Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
File:                     3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          uJ9/x5zBMGZHx6orSS0VmPQ+VLMl0JSEzA8qXF8pB44=
Subject key identifier:   F5:7C:AC:1E:F3:9D:0E:8B:FE:9F:4B:33:77:40:48:3A:87:23:74:F8
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       11B1F5927CC54CBE3A1F9CBB0CDBCC9CB79667C2
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:12 +0000
ROA not before:           Thu 31 Oct 2024 17:21:12 +0000
ROA not after:            Thu 30 Oct 2025 17:26:12 +0000
asID:                     28667
IP address blocks:        191.242.128.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b1:f5:92:7c:c5:4c:be:3a:1f:9c:bb:0c:db:cc:9c:b7:96:67:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:12 2024 GMT
            Not After : Oct 30 17:26:12 2025 GMT
        Subject: CN=F57CAC1EF39D0E8BFE9F4B337740483A872374F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:59:7a:ed:56:4e:1c:66:f7:f1:6f:09:a5:
                    94:45:c8:03:d3:04:e1:70:30:55:52:48:27:d2:4a:
                    06:48:38:68:71:24:10:dc:5e:32:3c:81:bb:dd:cd:
                    43:3e:73:4a:0e:93:b4:5c:b3:89:1a:fd:cf:34:48:
                    20:e1:c5:4c:da:33:59:99:2d:3b:63:9c:8a:0a:6e:
                    9b:73:06:39:8e:75:14:20:97:2f:79:be:6a:ea:3e:
                    4c:2e:80:06:6e:27:4c:9d:ec:8e:10:78:a6:77:f8:
                    76:01:c9:d4:cd:6b:8b:de:b6:6d:fc:55:24:a4:e1:
                    d5:4e:21:50:b3:1f:4b:4b:b6:09:e5:1e:9d:e6:96:
                    7d:07:74:70:bc:e6:4b:aa:4e:ee:43:b1:fd:68:f0:
                    3f:8d:a6:37:4f:cd:de:da:0a:d2:5c:d3:1f:76:fa:
                    86:c2:f4:bf:33:ea:60:6a:45:fb:3a:74:91:40:eb:
                    95:97:05:44:c6:89:c1:21:09:97:59:b4:11:2f:30:
                    bc:c9:60:8d:b2:d8:43:e5:05:5d:d8:03:5c:06:8b:
                    e4:75:0b:5d:99:cb:a3:8c:db:35:44:07:db:69:e0:
                    59:71:3d:30:8e:20:74:f7:b3:f4:cb:bf:cc:56:bb:
                    3c:40:c0:be:ff:cb:3b:03:2f:6b:8f:b3:3a:fc:ca:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7C:AC:1E:F3:9D:0E:8B:FE:9F:4B:33:77:40:48:3A:87:23:74:F8
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:ab:f3:2b:42:af:3e:9d:cd:6d:18:5c:58:13:3d:4d:03:
         4b:13:17:a8:85:88:24:60:59:2c:29:48:39:93:6b:26:5e:fc:
         19:d2:0a:50:b7:1e:83:67:55:db:75:a7:c2:d4:e5:d5:6a:7a:
         ec:c7:74:2d:78:c7:67:cc:ba:ce:14:97:cc:b9:9a:79:bf:1d:
         9c:cd:e3:18:7d:89:45:02:b0:2d:79:5c:9c:cd:32:eb:7e:29:
         3a:41:c5:a5:bc:1e:09:76:d3:bc:cd:00:00:db:cc:eb:04:d0:
         9f:38:72:ac:cf:4c:89:ca:01:a5:14:0e:7b:1c:36:48:fc:58:
         8d:6d:fe:88:1e:5e:81:8d:a9:d0:9c:9d:b3:78:78:bc:eb:02:
         11:5d:6f:34:d0:c1:63:98:eb:88:e1:bd:a7:83:5c:20:af:94:
         56:b0:f8:b7:44:c2:db:75:a9:8b:10:06:ee:7d:51:83:dd:65:
         19:ef:9a:14:ce:3f:da:03:b4:2a:b8:cf:1c:80:1e:57:2a:58:
         ac:ac:29:84:2e:19:cb:7e:00:9a:bb:ea:23:5b:3a:5c:6c:a5:
         d3:86:56:64:b5:85:c3:2e:0c:20:f6:e7:af:90:80:9e:3b:80:
         9e:cc:07:b2:ee:78:ca:ae:9e:d5:5a:28:4f:87:06:9a:b1:ce:
         6f:8a:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org