Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa
File:                     3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa (raw, json)
Hash identifier:          REdu22D3o1RoSHQYPV9VoVMnDhNNrGi0c50Q9Xmw6LY=
Subject key identifier:   5B:C0:79:B9:4F:12:F7:15:D5:D8:33:A9:4D:EE:3A:45:A9:54:8F:C7
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       2498AB119F9BBBFA082F3D1DE1AB35494CA9CD50
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa
Signing time:             Thu 31 Oct 2024 16:59:29 +0000
ROA not before:           Thu 31 Oct 2024 16:54:29 +0000
ROA not after:            Thu 30 Oct 2025 16:59:29 +0000
asID:                     265974
IP address blocks:        164.163.212.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:98:ab:11:9f:9b:bb:fa:08:2f:3d:1d:e1:ab:35:49:4c:a9:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:29 2024 GMT
            Not After : Oct 30 16:59:29 2025 GMT
        Subject: CN=5BC079B94F12F715D5D833A94DEE3A45A9548FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:7b:99:0b:2b:b1:35:3a:62:47:21:66:c1:
                    10:0f:00:0e:12:8b:5f:c1:1c:f2:9b:21:9b:25:60:
                    d7:f3:4c:28:5c:26:a9:7a:31:b5:fc:40:5d:e9:47:
                    e1:eb:bd:b6:35:47:24:b3:f5:1b:9b:f1:a4:17:1b:
                    98:82:a6:a4:30:fe:4f:25:a0:cb:2a:81:62:1a:9d:
                    92:cb:b1:0c:c0:8a:ed:1a:98:dc:2e:03:d1:cf:91:
                    3f:03:a1:d5:ea:38:19:b0:75:78:74:b2:2f:ca:3e:
                    46:a8:64:0f:64:b2:66:41:d1:97:d8:97:0e:55:03:
                    02:e3:95:31:47:95:83:55:87:f6:83:60:b1:3a:f8:
                    66:6a:c7:66:d1:57:35:24:f2:f9:bf:12:1a:ac:a0:
                    c4:2f:50:6a:f1:89:2a:07:6a:42:ef:72:6b:ae:09:
                    f8:c5:8c:c0:5d:08:6b:03:41:8d:c0:67:b3:80:a3:
                    07:2a:d3:55:39:6b:87:5e:40:f2:c1:1a:ff:6b:f4:
                    c9:fe:59:67:48:32:56:25:21:29:98:45:3a:fe:fc:
                    3b:a4:ae:be:17:db:6c:f6:ad:a4:73:1d:73:7b:a2:
                    df:33:4e:d2:de:4a:b1:03:c6:84:28:8e:72:f3:91:
                    0a:09:60:37:ce:1c:f7:b8:a7:46:63:65:4b:ca:42:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C0:79:B9:4F:12:F7:15:D5:D8:33:A9:4D:EE:3A:45:A9:54:8F:C7
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:82:a0:38:ba:2d:c4:51:f1:9a:60:61:9f:98:ff:e6:02:61:
         cd:eb:13:3d:9c:67:69:51:59:40:5a:2c:e9:d2:03:19:17:a1:
         f3:cb:09:16:1f:d4:b6:f1:90:d0:bc:36:93:67:c7:ae:b8:ce:
         a7:5f:7d:00:e7:fc:a0:a4:fa:7e:68:c5:bc:09:62:ec:6c:6e:
         56:d9:7b:fd:6d:1b:58:46:15:55:38:69:e4:88:20:a7:eb:b4:
         72:e8:0f:d8:2b:69:1e:0f:6e:12:0a:93:68:dc:5f:8d:01:9d:
         dd:8c:ff:01:8a:a7:50:dc:93:e4:ac:42:02:5c:c7:d4:c8:00:
         e0:50:ec:d9:d5:db:07:0d:e1:15:f3:69:5e:00:69:4a:27:f6:
         89:5f:e3:74:a6:52:fa:71:c0:11:76:25:95:65:c9:84:71:a9:
         19:f0:df:f7:f1:ab:72:fe:5a:80:94:d3:08:20:99:82:7e:ae:
         e7:8f:a6:02:48:03:ce:b2:74:99:e6:17:c7:22:96:be:96:28:
         66:62:e8:dd:05:2e:56:0e:fa:a9:15:c8:ef:9e:1c:48:6d:3c:
         cd:ff:b5:d0:a7:c0:34:13:db:81:0c:1f:fb:7d:ca:47:95:fa:
         de:10:a0:d7:b2:bc:20:cb:2f:58:c9:b7:03:8a:dc:3b:d0:03:
         b5:cb:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org