Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
File:                     3230312e34362e31362e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          BBt43XVkYBzTZUopN3qIim/xGl+426glWYXSXa0NgzU=
Subject key identifier:   E8:C3:DE:9D:A0:02:FE:14:0E:8F:07:5D:2E:8E:C5:0C:7F:6A:1A:FE
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       181009FE24FFA01D74DA62C096870F5127A52729
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:47 +0000
ROA not before:           Tue 23 Jul 2024 11:33:47 +0000
ROA not after:            Tue 22 Jul 2025 11:38:47 +0000
asID:                     28669
IP address blocks:        201.46.16.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:10:09:fe:24:ff:a0:1d:74:da:62:c0:96:87:0f:51:27:a5:27:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:47 2024 GMT
            Not After : Jul 22 11:38:47 2025 GMT
        Subject: CN=E8C3DE9DA002FE140E8F075D2E8EC50C7F6A1AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:53:f6:b1:d5:57:d9:1b:0b:63:42:73:76:
                    b7:e6:82:e0:12:74:39:ad:51:fa:47:fa:c4:29:7e:
                    de:90:a0:89:f4:eb:e5:b4:29:85:7e:a1:7a:6c:e4:
                    10:5d:f4:5e:df:f5:19:e1:47:05:e1:0b:ae:c4:e8:
                    fb:03:0d:34:35:b0:8f:5c:ba:f1:5e:24:f8:3c:82:
                    69:9d:1c:99:41:7a:71:4b:58:38:35:dd:cf:be:59:
                    38:2e:3d:62:cc:69:18:88:ed:21:66:1a:60:2a:b6:
                    99:04:59:2a:fe:22:c5:b9:8d:c4:b4:dc:2e:6d:a8:
                    b3:d8:37:8b:9a:38:6c:9d:b3:9d:52:a8:f7:be:e8:
                    4a:6b:2f:4e:ca:88:8d:64:c8:80:e6:1f:0d:89:83:
                    4a:3a:a5:53:3d:40:37:7d:23:48:e4:a2:14:00:6e:
                    dc:2e:7f:a9:f9:57:0c:e0:00:32:18:e7:a7:31:b2:
                    a4:f1:10:77:8d:75:13:6f:3f:3c:cd:57:63:dd:1e:
                    73:9b:1b:40:31:b0:88:dc:c2:54:98:3e:5c:8e:02:
                    76:16:66:e4:aa:17:65:e1:e8:21:00:e2:90:a8:8f:
                    ba:8c:a6:6a:5d:47:df:58:d2:08:11:4f:d9:24:02:
                    ee:73:cd:2b:54:c9:53:f4:5f:49:77:9f:08:c8:37:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C3:DE:9D:A0:02:FE:14:0E:8F:07:5D:2E:8E:C5:0C:7F:6A:1A:FE
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230312e34362e31362e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:c6:90:1d:c7:f5:75:1a:77:2a:0a:fd:58:39:a3:24:fd:e0:
         fa:09:95:ee:ee:4c:8d:bc:7e:66:bb:f5:a5:6e:be:91:66:38:
         3a:eb:95:4e:11:3d:2c:19:6c:21:03:28:2d:37:bd:ff:63:42:
         ac:1b:9b:3d:d6:a7:ee:9e:d8:87:0b:4d:15:0c:ef:c6:ab:da:
         c5:5e:90:81:71:b1:23:f2:ba:16:a7:0c:b9:f6:c4:67:2f:07:
         86:fb:74:ac:80:57:c5:bc:7b:62:b3:71:60:c0:6b:c8:4b:45:
         5e:aa:a0:c2:61:87:ff:87:b8:54:c7:be:65:44:83:3c:f1:2a:
         d7:8d:d2:6a:70:ec:d6:07:5a:8a:dd:d7:b6:9c:35:93:f2:ed:
         d0:94:e6:70:6f:46:c7:f7:c4:d1:8b:89:38:b2:72:fb:44:38:
         a8:1e:48:4e:e1:4c:0b:8a:53:30:24:c2:1c:e0:64:4a:75:0a:
         b2:d5:7f:12:14:47:74:dc:61:05:e8:e8:1f:9c:69:6f:ba:aa:
         be:a1:5a:e5:99:7f:30:87:18:bd:56:64:11:0d:f8:0c:06:b9:
         bb:13:78:c3:91:29:be:87:0b:d3:14:0f:75:45:db:b8:bf:da:
         6f:d8:4f:cf:75:b0:da:46:99:fd:8e:fe:8a:ea:8b:a0:c1:10:
         92:a3:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org