Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133322e302f32342d3234203d3e20323730333338.roa
File:                     3139302e3131322e3133322e302f32342d3234203d3e20323730333338.roa (raw, json)
Hash identifier:          gV7ScLbtufJyPBd7QVa/a2xK3zrtzQZgbr5nbuUWSBc=
Subject key identifier:   0A:6F:A7:1A:C2:D1:F2:35:12:BB:13:95:F9:D5:6C:FE:98:8B:20:C6
Certificate issuer:       /CN=198A6D21600CF2DD4E43C384F7379E891DD16986
Certificate serial:       401C7F5BD8A1A4C0245A66BEB20F9ED6A6B040DD
Authority key identifier: 19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133322e302f32342d3234203d3e20323730333338.roa
Signing time:             Thu 04 Apr 2024 04:18:02 +0000
ROA not before:           Thu 04 Apr 2024 04:13:02 +0000
ROA not after:            Thu 03 Apr 2025 04:18:02 +0000
asID:                     270338
IP address blocks:        190.112.132.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1c:7f:5b:d8:a1:a4:c0:24:5a:66:be:b2:0f:9e:d6:a6:b0:40:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198A6D21600CF2DD4E43C384F7379E891DD16986
        Validity
            Not Before: Apr  4 04:13:02 2024 GMT
            Not After : Apr  3 04:18:02 2025 GMT
        Subject: CN=0A6FA71AC2D1F23512BB1395F9D56CFE988B20C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:8b:dd:64:c9:98:25:be:09:74:b4:e5:23:
                    45:87:4e:af:f2:78:4b:32:ee:42:46:59:fb:72:af:
                    58:cf:fe:c8:5e:dd:7d:6b:ef:d2:bd:66:60:79:59:
                    c2:55:3b:2d:a8:01:0f:3a:05:5d:da:08:7a:5f:da:
                    c4:a0:52:42:5f:9d:bf:0e:c6:8f:ac:79:82:e1:ce:
                    a1:06:4d:cd:f3:11:d2:42:f1:f5:e2:99:59:57:d8:
                    aa:de:cd:c3:30:42:71:7d:b5:cc:13:66:83:33:32:
                    62:8b:6d:f2:b7:1e:04:47:c2:b2:ea:9a:41:1d:be:
                    1e:8c:34:75:01:51:d2:70:16:0b:17:b5:66:5e:82:
                    0b:ae:fb:ef:3b:34:e5:4c:93:2a:1e:58:07:d1:dc:
                    83:7e:5e:77:d6:7d:28:0c:a6:9b:af:db:9a:cc:fa:
                    dd:d4:e0:02:cd:fd:2d:74:94:3d:fc:4c:35:2e:66:
                    71:d5:f0:25:f2:4f:e8:e3:95:c5:3e:61:c0:55:df:
                    8f:0e:31:59:cc:98:95:ef:2f:d6:53:df:d3:eb:39:
                    78:33:42:3f:f8:00:06:17:ff:7b:3b:f1:70:7a:36:
                    a7:80:f3:92:fd:13:89:a9:75:32:13:d0:f5:ad:35:
                    0f:32:84:a4:06:a8:44:63:0f:0b:78:da:eb:81:61:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:A7:1A:C2:D1:F2:35:12:BB:13:95:F9:D5:6C:FE:98:8B:20:C6
            X509v3 Authority Key Identifier:
                keyid:19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/198A6D21600CF2DD4E43C384F7379E891DD16986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133322e302f32342d3234203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:50:8c:d2:9c:96:8c:e5:12:34:f7:5f:76:76:3d:94:71:ec:
         2c:8e:4c:4b:3a:f4:61:ef:d7:aa:c3:44:0c:9f:4f:0e:21:2a:
         a5:74:42:e5:59:61:2a:9e:17:04:2e:f3:ef:62:5e:bf:c2:b6:
         9f:94:74:9e:70:80:2a:b4:b9:86:7b:93:ae:53:39:b0:ac:6f:
         51:e8:39:87:9c:d5:7a:7f:db:19:7c:47:3c:e0:61:ce:f9:82:
         6c:53:59:9e:7e:6f:9f:7b:40:ab:e6:76:ca:99:7a:3d:81:66:
         e8:6e:48:ca:36:c8:8d:65:99:64:42:d3:c7:ac:86:9c:77:92:
         f7:f8:92:1a:92:9f:1e:46:b8:2b:d3:55:8b:f6:0f:8d:7c:87:
         29:75:f4:97:97:25:5a:d9:e9:50:f9:fc:db:7c:c0:5c:c4:e3:
         32:2a:67:12:93:7f:8a:af:cd:3e:a3:e4:e4:76:d8:ba:1c:ac:
         a4:fe:b4:f0:34:24:9a:c9:1d:a0:1c:b4:b8:16:04:84:85:39:
         03:a9:18:91:24:1d:e1:bd:83:1c:cf:8f:48:69:7a:97:1d:55:
         f2:a6:39:e9:e8:df:e4:ab:ba:f3:44:a6:31:91:85:70:3c:9d:
         a8:ec:cd:31:59:c9:9b:10:86:48:8c:a5:ff:ab:0a:03:63:13:
         76:87:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 09:41:00 2024 by rpki-client on console-fra.rpki-client.org