Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32322d3232203d3e20323634303836.roa
File:                     3134332e3230382e32342e302f32322d3232203d3e20323634303836.roa (raw, json)
Hash identifier:          mRUzEJYHv5YgkUtLY3L4AdNT0TI4LHfborGS4ksTSFA=
Subject key identifier:   19:6C:F4:15:43:13:0A:5A:EF:14:96:A0:34:83:83:D0:C6:9D:E3:7A
Certificate issuer:       /CN=2F962990D08F38EAEAD892BB35125EE477497FD2
Certificate serial:       6F8CE151516AD2BE6901D323C0E2536DD3879361
Authority key identifier: 2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32322d3232203d3e20323634303836.roa
Signing time:             Thu 04 Apr 2024 01:39:40 +0000
ROA not before:           Thu 04 Apr 2024 01:34:40 +0000
ROA not after:            Thu 03 Apr 2025 01:39:40 +0000
asID:                     264086
IP address blocks:        143.208.24.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8c:e1:51:51:6a:d2:be:69:01:d3:23:c0:e2:53:6d:d3:87:93:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F962990D08F38EAEAD892BB35125EE477497FD2
        Validity
            Not Before: Apr  4 01:34:40 2024 GMT
            Not After : Apr  3 01:39:40 2025 GMT
        Subject: CN=196CF41543130A5AEF1496A0348383D0C69DE37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:ee:9f:45:45:89:33:35:0e:09:5b:35:72:
                    9f:ad:b8:e1:e4:1f:a5:c5:57:98:83:54:b9:45:4c:
                    a7:23:d1:e4:16:43:ef:e0:b6:ac:7e:f5:fe:08:c9:
                    02:37:c8:c7:72:88:8f:40:76:11:92:6a:7f:05:bf:
                    57:d2:86:11:2f:cb:d5:b8:0a:14:18:cc:e6:02:6a:
                    12:08:2c:2e:4a:a7:e4:32:50:ea:73:f9:ba:68:8e:
                    1c:9c:7f:cc:ea:d4:94:23:68:fc:0e:37:fd:bb:0d:
                    69:4a:c4:e8:29:b6:33:d5:e4:2c:fa:4f:80:ce:19:
                    86:67:7b:3a:4c:cf:ea:2a:72:f3:8b:56:a7:c0:56:
                    12:18:18:c7:18:36:52:d4:50:39:34:ea:1b:cc:90:
                    83:19:fe:19:7a:7c:81:d7:eb:69:82:e4:eb:15:ab:
                    f5:08:6c:1c:ae:21:27:15:3b:d3:c4:75:a2:f5:d4:
                    4b:33:e5:41:ec:d4:8b:06:8f:e1:ec:38:f1:9c:78:
                    e6:f7:fe:43:9e:4a:4e:da:fb:2f:a7:ef:62:82:9d:
                    44:29:65:f7:80:af:1b:07:51:6e:dc:ca:0f:64:f2:
                    e1:58:0c:08:c5:82:9a:2b:9b:e7:cc:3f:dd:5a:93:
                    e4:8f:0c:96:e5:55:86:52:e5:88:25:18:40:a1:9e:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:F4:15:43:13:0A:5A:EF:14:96:A0:34:83:83:D0:C6:9D:E3:7A
            X509v3 Authority Key Identifier:
                keyid:2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/2F962990D08F38EAEAD892BB35125EE477497FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32322d3232203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:a7:66:ee:12:27:67:06:57:7f:98:93:0f:b3:8f:b5:87:
         53:01:18:3c:7c:ed:9b:ea:34:2b:23:76:35:12:65:d8:85:e1:
         e6:df:96:20:d7:97:44:0f:fa:ac:32:ca:e9:52:90:72:44:4c:
         e5:0c:82:f7:ba:46:d2:e6:72:fb:b1:b7:6a:5f:71:88:2f:cb:
         26:e8:d8:27:88:0d:1f:ed:e9:b6:7f:6e:d1:04:2d:28:51:94:
         5b:aa:fa:64:ad:73:ed:7c:ae:a1:41:02:ae:42:f2:13:5a:fb:
         95:7f:fa:78:ea:ce:10:5b:ee:be:df:6d:0c:c5:a3:60:8a:61:
         b7:f6:cb:2c:bd:d3:2f:18:9f:c9:38:4b:67:c2:cb:16:78:5d:
         92:fb:ed:8e:c7:19:56:74:2b:f0:ec:fa:f4:ca:2d:84:a1:f7:
         12:32:30:b4:f7:a7:6c:41:d8:86:71:65:be:07:bd:c1:bc:25:
         56:0a:99:66:be:20:8e:4a:54:c7:c5:7e:1f:aa:27:a6:10:68:
         21:d3:bb:98:46:75:ca:11:1e:57:13:48:a7:55:33:36:d5:ae:
         a9:16:d5:cf:78:d8:bb:a9:e8:5e:1d:fa:a4:f1:e4:7c:93:a7:
         0f:b7:8d:44:0f:b4:b7:41:36:58:cd:49:bd:8c:10:bb:95:a0:
         1e:bc:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org