Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa
File:                     3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa (raw, json)
Hash identifier:          WLDf4g9/TYDJ0TaSjriz5z5NP9OmU520Aknt8QIfDO8=
Subject key identifier:   54:94:85:10:FC:94:16:E3:F5:04:F9:63:6B:23:AE:51:67:21:77:25
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       3F5489AC5EAE3DAA31297E0583B0BE490197F355
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:42 +0000
ROA not before:           Tue 23 Jul 2024 11:33:42 +0000
ROA not after:            Tue 22 Jul 2025 11:38:42 +0000
asID:                     28669
IP address blocks:        191.241.224.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:54:89:ac:5e:ae:3d:aa:31:29:7e:05:83:b0:be:49:01:97:f3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:42 2024 GMT
            Not After : Jul 22 11:38:42 2025 GMT
        Subject: CN=54948510FC9416E3F504F9636B23AE5167217725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:d8:7a:4c:9b:da:ed:14:b0:f8:98:20:45:
                    c7:aa:a5:4c:48:a5:b6:77:a8:d8:63:1e:b7:27:34:
                    84:18:b7:af:92:29:82:f7:a2:8f:8a:a7:d9:fa:32:
                    75:c8:60:bb:86:f0:3e:4c:21:a3:07:33:67:be:62:
                    68:e9:0b:4e:ad:dc:be:49:2e:28:21:f4:3d:93:4c:
                    93:bf:50:0b:ea:12:c7:a4:82:3b:8b:3f:8e:be:db:
                    0d:37:50:c3:6c:36:7c:d2:5e:ae:55:af:08:a8:27:
                    10:c9:be:0d:0f:5e:1d:f4:04:d4:73:c8:49:9e:7f:
                    fe:a9:8c:37:f4:7f:0b:eb:2c:74:ed:81:4b:55:74:
                    ba:9e:c3:b9:b1:36:b9:28:c6:20:cb:47:0b:37:2c:
                    26:37:d9:e3:04:18:40:02:58:30:b0:43:97:ca:19:
                    2f:bb:87:63:86:51:bb:c2:ea:d9:59:bc:23:54:88:
                    b1:95:c1:97:7f:7e:fa:01:be:0d:c0:ea:c4:4b:5d:
                    96:ea:f8:42:91:66:4b:e4:e4:b7:12:a1:47:aa:58:
                    79:a3:dd:4c:03:f4:a3:9a:78:44:a9:27:88:ee:96:
                    a5:dd:13:42:c1:03:a9:45:c3:d3:f7:23:ee:48:f4:
                    87:cf:99:cb:9b:85:46:83:76:02:42:1d:1a:ac:42:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:94:85:10:FC:94:16:E3:F5:04:F9:63:6B:23:AE:51:67:21:77:25
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:58:f7:5d:ab:52:11:d4:35:f5:32:68:5f:5c:c4:f1:ae:
         7c:ea:af:5d:90:72:e5:26:7d:1f:96:47:f1:31:a1:9b:0a:4c:
         55:65:a2:2a:07:a9:8d:54:16:73:7e:95:8b:fe:a9:e6:a1:2c:
         d3:d3:9c:98:ed:cc:59:c0:f7:7a:5c:b5:c4:33:8a:b2:17:ef:
         50:1d:73:0f:4d:ef:5d:7e:7f:31:98:16:28:07:bf:49:92:ea:
         40:51:48:fc:90:65:f7:b0:5d:7c:f5:16:36:3f:8f:fc:ca:dc:
         c2:98:91:72:b4:dd:31:95:b6:33:c8:25:2d:4c:e9:d1:ff:8d:
         37:e2:03:39:10:a2:f1:af:5b:3b:08:4e:5b:ee:5b:cf:33:ff:
         d9:60:b4:bf:1f:81:0c:4a:2a:ba:5c:7a:32:fa:e6:d1:97:a8:
         85:57:6d:28:f4:46:5e:a5:8c:14:d2:0d:7c:96:e3:00:6d:b0:
         18:9f:5e:60:ae:07:ff:f7:27:27:c2:aa:91:24:00:3d:c6:56:
         17:54:bf:bd:cb:d9:bf:14:fd:83:a3:be:bc:c9:39:9e:03:29:
         e5:df:44:a6:20:ff:b8:9d:ff:ad:1f:aa:df:8d:e0:0a:39:5a:
         db:66:bc:33:6f:c1:e6:a5:f4:70:14:b5:3a:25:2f:8a:50:af:
         20:ed:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org