Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32342d3234203d3e20323634303836.roa
File:                     3134332e3230382e32342e302f32342d3234203d3e20323634303836.roa (raw, json)
Hash identifier:          8CZREIjlS0zi2D/nwkjqZKREBRxU4GmQnUEU8BC0mLA=
Subject key identifier:   FD:8B:4F:13:E0:73:07:2B:C6:6D:F6:FE:8A:24:A7:8F:F0:FA:CF:EF
Certificate issuer:       /CN=2F962990D08F38EAEAD892BB35125EE477497FD2
Certificate serial:       51981F6B06372F74E7493FFBEFC229E4037C4164
Authority key identifier: 2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32342d3234203d3e20323634303836.roa
Signing time:             Thu 04 Apr 2024 01:39:39 +0000
ROA not before:           Thu 04 Apr 2024 01:34:39 +0000
ROA not after:            Thu 03 Apr 2025 01:39:39 +0000
asID:                     264086
IP address blocks:        143.208.24.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:98:1f:6b:06:37:2f:74:e7:49:3f:fb:ef:c2:29:e4:03:7c:41:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F962990D08F38EAEAD892BB35125EE477497FD2
        Validity
            Not Before: Apr  4 01:34:39 2024 GMT
            Not After : Apr  3 01:39:39 2025 GMT
        Subject: CN=FD8B4F13E073072BC66DF6FE8A24A78FF0FACFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:5d:7f:db:fc:4b:3c:16:db:a7:2e:0e:8e:
                    a6:ce:53:00:c1:69:4b:39:cd:aa:91:3c:ea:66:8b:
                    00:aa:b6:8e:9c:c1:c4:8c:f9:5b:b7:e8:5b:66:2e:
                    01:7d:bb:84:04:eb:09:b6:f7:e8:17:84:42:82:41:
                    9e:66:92:2c:02:8e:2a:c7:bf:f9:12:62:3f:ac:54:
                    27:8b:b9:44:70:91:16:44:ad:81:0c:c5:ca:a2:c9:
                    27:75:bf:ad:1d:45:ac:ab:46:0b:c1:27:c2:ad:9a:
                    cd:8a:cc:59:6a:74:af:38:0b:af:08:81:f5:28:4b:
                    e5:09:26:ed:7a:2f:7c:5a:7c:54:3b:dd:f9:a7:25:
                    d9:a7:8e:43:0a:1b:f3:0e:5f:16:de:c0:d8:67:31:
                    24:d6:81:77:79:ab:8c:eb:51:df:b2:50:45:02:64:
                    07:e7:2b:e2:bb:76:12:8e:c3:74:78:f6:c1:94:fb:
                    0b:66:f4:7d:fb:3e:e8:d6:7b:89:19:07:4b:d9:10:
                    62:81:b3:6e:d3:5b:10:80:50:1f:b1:fa:fc:e1:ab:
                    c1:fc:23:75:2d:c7:53:b6:34:97:6b:fa:38:38:65:
                    e5:f1:d6:cf:e7:0e:e3:a8:bd:12:69:73:6f:51:ee:
                    9d:8c:84:8f:85:b7:2c:13:93:91:98:f3:0a:4d:c5:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8B:4F:13:E0:73:07:2B:C6:6D:F6:FE:8A:24:A7:8F:F0:FA:CF:EF
            X509v3 Authority Key Identifier:
                keyid:2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/2F962990D08F38EAEAD892BB35125EE477497FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/3134332e3230382e32342e302f32342d3234203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:cd:0a:ad:ac:0a:3e:4b:3a:2e:f5:50:82:0b:93:af:d1:
         12:ca:84:88:b4:a9:65:43:d6:ec:9c:9f:b5:30:71:31:f4:30:
         83:8d:be:32:f7:e9:8b:5d:8b:56:ca:7b:d8:7d:08:57:16:16:
         84:96:0d:62:1a:fd:e9:bc:df:96:28:d7:a0:fd:07:16:22:d8:
         9e:0d:de:2f:72:cd:8b:65:b8:c3:98:7c:ff:b5:fc:e7:8e:f3:
         64:0c:99:6b:e2:8f:e0:f8:8a:f6:49:e7:43:5a:99:0f:93:7f:
         92:12:78:f8:de:85:c9:df:d2:73:2a:1c:0c:e9:00:e4:f5:11:
         86:a1:2f:43:ae:cd:c9:b3:9b:77:6c:11:bb:2e:22:e9:37:70:
         c3:cb:88:bb:1f:2b:df:3e:ca:51:48:41:a4:e6:11:4b:62:b2:
         7d:b4:f8:a2:e3:6b:04:52:db:dd:8e:b6:d7:af:bc:e4:06:00:
         a0:e0:8a:14:22:03:a8:2b:97:69:24:11:13:0f:0d:7b:95:78:
         25:74:eb:df:10:5a:ba:39:ad:08:7f:da:96:75:f3:6c:0c:6c:
         e7:54:67:2c:89:70:5c:d8:f5:41:92:74:22:62:76:44:69:18:
         f6:37:96:6f:e3:74:0f:1a:de:76:a3:86:0b:cc:2c:0b:67:68:
         a0:50:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org