Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa
File:                     3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa (raw, json)
Hash identifier:          RrJ0SOonwXODMTipASLZt9mFHbz36cAh2K4u1beBncA=
Subject key identifier:   5D:1A:81:72:06:D5:A7:2F:CB:3F:78:4B:18:B4:21:FC:50:A4:67:F1
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       498966595F9613666B3D72A320DFDADF4EB22487
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa
Signing time:             Thu 31 Oct 2024 16:59:35 +0000
ROA not before:           Thu 31 Oct 2024 16:54:35 +0000
ROA not after:            Thu 30 Oct 2025 16:59:35 +0000
asID:                     53171
IP address blocks:        186.224.224.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:89:66:59:5f:96:13:66:6b:3d:72:a3:20:df:da:df:4e:b2:24:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:35 2024 GMT
            Not After : Oct 30 16:59:35 2025 GMT
        Subject: CN=5D1A817206D5A72FCB3F784B18B421FC50A467F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:d8:bb:9c:7f:31:38:3d:1a:a7:e6:ce:1d:
                    10:46:0e:d4:f2:23:7c:24:c1:31:ad:91:61:44:06:
                    8b:af:85:91:4d:ea:59:58:da:04:a1:13:7c:f2:8d:
                    2c:9d:b1:0f:33:d2:74:f3:c1:ac:5a:18:d5:27:82:
                    65:a1:ba:33:5e:d4:7c:77:a9:14:88:06:c4:e5:1e:
                    24:ed:d3:9d:c4:6e:47:3d:c4:6e:c8:3f:73:dc:3a:
                    b1:9f:cb:37:4f:ff:a7:76:b0:4a:f2:49:5d:77:72:
                    4f:68:d3:04:7c:86:c5:ac:c8:fe:33:10:ce:57:7e:
                    bf:58:05:b4:16:09:d8:92:7b:78:47:58:3e:36:83:
                    16:f3:87:7a:76:b1:b3:56:e5:55:c1:f0:fd:f4:ba:
                    29:dc:6b:c3:77:32:c2:8f:89:96:17:19:bd:bb:2b:
                    62:06:6d:99:91:1b:9a:ce:a4:88:b9:67:87:f0:76:
                    87:96:88:bb:6e:d3:90:1e:9f:0b:5e:4c:0d:cb:be:
                    ed:b6:ea:0c:df:3c:c1:4d:3f:5f:8c:a6:bc:30:14:
                    48:ec:d6:60:21:6d:b1:04:47:ab:52:14:92:2f:a9:
                    a4:f0:40:21:65:d4:85:2e:2f:88:f9:e0:9b:83:36:
                    0c:42:46:f0:32:e4:63:64:13:54:9e:91:05:02:11:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1A:81:72:06:D5:A7:2F:CB:3F:78:4B:18:B4:21:FC:50:A4:67:F1
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:29:d8:47:3a:be:c1:6d:7b:27:33:83:9a:d3:7f:18:96:
         b9:99:a2:50:fd:a7:f7:d6:3d:33:12:be:be:59:85:39:6a:0c:
         bc:ca:9d:eb:89:13:94:ec:e5:45:b0:9f:91:33:77:b7:25:5c:
         36:2e:94:f7:9f:e8:04:2e:16:b0:86:94:0e:d2:5d:8e:5d:5b:
         b3:ce:60:80:19:24:9d:8a:13:63:47:c1:8c:83:aa:53:3d:d1:
         c6:59:3c:9d:ca:8e:cb:c5:0e:c2:85:65:00:ab:78:21:83:15:
         80:32:15:54:c5:dc:8b:f8:9a:3b:70:57:9e:42:79:b2:95:a5:
         e5:7d:22:10:7b:de:b4:d7:a6:9a:6a:33:5f:8d:78:78:ea:f2:
         e0:17:d1:10:e2:35:d0:72:55:89:d7:c7:68:c8:63:72:b9:05:
         a0:f5:db:1f:06:3f:9e:ad:f9:05:c9:b1:4f:54:61:dd:12:3a:
         d1:f4:66:17:3d:b6:7f:59:c5:73:0d:c2:f4:9b:c9:02:12:7b:
         ca:ce:cf:de:86:33:35:fc:73:39:a7:e9:2d:c8:35:30:1d:cd:
         59:45:d1:07:a9:79:59:ff:55:b6:7a:34:3a:7d:3a:36:14:b2:
         f1:0f:3c:65:9c:cf:33:4b:34:24:3a:71:bf:38:89:ca:2a:ac:
         32:09:63:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org