Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          QpRzZtvZ1ppJ4RYRDYeIdori6H1VeAgaPcL2/DKmX7w=
Subject key identifier:   FE:C3:CA:D1:FD:6E:39:34:10:94:74:43:C2:69:63:1A:70:B2:8D:15
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       4F5F7A5AD9D43DC8D0450633CBD8DEACA70D214B
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Thu 04 Apr 2024 00:34:28 +0000
ROA not before:           Thu 04 Apr 2024 00:29:28 +0000
ROA not after:            Thu 03 Apr 2025 00:34:28 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5f:7a:5a:d9:d4:3d:c8:d0:45:06:33:cb:d8:de:ac:a7:0d:21:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Apr  4 00:29:28 2024 GMT
            Not After : Apr  3 00:34:28 2025 GMT
        Subject: CN=FEC3CAD1FD6E393410947443C269631A70B28D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:d0:76:3c:74:63:be:93:f5:d5:f9:31:cb:
                    8a:99:04:22:c0:01:6c:b0:2b:80:3a:31:89:5e:70:
                    7c:1a:78:ba:7b:fa:47:ed:31:90:c9:02:5b:95:17:
                    28:4a:d0:93:0d:6b:82:1a:9f:8b:23:3a:a6:43:09:
                    db:88:06:5c:9e:15:00:05:36:27:40:7a:a6:90:13:
                    3c:0a:81:ca:44:1d:d5:25:c6:63:19:6b:0a:0b:07:
                    77:85:52:dd:b9:bd:14:b6:23:aa:85:8e:89:22:e9:
                    ab:39:44:9d:19:81:0f:49:c6:7a:e5:0e:06:24:f8:
                    c7:7a:32:8a:26:b4:5b:a3:47:91:d2:e9:fd:4c:e5:
                    2b:e9:36:ca:ba:53:4f:45:62:11:96:f5:76:70:2f:
                    b0:fb:8f:d9:bd:39:ac:6c:3e:8e:e5:f8:3d:ec:09:
                    86:d6:1a:8d:4c:8a:a5:22:7a:51:6c:7e:bf:7b:f1:
                    82:5c:db:6b:39:07:23:21:8a:ab:00:fe:cf:87:c5:
                    b9:61:9f:48:7d:c4:34:8c:f6:40:73:8c:5d:97:de:
                    12:e9:e8:29:fd:3a:b0:1d:c5:9d:05:f6:8b:f7:2d:
                    4f:7f:19:b7:be:7b:82:ab:9b:03:bd:0f:5f:c5:af:
                    7d:20:12:aa:5d:84:3b:96:24:c2:17:ec:a9:5d:33:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C3:CA:D1:FD:6E:39:34:10:94:74:43:C2:69:63:1A:70:B2:8D:15
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:15:c8:8e:fe:1c:5a:ed:0d:67:f6:5b:82:01:11:6d:1d:
         6b:9f:e1:3d:05:2b:27:e0:c8:12:15:5a:cd:f5:62:6a:f9:db:
         01:41:cc:13:5c:36:03:c0:86:d7:16:d0:cb:35:c4:6e:e4:d5:
         ec:7b:8c:24:03:b1:a0:a4:1d:0a:32:4d:84:46:73:72:88:7f:
         a7:d5:56:67:a1:d9:8f:c7:bb:8c:2b:b6:4f:b2:c6:c9:7b:c8:
         69:ee:4c:9a:ae:91:54:2d:06:1f:07:cd:3a:75:f1:e3:90:46:
         18:ae:90:15:d1:04:a3:6e:ce:96:62:ce:eb:98:68:85:4d:16:
         3a:17:14:47:1a:85:e2:57:b6:08:f6:80:cf:6a:00:b0:74:9c:
         43:2e:f5:eb:3c:8d:78:85:81:7c:04:f3:c0:2c:fe:37:0a:ed:
         d2:fb:f8:69:5c:da:dd:fe:73:21:ad:e5:bb:54:9e:94:a8:8b:
         60:44:ae:94:1d:fe:ea:d5:6e:0d:fc:60:d5:85:6c:6d:38:6d:
         41:0a:10:bb:60:c3:81:fa:f3:d0:23:46:f0:c5:94:0e:35:90:
         48:14:8b:9f:39:48:fd:70:62:c5:62:d8:b5:27:70:46:c4:06:
         1f:34:10:9d:a4:cc:67:8b:c7:76:c8:ff:1e:b3:5a:26:02:b4:
         4f:54:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 17:58:30 2024 by rpki-client on console-ams.rpki-client.org