Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa
File:                     3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          SIT2JPPQLbCUeW83LgrrIibRp9nr2ZM3qUFjyL62IC0=
Subject key identifier:   39:69:B8:C3:78:80:91:44:C0:A4:B9:1F:82:6B:F7:EE:6C:B1:96:8F
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       0B4D5C7E02B4CF7DE1B45967A78D5722705F07E6
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:26 +0000
ROA not before:           Thu 31 Oct 2024 17:21:26 +0000
ROA not after:            Thu 30 Oct 2025 17:26:26 +0000
asID:                     28667
IP address blocks:        187.110.240.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4d:5c:7e:02:b4:cf:7d:e1:b4:59:67:a7:8d:57:22:70:5f:07:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:26 2024 GMT
            Not After : Oct 30 17:26:26 2025 GMT
        Subject: CN=3969B8C378809144C0A4B91F826BF7EE6CB1968F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:e6:22:91:00:e5:48:8d:09:d1:48:7d:10:
                    73:f5:97:d8:79:4c:92:0f:cc:a7:b4:03:e3:22:82:
                    6b:94:e4:2e:cf:2f:d5:22:19:cf:86:8d:c1:37:c5:
                    d2:60:78:4d:5f:9e:38:93:56:2a:6c:27:e5:c9:5c:
                    04:30:76:df:10:f2:4d:8b:6e:ef:c7:e5:f1:9f:07:
                    2e:d6:3f:cd:71:47:c0:91:d6:5d:28:d1:67:11:03:
                    56:09:87:07:b2:cc:1e:9f:c3:d6:a2:3c:f1:a7:94:
                    cd:58:86:95:2a:4c:86:d5:d8:74:9c:b6:80:b3:98:
                    05:52:a7:f2:86:65:ae:68:0c:5c:ac:1f:ad:3d:36:
                    ab:79:97:02:15:d8:0c:5a:20:b9:fd:36:54:18:46:
                    e9:45:e7:3c:ac:8f:a5:81:a9:ac:ec:cc:04:78:c2:
                    c5:10:3a:26:67:da:e0:40:ac:38:63:ab:ea:b8:8c:
                    ce:2a:6f:c8:37:90:7f:cb:6b:05:99:87:2d:21:e3:
                    6b:01:e0:e7:d5:03:89:87:fa:50:4a:96:af:1a:62:
                    7f:3a:7e:41:9b:bb:d3:f0:1b:82:43:84:e9:24:60:
                    7b:09:a4:5c:88:75:10:d2:57:c4:dc:f6:e2:89:91:
                    a3:cf:b3:ac:6b:a5:be:a5:02:25:ea:fa:ac:f8:0c:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:B8:C3:78:80:91:44:C0:A4:B9:1F:82:6B:F7:EE:6C:B1:96:8F
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:51:10:90:59:b5:e6:9b:49:db:70:83:eb:f1:00:bd:8f:
         36:ec:19:95:bd:b5:3d:ae:ee:f6:77:ed:bf:48:49:90:cd:d1:
         5a:8e:b6:93:4c:84:79:9f:b4:1a:b5:6e:3c:ca:fe:bd:db:ac:
         24:65:bf:69:66:9e:0c:34:52:d5:b8:b4:85:9e:04:9d:c6:5c:
         69:f2:91:c4:0c:78:0a:ee:d4:9b:6f:f1:7e:58:77:73:e2:61:
         b3:03:29:b4:52:85:b6:03:a1:2e:bc:fc:58:ad:4b:3f:d3:57:
         6e:77:e7:8a:a3:79:b1:d0:f2:ee:da:dd:fd:51:c0:e5:1e:b6:
         7d:26:0d:97:8b:a7:d4:a3:9b:9a:93:ce:45:21:91:52:17:a9:
         18:ca:8a:19:06:6c:55:5a:4d:43:03:1c:a1:83:fe:96:80:93:
         dc:06:a5:ac:3f:b0:ad:e6:5e:db:35:5b:2e:c2:75:0f:5c:8e:
         66:1b:41:b5:28:11:19:42:d5:52:e9:43:1b:a4:e6:45:8a:cf:
         19:74:af:27:53:47:24:4b:ff:c3:1b:34:10:42:42:ef:58:6d:
         f5:09:cd:5b:1f:24:26:61:77:53:72:b1:9b:df:95:fa:8a:3e:
         46:31:64:92:f3:19:3d:b7:16:1f:21:54:6f:6e:41:a4:10:1d:
         76:63:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org