Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3234203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32322d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          0bQE1fKr/Z2oPqEgFO+EcV+uMiTZ561uySrBupZYer4=
Subject key identifier:   27:80:EB:C7:47:8E:C0:A3:92:53:5B:3A:E9:16:0A:EE:D5:5A:A1:D3
Certificate issuer:       /CN=1577A1F48EF835698EAFA702E5FD3EE85A3F44B7
Certificate serial:       20AAE2B7B24F294AB601D333BA16BB27496F415B
Authority key identifier: 15:77:A1:F4:8E:F8:35:69:8E:AF:A7:02:E5:FD:3E:E8:5A:3F:44:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3234203d3e20323637343533.roa
Signing time:             Wed 22 May 2024 20:19:37 +0000
ROA not before:           Wed 22 May 2024 20:14:37 +0000
ROA not after:            Wed 21 May 2025 20:19:37 +0000
asID:                     267453
IP address blocks:        181.191.48.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:aa:e2:b7:b2:4f:29:4a:b6:01:d3:33:ba:16:bb:27:49:6f:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1577A1F48EF835698EAFA702E5FD3EE85A3F44B7
        Validity
            Not Before: May 22 20:14:37 2024 GMT
            Not After : May 21 20:19:37 2025 GMT
        Subject: CN=2780EBC7478EC0A392535B3AE9160AEED55AA1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:a5:36:61:18:f6:cd:79:a8:31:87:04:58:
                    30:43:55:0f:f0:38:0d:2b:05:86:ec:d5:a9:dd:ae:
                    48:50:56:4b:55:52:5d:9a:c7:73:20:9a:49:99:ac:
                    7d:80:94:8c:bf:2a:38:3b:2b:da:6e:f6:cf:a9:d8:
                    3b:13:e4:6b:14:81:f0:20:43:8d:37:96:7f:51:ba:
                    c8:75:fe:05:fe:ea:a1:5c:29:ab:c2:00:de:25:a5:
                    15:34:20:b7:e8:dc:00:72:ff:47:0a:b5:30:3f:c6:
                    8f:ea:bf:26:d2:b7:8b:67:3e:c2:b4:20:81:19:97:
                    8e:ab:02:c6:27:28:a6:46:91:0f:3a:4a:69:05:7e:
                    3d:62:20:be:1a:6f:af:93:a8:26:d3:c8:80:96:b9:
                    7e:03:2d:8f:57:a6:50:6c:91:dd:7e:38:60:76:f8:
                    fc:c7:e6:8d:09:98:55:c9:a7:52:e4:e0:58:24:99:
                    0a:8b:05:c5:90:75:bd:65:36:35:34:b5:23:5c:ef:
                    aa:f1:0e:c1:24:bd:40:be:6e:43:82:4c:e9:ae:7c:
                    a9:45:b9:86:26:4d:e9:b3:41:19:ec:44:bc:2e:e6:
                    a1:5d:2d:36:5d:71:9f:20:ee:c0:50:c2:ef:54:62:
                    a2:00:4c:50:5d:fa:fb:22:f8:a1:61:27:72:cc:da:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:EB:C7:47:8E:C0:A3:92:53:5B:3A:E9:16:0A:EE:D5:5A:A1:D3
            X509v3 Authority Key Identifier:
                keyid:15:77:A1:F4:8E:F8:35:69:8E:AF:A7:02:E5:FD:3E:E8:5A:3F:44:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:82:fd:b1:f9:95:d8:6d:50:96:cf:7d:78:37:31:d8:0f:
         b4:8f:05:93:2a:2d:c6:ab:64:d5:5b:63:2e:36:ae:c1:b1:70:
         c6:dd:e7:2c:4e:89:69:9b:cb:d4:cd:7d:76:5b:a6:22:a2:22:
         2f:35:7e:72:57:21:a5:55:74:54:2f:ca:a2:c0:12:01:40:a3:
         03:b7:0f:57:79:08:21:e4:5b:35:d2:4a:d8:42:6f:93:45:dc:
         5d:b0:93:7b:e1:6a:29:fe:e8:74:05:df:c8:e5:4c:54:e1:e9:
         ad:bb:af:9d:09:c2:6a:87:38:7e:d0:df:5d:bf:65:e7:21:9f:
         c2:43:9e:8b:75:b8:27:45:63:b0:f1:2f:ab:bd:32:f5:cd:af:
         e6:71:8f:8f:f0:bb:13:09:53:33:21:16:83:7c:18:ca:92:a7:
         82:56:8c:e7:39:be:ed:8f:a9:14:c0:be:76:84:65:46:0e:c7:
         76:a3:e6:af:51:11:5c:22:5e:4c:12:3b:80:a4:b5:07:62:af:
         92:09:86:77:d5:09:2a:42:6b:42:30:fd:91:a9:8d:78:06:77:
         7d:c6:e0:bc:89:40:a7:a4:40:ae:6c:54:9e:43:f9:cc:dc:13:
         89:70:19:f9:8c:50:9e:9c:77:4f:65:c9:c5:2d:0c:25:65:a4:
         f9:17:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 23:37:23 2024 by rpki-client on console-ams.rpki-client.org