Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa
File:                     3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          X0JhzdwvotzBzRy4aU701FG7vxPGTPBCj2UkxF+s8Ks=
Subject key identifier:   6D:FF:E9:DB:7E:71:29:B5:40:24:04:D7:EE:56:99:59:55:65:D3:E5
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       3247A314B6DD8B7FD0CB9C27B627337D6417CC87
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa
Signing time:             Thu 31 Oct 2024 16:59:33 +0000
ROA not before:           Thu 31 Oct 2024 16:54:33 +0000
ROA not after:            Thu 30 Oct 2025 16:59:33 +0000
asID:                     61844
IP address blocks:        201.148.124.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:a3:14:b6:dd:8b:7f:d0:cb:9c:27:b6:27:33:7d:64:17:cc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:33 2024 GMT
            Not After : Oct 30 16:59:33 2025 GMT
        Subject: CN=6DFFE9DB7E7129B5402404D7EE5699595565D3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:28:29:0e:fa:2b:28:99:ea:ef:c4:cf:33:
                    fa:18:35:5c:a2:3b:dc:23:1c:ec:7f:f5:d5:14:6b:
                    db:29:aa:0e:28:b1:c0:58:9e:ae:05:bc:a8:1a:ce:
                    e9:3e:f4:a9:60:f5:62:17:1a:82:ea:e3:6c:88:4b:
                    ea:e8:0f:11:dc:ec:81:1d:38:36:95:19:8f:18:92:
                    fa:02:0b:78:e1:e6:ff:fd:29:3c:c5:ce:9c:b9:64:
                    4a:40:cb:e8:8c:4f:9c:28:18:5a:b2:ba:3f:b3:90:
                    da:c9:0e:aa:dd:2a:16:28:6a:cd:ff:52:41:bd:e6:
                    29:5f:98:19:d9:53:5f:68:ca:29:1f:4c:27:53:99:
                    d9:87:37:a2:e2:43:20:45:91:b2:d6:08:2e:19:7e:
                    a6:a3:cb:b7:5d:62:9e:2b:21:12:f1:de:b7:d4:c5:
                    44:6c:68:9c:02:4a:2a:f2:ec:d2:e2:5f:d6:6d:a1:
                    09:12:36:4e:d3:13:c1:df:70:9a:93:27:f6:7b:22:
                    c6:5e:4f:a5:df:1e:a0:54:53:a3:96:cc:40:61:9e:
                    c9:94:8d:0b:46:ba:7c:09:b2:12:b8:0a:63:4c:2a:
                    14:e6:57:9d:0c:22:80:d0:44:95:bb:74:9b:9d:81:
                    c8:51:c2:32:a0:77:af:bb:b3:95:db:8d:40:56:04:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:E9:DB:7E:71:29:B5:40:24:04:D7:EE:56:99:59:55:65:D3:E5
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:df:19:dd:dc:3f:27:fa:93:26:7c:51:c3:70:49:fa:6e:2c:
         db:07:e5:0f:5a:89:c0:68:35:bf:5c:0a:ef:e5:77:77:93:92:
         aa:c4:a9:af:d4:e5:dd:17:91:77:3c:d9:86:a9:26:9c:47:1c:
         55:4e:67:b7:1d:c2:1f:2a:2d:ed:c0:33:a7:eb:e6:d0:7f:31:
         f7:fe:ca:7f:28:a0:33:7d:79:86:63:1f:56:1d:53:12:2c:7a:
         5b:60:a5:8c:53:b0:f9:f8:41:ce:09:d7:a4:4f:b6:c9:ea:f0:
         ed:8d:cf:69:12:e9:7e:3c:56:1b:73:c5:0d:1c:b8:4d:ac:ec:
         b0:bb:00:c8:1d:ab:0c:76:69:bb:de:8e:2e:57:a4:35:48:14:
         08:5e:c3:d9:bf:7c:0e:6d:b8:6c:5c:2e:9c:59:a9:0f:19:9b:
         df:54:24:5b:a1:bb:f2:a6:4a:f6:0e:99:57:6a:1b:89:29:61:
         ba:50:a3:fa:35:e3:59:7b:68:72:1d:b7:b1:fc:b9:ef:42:07:
         29:14:47:be:6d:28:27:ae:f6:24:9b:20:07:9e:2d:60:41:2c:
         76:38:4d:56:43:aa:71:8d:e4:e2:b6:5d:38:8f:1a:08:97:0a:
         8d:6d:09:73:9f:3c:63:2f:33:eb:ca:7c:a1:73:5c:05:e2:7f:
         e4:50:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org