Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          6O6bz3L5AqTQHBrVu2c3zilXSA0OjSFkcNVsmwWO/yE=
Subject key identifier:   99:2F:5A:EB:7B:90:E3:DD:7C:0B:F0:95:98:AF:E8:AA:6A:BD:D4:47
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       677E949EFDFE8691EEE2FF85286AACD6BC5A1CA7
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:41 +0000
ROA not before:           Tue 23 Jul 2024 11:33:41 +0000
ROA not after:            Tue 22 Jul 2025 11:38:41 +0000
asID:                     28669
IP address blocks:        186.195.144.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7e:94:9e:fd:fe:86:91:ee:e2:ff:85:28:6a:ac:d6:bc:5a:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:41 2024 GMT
            Not After : Jul 22 11:38:41 2025 GMT
        Subject: CN=992F5AEB7B90E3DD7C0BF09598AFE8AA6ABDD447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:c6:f8:b0:b5:b0:a6:0c:3c:6e:34:18:ee:
                    0a:17:2e:12:18:1b:2b:72:18:b0:c0:c9:35:de:a4:
                    1f:4e:03:27:90:18:fd:f5:81:7b:af:f6:5d:2a:73:
                    a2:08:a4:61:ce:de:67:3d:53:e5:6e:67:bd:17:8b:
                    4b:f9:aa:74:12:5d:78:c9:69:95:7a:e4:aa:ab:b4:
                    26:02:9c:dd:4e:d5:03:01:dd:4f:41:24:94:a8:4b:
                    83:a9:37:c5:55:d3:6d:b3:4e:f8:97:32:31:f9:62:
                    5e:65:2c:1e:28:37:a0:bd:3f:7e:81:f9:76:e8:60:
                    73:1b:0f:70:07:f2:4f:c8:b4:c8:72:4e:59:57:66:
                    fc:01:fd:da:ca:ab:46:a8:bf:fd:fb:55:e4:23:fd:
                    7f:24:42:ee:db:f8:ff:61:86:07:2c:ff:a2:19:22:
                    ad:fb:e9:08:66:c5:70:41:71:62:a0:9a:5c:67:db:
                    1c:2e:b7:dd:63:4b:51:dd:84:30:ff:4e:b2:d5:5d:
                    42:4a:28:45:e3:68:8f:f7:bc:ac:eb:2a:d1:6f:76:
                    be:07:e4:92:13:10:ce:9a:ca:48:37:d7:07:8f:57:
                    71:03:01:68:e0:e5:11:a5:fd:ba:fb:19:6e:10:9f:
                    c3:7f:cd:21:3a:36:5d:40:3d:0a:e9:33:de:60:04:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2F:5A:EB:7B:90:E3:DD:7C:0B:F0:95:98:AF:E8:AA:6A:BD:D4:47
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:e7:e6:49:e6:84:19:19:53:e5:c1:ae:b1:66:45:28:6f:
         c0:a2:09:a8:ff:f1:3e:82:11:6e:58:34:98:c5:50:f3:5b:2b:
         44:ed:f3:2c:08:e1:79:4e:6d:4a:b0:24:b3:8b:e4:48:51:52:
         6c:fd:89:93:65:32:b8:2f:96:71:e7:78:93:37:95:79:83:12:
         e3:a2:a7:a7:72:4b:eb:da:12:3f:5b:99:d1:1c:04:4a:49:6c:
         55:92:90:9b:2e:0e:12:be:d9:25:c6:1f:77:f5:4a:e5:b0:b3:
         50:ed:c5:99:f5:29:c7:46:3a:63:c0:2d:7a:12:da:41:d3:1f:
         cb:df:7c:bd:e4:ed:5a:1b:73:a0:6c:9f:65:73:99:e6:65:ca:
         d4:29:3c:24:b8:85:f9:de:09:84:e1:43:cf:f6:64:76:3e:b4:
         56:31:67:3b:27:ba:39:5b:5f:05:44:e4:d7:34:b4:1e:c3:b1:
         03:c8:8d:2b:9d:14:c8:28:20:f9:c8:ea:ea:15:25:44:a5:c6:
         91:22:62:0e:bc:eb:56:32:fe:02:3d:ad:3e:a6:56:7e:89:bb:
         9c:aa:bc:32:83:01:aa:9c:12:04:35:a2:81:9c:03:6c:74:a3:
         71:2f:43:d6:fa:9d:e0:b1:83:c2:cc:4d:ff:30:fe:96:c8:f6:
         9a:4d:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org