Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa
File:                     3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (raw, json)
Hash identifier:          PskjzKDyBnBZ0HIxFq8aE/KHBImUGO3WI+o6pZCen/g=
Subject key identifier:   A6:46:7A:41:4A:AD:17:B0:F2:24:7E:6D:39:C0:0A:2B:5B:CA:69:EA
Certificate issuer:       /CN=3D997FCAAB2C81CA2480094ECA0FF3AE5410C985
Certificate serial:       28F820B7E66CF4768170031C21D8D73CA9404E10
Authority key identifier: 3D:99:7F:CA:AB:2C:81:CA:24:80:09:4E:CA:0F:F3:AE:54:10:C9:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D997FCAAB2C81CA2480094ECA0FF3AE5410C985.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa
Signing time:             Mon 28 Oct 2024 18:48:43 +0000
ROA not before:           Mon 28 Oct 2024 18:43:43 +0000
ROA not after:            Mon 27 Oct 2025 18:48:43 +0000
asID:                     271297
IP address blocks:        192.231.175.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f8:20:b7:e6:6c:f4:76:81:70:03:1c:21:d8:d7:3c:a9:40:4e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D997FCAAB2C81CA2480094ECA0FF3AE5410C985
        Validity
            Not Before: Oct 28 18:43:43 2024 GMT
            Not After : Oct 27 18:48:43 2025 GMT
        Subject: CN=A6467A414AAD17B0F2247E6D39C00A2B5BCA69EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:e2:d8:76:47:28:d8:43:8f:31:8e:c1:85:
                    d5:0b:54:c0:b6:2c:44:19:cf:60:2c:e8:a3:35:bc:
                    b6:ce:af:88:d1:2f:4a:86:e8:f3:23:34:51:4a:ea:
                    1b:70:82:35:6f:de:94:44:6c:ad:d3:1e:4d:4c:fd:
                    de:3f:0c:68:69:67:af:71:38:18:b1:c2:6d:0a:50:
                    45:c3:be:f5:f5:f9:3e:d6:c1:39:12:c7:07:35:54:
                    3c:08:e7:0a:0d:47:5c:a0:a0:ff:8e:a3:3b:22:b0:
                    4c:de:bf:7d:65:a6:ec:00:3a:33:c8:01:33:87:ae:
                    5f:fd:0a:f2:cc:19:6f:fc:fd:93:bc:d6:18:23:30:
                    4b:0b:0f:b9:be:cc:4c:f9:a7:90:93:69:84:57:1d:
                    4c:74:44:28:fb:f9:1b:1d:4f:2c:22:c8:d1:53:d2:
                    3c:f9:19:8c:e4:b1:1c:72:57:b1:4d:8a:cc:56:4a:
                    97:30:d8:82:06:2c:91:f3:84:46:8b:23:4a:0b:ef:
                    39:e1:3e:c8:d7:6e:b3:7e:a9:f1:3d:dc:c7:88:99:
                    bc:61:09:04:95:40:96:2b:e8:37:6f:ac:e4:36:fb:
                    7a:0f:a7:41:1b:3e:98:4e:2c:66:aa:6a:7e:ec:d7:
                    dc:01:8b:4a:30:63:3b:82:32:ee:ee:9d:57:db:91:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:46:7A:41:4A:AD:17:B0:F2:24:7E:6D:39:C0:0A:2B:5B:CA:69:EA
            X509v3 Authority Key Identifier:
                keyid:3D:99:7F:CA:AB:2C:81:CA:24:80:09:4E:CA:0F:F3:AE:54:10:C9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3D997FCAAB2C81CA2480094ECA0FF3AE5410C985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D997FCAAB2C81CA2480094ECA0FF3AE5410C985.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:a9:85:a5:8e:98:c1:7b:7d:a5:18:b8:aa:3f:d7:46:e7:
         24:94:8b:b4:a2:0e:a7:11:34:9a:c6:1b:6e:47:32:51:bc:d9:
         61:ff:53:02:2e:3b:30:e2:c1:0b:01:30:da:c5:b4:a5:e4:a1:
         dd:1e:4a:91:26:fe:c5:ad:5d:71:c0:bc:fb:11:92:89:76:32:
         22:26:a5:12:d9:ad:09:ea:c5:7c:97:c9:b2:81:d0:8e:93:73:
         be:d5:01:94:26:ec:0b:1f:06:9c:7b:79:df:e7:75:2a:6f:cc:
         e2:eb:93:a5:51:75:ca:73:8b:42:b1:84:84:bd:19:10:39:6b:
         aa:15:a1:a1:f2:15:13:19:6e:fc:20:f4:1d:6b:fd:3d:09:85:
         85:63:b0:19:ab:0e:53:c7:8a:4d:a5:70:b6:74:59:a5:b8:5a:
         36:cd:4b:fa:3d:a0:b9:eb:af:b3:64:39:ef:b6:0a:43:10:a0:
         44:8a:46:76:ec:6d:b9:16:90:a8:d8:a2:11:92:01:09:8a:ea:
         8e:e4:d5:c1:a3:59:26:38:aa:c1:78:78:1e:38:92:ff:fa:91:
         49:fd:7a:63:2c:90:94:3c:0b:7a:dd:cc:ba:c7:18:52:6b:82:
         5e:c0:46:21:12:ec:7f:70:9f:1e:91:e2:61:30:39:26:f5:0b:
         9f:11:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:37 2024 by rpki-client on console-fra.rpki-client.org