ed:19:33:8e:c9:
                    1c:3a:09:10:5a:f5:ba:7d:53:17:70:28:d3:bb:56:
                    8c:5b:68:52:d1:b5:ad:f4:43:41:0c:6a:04:6a:d3:
                    32:62:70:46:97:e8:38:31:27:58:2d:c0:d5:00:98:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:8F:31:93:0D:6B:09:A8:EB:65:E9:94:28:38:9E:6B:FE:CD:12
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38322e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:45:b6:d7:49:a1:ac:cd:5f:30:8a:60:1c:51:7c:a7:53:
         28:28:c8:4c:e1:a1:fb:38:bb:34:2b:8b:c4:c2:73:b5:d2:f9:
         d0:67:af:f7:d8:25:7d:e5:c8:50:fb:98:26:f1:3b:e6:8c:a5:
         2e:f6:36:42:74:54:a1:3a:f3:37:53:38:7c:8e:d1:cd:1b:f1:
         90:db:9d:32:f2:0a:e6:29:2b:38:a0:f1:06:5a:05:49:90:f7:
         29:b4:b0:85:10:88:fb:5e:73:ee:f0:77:dc:58:a4:29:bf:de:
         b8:2a:d4:40:20:bf:a7:19:4f:af:35:33:c9:37:ef:9b:6c:64:
         08:8f:4f:cd:77:70:34:aa:a2:c7:ed:1a:b3:07:1a:2f:8f:e3:
         71:1a:90:2b:fd:89:98:5f:df:0b:a0:fd:a3:6d:df:75:bd:bc:
         ab:d9:75:6f:73:24:c6:03:b1:61:f7:11:4b:ab:43:f7:b7:09:
         7f:3b:63:40:06:3e:f9:d9:c0:e1:b0:c5:f2:bc:bd:1e:03:b6:
         1a:40:42:54:69:be:82:fb:c4:58:05:3a:9c:c8:9b:d5:47:6d:
         0f:1e:48:16:b9:b1:7d:57:54:0e:71:32:da:c0:61:ca:00:7c:
         87:a2:60:0c:17:b4:e2:43:45:66:54:24:1d:ba:2c:7f:96:1e:
         57:b2:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:37:42 2024 by rpki-client on console-fra.rpki-client.org