Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e31312e302f32342d3234203d3e20323632393838.roa
File:                     3138362e3235312e31312e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          LZOuuXsRKsdWyO9Ty8vZxn54+6kalrKzOql0ZyBLc54=
Subject key identifier:   42:F5:EA:08:D5:21:29:BB:19:B9:C8:DF:05:AC:DE:4A:AE:E6:E1:69
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       4E41F6CF45B066500A93280768826BFB96017B41
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e31312e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:51 +0000
ROA not before:           Mon 15 Jul 2024 15:13:51 +0000
ROA not after:            Mon 14 Jul 2025 15:18:51 +0000
asID:                     262988
IP address blocks:        186.251.11.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:f6:cf:45:b0:66:50:0a:93:28:07:68:82:6b:fb:96:01:7b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:51 2024 GMT
            Not After : Jul 14 15:18:51 2025 GMT
        Subject: CN=42F5EA08D52129BB19B9C8DF05ACDE4AAEE6E169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:6f:00:9e:eb:67:fb:0f:f6:7f:15:5d:91:
                    02:bc:a1:75:5f:22:d7:6f:52:5b:ce:5f:3e:7c:39:
                    d0:96:40:70:3e:68:49:60:06:a1:6d:26:71:59:ac:
                    f6:e9:b8:a8:7e:b4:ef:b7:bc:2b:40:ce:92:42:2f:
                    42:81:9d:91:1f:ff:2d:e0:43:1e:ab:25:b9:44:6b:
                    f5:c7:c0:5f:02:92:b1:fa:9a:81:e8:dc:2f:ea:89:
                    cb:d0:5a:08:36:72:ee:b0:8c:17:ca:43:7a:fb:89:
                    d1:23:9e:e7:1c:c3:e0:94:c0:5b:bc:d9:fe:20:2b:
                    c4:77:12:9d:54:07:fa:fe:24:9f:69:1d:39:23:cd:
                    77:69:05:3e:a3:70:05:e9:6f:08:3a:d1:57:f2:9e:
                    e7:9e:06:22:34:54:f7:42:17:31:46:df:0b:6f:97:
                    a2:a9:35:bf:51:b3:09:53:5d:ad:90:42:a0:6e:75:
                    08:b9:f4:1b:55:f0:20:45:5b:a6:e8:99:13:98:b1:
                    95:6c:67:f2:ba:d9:66:6e:34:1a:44:53:03:87:99:
                    67:84:ba:34:d4:ef:85:69:b1:7e:0d:c8:14:76:86:
                    85:95:68:5c:60:6e:ed:46:a9:e5:f8:d6:30:a7:9b:
                    11:96:a7:74:46:91:7d:91:ae:a3:7e:c2:99:e7:3d:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F5:EA:08:D5:21:29:BB:19:B9:C8:DF:05:AC:DE:4A:AE:E6:E1:69
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e31312e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:25:98:e0:9b:2d:a5:51:ec:0f:45:41:f7:55:0f:e7:97:a7:
         d4:d1:a5:13:61:7d:ad:9b:04:29:a0:2e:6a:0e:11:8c:14:8d:
         11:5d:ef:bc:b3:72:5d:12:00:b1:05:07:63:27:a6:59:70:e1:
         1e:c1:f5:98:e8:85:1c:4a:a5:c2:a8:fb:07:ff:d1:f3:58:7b:
         81:3a:01:d0:c2:ad:f7:6e:10:49:6d:e4:90:98:29:f6:04:3e:
         a6:56:87:b2:8e:cc:08:31:15:11:e0:08:6c:75:65:62:fe:1b:
         30:17:f4:a8:64:b3:79:2c:33:80:00:40:03:c7:b9:43:59:ee:
         15:13:b5:36:b0:c3:f3:76:b8:7b:58:30:12:c7:5f:8d:16:8c:
         d0:64:c0:00:0c:65:37:bb:39:1c:fc:d9:61:b1:a2:ce:ef:9e:
         5c:08:5a:d3:55:b8:4f:7e:b9:0c:08:13:13:ff:d5:63:ac:39:
         5a:2e:7d:36:7f:50:e7:25:67:15:29:e3:37:18:52:c9:51:20:
         9e:10:d0:48:f2:ab:2c:da:af:70:3a:c5:a0:78:08:dc:dd:c1:
         37:e2:1e:b9:a2:bd:8f:2c:0f:8f:82:65:0f:71:3b:08:8a:20:
         94:1e:d1:5f:99:11:84:d9:c6:9a:1c:06:fa:10:63:10:03:0d:
         6d:9e:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:37:42 2024 by rpki-client on console-fra.rpki-client.org