Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa
File:                     3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa (raw, json)
Hash identifier:          y1ULYNHS66H36Q4E3YUEsKbXgeoqQ7qE0twh4YkvG9Q=
Subject key identifier:   35:1A:58:C8:E1:63:0E:9E:80:26:77:FE:93:61:AD:EC:24:1B:F5:A7
Certificate issuer:       /CN=D42DB627CBFC83CBC3B89126059C6D7F3A447138
Certificate serial:       FC91777432EE3BAC9CB376A7D7C47EAFEC9C33
Authority key identifier: D4:2D:B6:27:CB:FC:83:CB:C3:B8:91:26:05:9C:6D:7F:3A:44:71:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42DB627CBFC83CBC3B89126059C6D7F3A447138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa
Signing time:             Thu 25 Apr 2024 00:36:01 +0000
ROA not before:           Thu 25 Apr 2024 00:31:01 +0000
ROA not after:            Thu 24 Apr 2025 00:36:01 +0000
asID:                     270409
IP address blocks:        190.89.198.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fc:91:77:74:32:ee:3b:ac:9c:b3:76:a7:d7:c4:7e:af:ec:9c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D42DB627CBFC83CBC3B89126059C6D7F3A447138
        Validity
            Not Before: Apr 25 00:31:01 2024 GMT
            Not After : Apr 24 00:36:01 2025 GMT
        Subject: CN=351A58C8E1630E9E802677FE9361ADEC241BF5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:3d:38:47:d3:b5:46:90:2a:b6:04:d2:f6:
                    c0:33:4c:4b:10:b3:cf:bf:96:2f:5f:d3:c1:0f:92:
                    5f:98:35:44:c3:aa:55:11:d7:e1:38:ed:76:54:c6:
                    52:cf:9f:fe:ec:f0:5d:38:ca:f4:22:9b:dc:3f:36:
                    1a:55:10:a9:a6:ba:47:ce:ed:f1:5c:e0:43:06:88:
                    9c:46:6b:91:60:77:00:b8:79:e6:8a:ec:c7:fb:22:
                    94:0d:be:93:c7:63:66:2a:12:8f:72:bf:67:88:f5:
                    62:db:7c:ae:50:c4:6c:dd:54:96:86:ea:bf:c1:00:
                    72:fe:19:ed:0b:f6:f4:f4:49:88:c1:25:42:6d:24:
                    f3:92:ab:d5:da:fc:b0:78:ef:d5:c8:0b:a8:45:ba:
                    35:1d:14:d4:e6:d8:a6:d3:66:4c:3b:36:98:65:ac:
                    b8:22:80:4c:10:ee:6f:c8:ae:94:ad:da:6a:ec:f2:
                    a1:d3:7e:33:01:5e:4e:6b:2e:d7:0a:25:26:4a:5d:
                    ab:16:a0:82:8f:d8:0e:23:dd:d0:80:84:3d:02:75:
                    1a:e5:eb:04:dc:57:fc:e8:d9:66:0a:6e:84:71:15:
                    e1:3f:4e:15:1e:a6:68:4c:a0:af:00:c0:25:bf:93:
                    6b:d3:ac:a7:1b:c3:8d:ed:e1:61:3a:48:96:c1:00:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:58:C8:E1:63:0E:9E:80:26:77:FE:93:61:AD:EC:24:1B:F5:A7
            X509v3 Authority Key Identifier:
                keyid:D4:2D:B6:27:CB:FC:83:CB:C3:B8:91:26:05:9C:6D:7F:3A:44:71:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/D42DB627CBFC83CBC3B89126059C6D7F3A447138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42DB627CBFC83CBC3B89126059C6D7F3A447138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:9b:94:ed:38:5c:93:f7:ea:15:61:17:71:f7:09:75:9c:5b:
         20:60:52:b9:f0:be:fc:0e:c3:b5:d4:98:9c:c0:7d:18:da:f7:
         ff:e5:eb:d7:e0:db:9e:a2:d1:09:7d:c0:33:51:18:58:e9:cd:
         59:6f:c9:01:f3:2b:ee:09:db:3e:f6:82:bc:d4:74:c0:d5:ab:
         48:6b:4b:a1:0a:71:30:8d:77:1b:2b:83:7d:11:70:f2:f3:29:
         32:e9:b9:d7:1b:14:74:e6:7f:53:2a:4a:e4:7b:5d:92:ef:ce:
         74:1a:56:3b:9a:52:7f:d2:63:24:bc:44:a3:f1:9c:07:4f:4e:
         e3:78:af:e3:b7:33:53:f8:da:1a:fb:51:58:07:11:66:6d:b8:
         d7:51:f3:c5:d7:04:7a:c6:fa:6b:38:7d:c5:62:79:1b:71:ee:
         e6:22:14:6d:55:b7:53:33:42:e3:e0:e9:36:98:4f:27:a5:26:
         bc:05:8b:ee:28:1b:76:ca:d2:21:8b:2c:41:4b:18:e6:13:81:
         50:b4:ae:ed:5f:4d:c0:8c:d2:e1:bc:db:35:5a:36:4d:c6:3f:
         48:37:b7:95:ed:f0:8b:a8:95:f5:e4:ba:69:e9:8b:88:bf:72:
         b7:e1:0d:f2:74:8d:dc:dc:e1:da:60:63:f1:54:ee:2d:bc:9f:
         df:d5:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 13:48:51 2024 by rpki-client on console-fra.rpki-client.org