Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa
File:                     3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa (raw, json)
Hash identifier:          sHGuEzXYdGP27YLOjXg77XNlbXpaTu8wnkxLMTjV2Tk=
Subject key identifier:   AF:3F:6F:EA:23:D3:AD:E1:7F:49:5C:77:C0:3B:8A:50:EA:AE:85:70
Certificate issuer:       /CN=2F962990D08F38EAEAD892BB35125EE477497FD2
Certificate serial:       2EFA8B492E9E819C47B68CBD6A21E0DB7478E9EF
Authority key identifier: 2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa
Signing time:             Thu 04 Apr 2024 01:39:40 +0000
ROA not before:           Thu 04 Apr 2024 01:34:40 +0000
ROA not after:            Thu 03 Apr 2025 01:39:40 +0000
asID:                     264086
IP address blocks:        143.208.24.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fa:8b:49:2e:9e:81:9c:47:b6:8c:bd:6a:21:e0:db:74:78:e9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F962990D08F38EAEAD892BB35125EE477497FD2
        Validity
            Not Before: Apr  4 01:34:40 2024 GMT
            Not After : Apr  3 01:39:40 2025 GMT
        Subject: CN=AF3F6FEA23D3ADE17F495C77C03B8A50EAAE8570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:d3:f3:92:b8:76:f9:7f:67:29:e0:1e:9b:
                    a1:13:aa:74:72:d3:7a:be:71:05:b1:f8:f5:d3:37:
                    01:03:73:b1:d8:bd:35:88:75:60:67:90:e0:c3:a1:
                    80:bc:c1:33:52:40:f5:00:01:c7:e5:15:a5:e2:9c:
                    2b:f8:62:6c:fe:3e:ed:b0:97:fe:98:a4:ff:0e:e2:
                    93:c9:0a:47:2b:99:df:e2:08:67:53:8f:87:7b:85:
                    3e:70:1f:0b:62:fa:d9:fe:4a:9b:10:fe:2f:67:2d:
                    09:a9:d2:d4:c0:e7:a1:9e:e0:aa:4a:92:b1:dd:17:
                    2d:c7:e8:a3:d9:80:62:52:a6:52:3e:a2:b5:c6:44:
                    88:1d:db:86:09:98:54:67:06:bd:d1:80:cc:96:d0:
                    b7:bc:7b:21:5b:48:d9:27:2f:08:a2:80:7b:b4:66:
                    d9:f6:ed:f3:12:93:eb:c7:84:69:31:c8:7d:79:8a:
                    47:bf:f9:eb:15:e5:24:d0:e4:6f:72:8c:cc:17:5e:
                    2c:02:6a:1c:e5:88:a8:39:a3:6a:2b:e8:de:72:a1:
                    57:ab:3b:3e:c3:e2:4d:20:3a:ee:71:6e:01:13:62:
                    0b:44:9f:41:11:82:c8:4a:e8:5b:1e:63:a0:21:e5:
                    72:cb:a4:b6:7a:14:da:aa:f3:b7:30:7e:a7:a9:02:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3F:6F:EA:23:D3:AD:E1:7F:49:5C:77:C0:3B:8A:50:EA:AE:85:70
            X509v3 Authority Key Identifier:
                keyid:2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/2F962990D08F38EAEAD892BB35125EE477497FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:bc:ff:c1:a0:d0:1e:d5:59:a5:59:8a:d6:38:37:4b:01:
         f0:38:b5:77:00:03:e4:e0:6a:be:df:6b:3e:33:96:d0:c8:b3:
         e1:e2:0e:7c:89:7c:65:25:96:59:b4:4d:ef:b2:f9:5a:85:1d:
         64:16:30:e5:94:fa:8e:5c:26:bb:3e:0f:20:6b:7b:dd:53:8d:
         01:52:0a:c3:cf:48:9a:cf:96:53:77:ed:81:71:68:13:bd:1f:
         08:47:c2:e1:d5:d1:7c:d6:d7:30:c8:69:a1:7e:56:9e:92:0a:
         be:10:16:7c:f8:83:82:5a:91:15:0f:41:05:1b:6e:a5:35:25:
         ad:80:23:20:50:fa:12:9d:1a:fb:09:7f:17:86:23:7e:0d:aa:
         08:dd:66:21:f4:b5:0b:a0:84:c8:2c:b9:aa:96:a3:56:e9:79:
         bf:2f:f1:3e:c5:1d:41:07:8e:0a:11:a0:0b:c3:a1:f2:f3:b2:
         2c:30:1a:8c:26:f0:38:a0:c5:47:db:aa:c6:f8:d6:99:91:35:
         6b:c0:9d:05:aa:f2:3d:67:48:39:51:c5:67:cb:b2:4a:a0:71:
         84:b4:5f:d3:6b:96:98:9f:e9:a1:72:0f:61:49:e7:91:f7:06:
         39:94:55:68:2e:2c:d9:e0:68:a5:79:88:c4:22:ee:f7:82:60:
         ae:a4:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org