Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa
File:                     3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa (raw, json)
Hash identifier:          Ow4vs9yZcyWzHiixzXCy38v5cK79lFus9ZFc6L1dtpg=
Subject key identifier:   19:48:D9:8A:18:B5:99:2C:FF:65:D1:16:73:46:2D:DD:77:59:A9:64
Certificate issuer:       /CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
Certificate serial:       2DF9269B1F1BB73C6C8F824E3FE27AD8E7774842
Authority key identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa
Signing time:             Thu 04 Jul 2024 13:20:31 +0000
ROA not before:           Thu 04 Jul 2024 13:15:31 +0000
ROA not after:            Thu 03 Jul 2025 13:20:31 +0000
asID:                     265285
IP address blocks:        168.90.149.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f9:26:9b:1f:1b:b7:3c:6c:8f:82:4e:3f:e2:7a:d8:e7:77:48:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
        Validity
            Not Before: Jul  4 13:15:31 2024 GMT
            Not After : Jul  3 13:20:31 2025 GMT
        Subject: CN=1948D98A18B5992CFF65D11673462DDD7759A964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:30:ea:3d:dc:9f:51:2f:ca:02:ec:df:58:
                    a9:3d:19:a3:32:d3:5a:f2:dd:08:65:e4:9c:d1:c1:
                    2c:75:d8:ff:77:23:5d:82:b7:2f:f4:c8:a8:a7:ed:
                    2a:5e:6c:b7:c2:d6:81:5a:da:7b:47:e3:10:62:cb:
                    61:e0:11:a8:1d:33:fb:4e:b3:cf:72:92:45:24:da:
                    12:16:e2:af:6d:cf:61:9a:97:0b:d6:10:6b:17:7b:
                    a8:a1:1c:da:d8:a0:0c:11:3c:37:38:31:d2:8e:41:
                    f4:1d:bd:9c:6f:7e:89:c7:61:f1:f9:e3:00:93:df:
                    b3:4f:87:f3:cf:f5:de:3b:fd:d4:fb:0f:dd:d4:0e:
                    bd:2b:ca:ec:3b:89:d1:2e:a3:58:6a:9e:5f:b4:de:
                    30:0c:9a:17:27:2b:b9:96:2a:cf:24:44:1f:45:69:
                    3d:13:9b:b8:49:15:1b:60:3d:c7:a4:a2:21:eb:1c:
                    28:99:54:d8:89:aa:9f:9b:c1:21:3a:ad:76:82:01:
                    de:f5:ea:cd:af:57:78:d6:95:cc:44:80:05:ee:74:
                    93:bc:ad:c0:06:23:d6:96:9f:a9:68:4b:3c:a2:d6:
                    3d:ad:44:0a:20:18:37:6c:80:18:92:c2:7f:ae:c9:
                    4e:ca:ef:1d:63:cb:d1:93:23:32:e9:7e:2a:41:52:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:D9:8A:18:B5:99:2C:FF:65:D1:16:73:46:2D:DD:77:59:A9:64
            X509v3 Authority Key Identifier:
                keyid:3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:bf:a2:be:01:d1:43:54:fe:a8:e9:bc:09:62:a9:d1:06:
         97:70:e5:5e:f1:1e:b0:a9:25:51:c5:9e:11:62:80:d9:d9:52:
         de:2b:d4:cf:89:6d:f6:b1:0e:af:f1:3a:f6:c9:73:ca:66:c6:
         d9:a3:84:84:e1:31:1c:8e:a8:fb:06:da:9f:43:24:04:e4:ab:
         1e:74:b2:16:af:24:0d:0c:61:f9:7f:b9:8f:e8:a8:4a:24:20:
         ad:28:c5:0f:c8:f5:bd:cd:ec:06:63:00:cc:fa:76:bb:56:49:
         5c:74:3a:5f:51:60:64:ed:7e:23:9d:e0:a5:97:fa:3a:9d:35:
         73:a8:bc:e4:ca:94:19:b7:05:84:54:14:51:5b:db:04:92:29:
         f5:47:43:45:be:49:0c:30:07:19:d4:e0:07:d7:60:db:dc:45:
         76:04:d6:15:d9:b8:90:b9:0c:3b:f6:fc:4d:4d:b7:c4:a3:4c:
         3e:50:e9:5e:39:77:3e:4b:2a:fe:07:ad:3b:29:11:70:63:05:
         bc:d6:7f:63:78:f9:ab:bd:b6:a0:a9:27:d3:ab:c1:27:91:5e:
         bf:27:0f:b7:bf:d9:6a:fe:c8:d5:79:11:3a:b2:1b:48:80:a9:
         7e:64:ab:d2:63:01:0d:02:60:9d:c1:2d:e2:92:9f:de:9c:89:
         da:10:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org