Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
File:                     3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          a0joJw0RkAhJ+8Ik3+H+2C6eV79c/irpDt+leakoZ+Y=
Subject key identifier:   11:36:C6:24:31:6E:BE:EB:3D:66:33:12:A1:6B:F7:99:51:45:98:40
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       067E83F6333FC93B76A5039044AE97E7FEB899C8
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:23 +0000
ROA not before:           Thu 31 Oct 2024 17:21:23 +0000
ROA not after:            Thu 30 Oct 2025 17:26:23 +0000
asID:                     28667
IP address blocks:        187.121.192.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:83:f6:33:3f:c9:3b:76:a5:03:90:44:ae:97:e7:fe:b8:99:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:23 2024 GMT
            Not After : Oct 30 17:26:23 2025 GMT
        Subject: CN=1136C624316EBEEB3D663312A16BF79951459840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:44:b6:d4:fe:96:c5:fc:b9:3f:cc:9c:f9:
                    38:e2:ad:08:75:fa:d0:1f:7d:53:0c:67:f5:b5:9c:
                    fb:43:7b:d0:88:c5:fb:da:36:72:ee:7f:77:4e:f9:
                    5e:c3:34:af:da:20:11:fc:0d:3c:b8:fc:c4:22:8f:
                    0a:4c:08:5c:e0:49:fe:00:ab:95:a8:2f:28:45:42:
                    f1:d7:7d:a0:65:8f:92:fd:0a:82:14:b9:57:ff:5b:
                    e8:99:a5:53:e8:67:1e:67:6f:3e:4a:a2:ed:79:0d:
                    83:ec:cd:b3:34:f4:5b:6a:e3:13:17:1a:26:0d:b1:
                    2d:34:3c:bb:1d:13:fc:55:3c:79:78:1c:67:29:39:
                    d6:50:9e:10:a6:de:08:a6:13:90:d0:1b:3e:b1:5b:
                    f4:e0:e7:09:45:22:37:d4:1f:43:3b:c1:09:d3:c0:
                    30:9e:32:0a:85:9b:30:7b:9d:3d:19:01:e6:f6:ce:
                    f1:cb:4d:3a:de:cf:90:4a:b4:d9:a0:ec:01:79:e9:
                    ba:a9:91:59:b8:3d:26:ae:0a:60:9d:6f:92:f3:ac:
                    ba:fb:9c:b0:3c:7d:13:66:d7:6b:00:11:ba:49:86:
                    e4:d2:bc:26:8e:e1:bd:6a:95:e8:ac:60:f7:99:f6:
                    ac:14:9b:c6:ad:9a:c3:09:7f:48:8b:b7:70:bb:b1:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:C6:24:31:6E:BE:EB:3D:66:33:12:A1:6B:F7:99:51:45:98:40
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:66:77:31:b8:28:df:29:74:70:fd:c4:83:02:77:da:fe:10:
         f3:59:38:b1:bc:c8:e1:bd:42:c3:0b:80:30:26:21:0f:43:18:
         c8:ba:6e:99:7e:08:60:97:c4:7d:cf:19:98:10:55:dd:cf:0f:
         8e:f9:1d:c8:07:27:29:21:15:f7:ab:26:21:0e:8c:d4:9f:4d:
         b8:e5:e7:ee:b8:9e:2e:bf:7a:87:01:96:ec:47:d2:60:59:6f:
         1c:a1:98:05:80:88:dd:87:4c:98:3c:c7:59:7b:71:54:7b:6b:
         ce:ba:c9:3f:b6:2a:73:85:21:fc:78:5b:5d:eb:35:c3:2b:54:
         7a:c4:db:52:30:41:40:ab:7b:0e:d8:f8:a2:54:17:fa:0c:9e:
         f9:8e:a6:3e:ad:c9:61:b6:25:9a:73:9b:60:51:3e:0f:c9:90:
         da:53:1f:41:1c:2e:49:4e:32:b5:ca:b0:6d:d2:ce:fc:13:d4:
         bd:d4:fc:d1:ea:93:44:98:53:34:75:9d:9d:ae:4b:0a:25:fe:
         7c:28:c1:9e:d1:ae:52:fe:02:d4:78:4a:c5:12:01:b9:e3:77:
         55:90:7b:3a:2f:7a:19:21:3c:9f:d6:a3:84:e6:11:a9:d3:a0:
         d7:3a:27:7d:42:e6:2c:33:7b:7a:ab:b9:3b:f8:74:25:66:80:
         1f:f0:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org