Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa
File:                     3138392e37362e3132382e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          L+4jOv5B+dqkJat2aRlz6Vz7QpCGgV6TeBEqUNPS/D0=
Subject key identifier:   3D:D4:09:8D:56:CB:A6:7C:9D:18:C5:2C:96:35:A4:A3:98:CF:09:FA
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       2C43014571955BD485AE3BE22FDCFC28017A628C
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:15 +0000
ROA not before:           Thu 31 Oct 2024 17:21:15 +0000
ROA not after:            Thu 30 Oct 2025 17:26:15 +0000
asID:                     28667
IP address blocks:        189.76.128.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:43:01:45:71:95:5b:d4:85:ae:3b:e2:2f:dc:fc:28:01:7a:62:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:15 2024 GMT
            Not After : Oct 30 17:26:15 2025 GMT
        Subject: CN=3DD4098D56CBA67C9D18C52C9635A4A398CF09FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:b9:b3:ed:4d:9c:c5:ed:e3:a4:8d:ca:11:
                    63:2c:64:c8:da:cc:5b:fd:ff:19:7c:2f:7d:14:3b:
                    0c:2c:ee:ad:ec:5f:25:f0:8f:4f:b8:fe:53:9a:7d:
                    95:96:2a:e1:25:2c:55:43:89:46:6b:83:aa:f4:01:
                    c4:af:4c:ea:22:47:29:f4:10:1f:d2:d3:43:ff:e4:
                    fd:25:f4:ea:bc:f8:ce:dd:e7:8c:62:eb:da:73:72:
                    ca:83:d0:ea:0b:f3:9c:49:8d:10:7d:cc:bd:96:8b:
                    3f:48:97:19:d4:fc:ea:98:b1:34:33:6a:d2:38:eb:
                    cf:99:49:aa:9b:35:a7:48:9f:15:b8:ab:c8:57:26:
                    9d:6f:3e:bb:8c:c8:c5:09:b6:bb:85:90:b9:79:9d:
                    14:b5:25:a4:6d:c4:33:88:5a:e8:c6:a9:74:1f:a5:
                    90:9c:ca:d6:7e:2f:79:91:66:2c:a3:2f:77:7a:56:
                    17:71:32:37:f1:7b:9e:5b:42:0e:a8:b2:99:44:53:
                    87:74:7d:52:75:52:96:76:69:b8:e5:29:48:c4:82:
                    d8:9d:99:5d:70:ad:cb:34:c7:50:5f:53:b1:15:4a:
                    1c:f4:da:7f:8a:08:eb:77:ca:f6:ab:04:63:3e:f6:
                    75:70:5e:18:df:b7:5f:8d:54:79:9a:03:46:b1:dd:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D4:09:8D:56:CB:A6:7C:9D:18:C5:2C:96:35:A4:A3:98:CF:09:FA
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:d1:d7:9b:b7:75:1a:a7:11:4d:fa:84:53:dc:5e:70:ba:
         09:26:99:e9:02:33:61:49:f6:6b:88:38:f2:b2:a2:92:e2:2b:
         dd:48:7c:bd:b0:84:20:19:90:75:6b:85:36:e9:f3:dd:21:ac:
         47:69:b1:75:ef:6f:cd:91:20:51:6d:23:8e:17:36:92:90:d3:
         f4:f0:c5:39:4b:9b:98:4b:19:06:f9:3e:04:3f:ad:18:69:31:
         24:68:96:e4:6e:db:0d:01:7a:a2:8c:e0:e8:b6:e5:ad:a5:7d:
         9a:78:00:88:e4:98:81:22:75:90:e2:28:bc:a0:86:ec:d3:4c:
         a4:99:b7:66:6a:87:a2:b1:03:50:77:58:48:6c:a4:53:87:56:
         57:4e:4f:0e:0d:7e:83:bb:b4:5d:0d:3c:83:78:96:22:33:4e:
         08:76:ee:e2:27:99:c2:78:ba:8a:76:a0:d4:0a:fd:4e:1e:bd:
         44:96:40:a4:5e:10:1a:46:95:85:03:30:0e:5e:2d:ee:86:10:
         2d:2b:b3:42:90:8e:39:af:6a:59:96:3e:8b:e9:b1:4b:82:f6:
         e0:ce:ba:5b:a8:ec:29:00:b8:06:2f:e2:36:70:c0:37:9d:e0:
         f9:6e:22:1c:63:28:bf:b4:cc:c5:f9:9a:24:d9:19:ae:6d:20:
         6c:02:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org