Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa
File:                     3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          NH18cIwOwLsmerkVSygbY9hWeltKPWj8aHVCqHcCsu0=
Subject key identifier:   35:1C:31:A7:75:D8:FF:0E:05:EC:20:51:65:C6:78:7F:B7:EE:A9:70
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       61D2DF141D8BE5D11D4788C8A0BE26D6B8F519F8
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:25 +0000
ROA not before:           Thu 31 Oct 2024 17:21:25 +0000
ROA not after:            Thu 30 Oct 2025 17:26:25 +0000
asID:                     28667
IP address blocks:        186.193.192.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d2:df:14:1d:8b:e5:d1:1d:47:88:c8:a0:be:26:d6:b8:f5:19:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:25 2024 GMT
            Not After : Oct 30 17:26:25 2025 GMT
        Subject: CN=351C31A775D8FF0E05EC205165C6787FB7EEA970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:8b:15:f8:92:4f:8e:97:e4:54:57:cd:fa:
                    c8:7b:98:9f:63:ea:13:b4:9d:db:4d:fa:cd:8d:c5:
                    8a:89:4a:00:b8:20:cb:02:d6:53:18:52:55:da:3b:
                    6d:86:92:15:73:15:02:0d:f8:6e:6d:68:2e:6b:da:
                    13:ce:13:1e:58:bc:17:19:27:fb:19:06:29:3e:79:
                    7c:67:44:12:c3:fa:1c:66:f6:37:67:77:84:a8:9c:
                    03:50:96:35:2b:dd:8a:63:b4:3c:6c:9f:60:36:14:
                    1f:9c:c3:17:d3:6a:ba:c6:e6:37:a1:33:81:47:05:
                    53:d9:82:58:83:8b:1d:50:63:f4:68:27:9a:04:6c:
                    e0:8e:4c:09:3e:80:9f:e5:b2:62:d1:2d:36:90:73:
                    2c:6a:c3:bd:e8:26:07:2f:ff:1d:77:22:9b:ad:1a:
                    36:fb:a5:13:c1:52:c9:fa:9a:ce:9b:3b:eb:8d:39:
                    fd:d3:d1:a7:65:2c:2a:34:ba:f6:95:86:be:15:4d:
                    fd:bc:67:fc:fe:6e:a1:8a:fc:4c:da:f6:f9:53:03:
                    3d:97:d1:7c:b9:34:5d:33:e0:e8:c5:16:60:89:98:
                    81:98:43:72:f7:2d:bb:07:ce:01:14:a8:c9:f9:0b:
                    3b:2f:3a:5e:85:30:39:06:a8:0b:2b:8d:3a:2e:16:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1C:31:A7:75:D8:FF:0E:05:EC:20:51:65:C6:78:7F:B7:EE:A9:70
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e3139322e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:4b:fe:78:4f:54:c0:28:d4:f3:c5:69:6b:64:80:e0:25:
         c7:20:b6:ec:fc:cb:b2:27:01:58:13:e6:bd:8c:b4:96:3e:99:
         a1:02:ab:d4:64:ef:11:11:18:31:d9:77:a7:c4:01:98:c2:a9:
         a0:cd:96:3f:38:aa:4d:7e:8c:b0:6b:e9:08:4c:8a:f8:6c:cc:
         b8:50:95:77:34:76:25:d0:35:3f:1a:08:71:1d:c4:68:a2:55:
         3c:f7:0e:e5:7b:18:89:ff:d6:42:2f:fe:69:75:4d:97:1a:ed:
         a6:96:24:c3:92:7f:fd:56:e1:46:ec:e6:95:04:59:47:83:f6:
         14:98:3d:e0:df:36:d4:5c:87:5f:c8:da:a8:1e:58:1f:6a:06:
         2d:94:e6:5c:8f:10:07:ce:d6:cd:ef:c4:00:14:89:46:00:59:
         76:e5:30:8b:1f:e7:bc:96:3a:46:73:e8:1e:3c:5f:9e:75:12:
         b7:c8:50:ed:89:18:7d:b8:7d:10:e9:7a:0f:26:ee:31:c8:3b:
         f9:9e:92:05:9b:f5:8f:b8:78:c2:c0:e5:f5:82:88:7e:da:b9:
         ed:9e:b9:2b:3c:1c:0c:9f:69:3f:b3:ea:ac:b9:fb:fa:d4:52:
         b6:80:4c:41:0f:2a:31:e9:0a:84:7e:75:8d:ac:13:90:ae:a5:
         6c:f8:31:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org