Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133332e302f32342d3234203d3e20323730333338.roa
File:                     3139302e3131322e3133332e302f32342d3234203d3e20323730333338.roa (raw, json)
Hash identifier:          gP17N08kls95pnjm5vI+qN71mGk+3OLZ4Nya3hFvEKA=
Subject key identifier:   A7:9C:10:C0:B0:18:B6:06:39:AD:3A:B1:F9:4F:39:5E:D3:48:8D:C5
Certificate issuer:       /CN=198A6D21600CF2DD4E43C384F7379E891DD16986
Certificate serial:       58EB2A0DE74835855BFD7AAFD5E4B3000271AEB2
Authority key identifier: 19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133332e302f32342d3234203d3e20323730333338.roa
Signing time:             Thu 04 Apr 2024 04:18:02 +0000
ROA not before:           Thu 04 Apr 2024 04:13:02 +0000
ROA not after:            Thu 03 Apr 2025 04:18:02 +0000
asID:                     270338
IP address blocks:        190.112.133.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:eb:2a:0d:e7:48:35:85:5b:fd:7a:af:d5:e4:b3:00:02:71:ae:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198A6D21600CF2DD4E43C384F7379E891DD16986
        Validity
            Not Before: Apr  4 04:13:02 2024 GMT
            Not After : Apr  3 04:18:02 2025 GMT
        Subject: CN=A79C10C0B018B60639AD3AB1F94F395ED3488DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:25:0a:3a:3e:23:3d:9f:3a:4b:81:f8:4c:
                    0f:a6:19:3b:ff:3c:5c:24:ce:5d:f5:dd:03:8c:f3:
                    45:64:5c:3e:a5:32:ec:90:75:cd:bc:b5:e4:68:58:
                    92:78:7a:f8:b6:31:e7:7d:46:cd:91:f8:33:95:db:
                    6f:ba:40:2c:6a:76:96:1f:2a:17:24:76:a3:9f:af:
                    9b:42:ac:ff:08:df:d9:e4:17:ee:21:66:ed:d7:60:
                    b8:6b:e8:52:1a:48:4e:e6:9c:64:af:d0:15:be:d6:
                    7f:9f:a5:d2:26:a0:6c:d9:5d:a2:c9:70:70:80:d0:
                    87:de:18:a1:5a:68:9c:5d:5d:0f:be:25:88:b9:b2:
                    18:91:7a:81:d2:a9:1a:1f:3a:65:48:f8:c4:d1:66:
                    d1:7c:22:ae:4a:d8:11:a0:64:cb:22:b7:0e:c0:82:
                    a7:f9:17:43:7b:b2:18:36:47:51:da:e4:75:c8:0b:
                    15:41:49:55:c5:70:7b:a1:7f:7f:7a:0a:54:2d:49:
                    69:6b:37:7e:94:a9:60:8f:89:01:78:86:0a:d0:d0:
                    b4:16:8f:fe:c5:f9:fe:be:8d:35:56:08:9d:96:28:
                    fc:17:af:88:ce:1d:45:4a:7b:d3:14:29:49:4c:66:
                    a7:14:eb:09:82:d9:0a:66:2e:63:83:bf:78:a8:8e:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:10:C0:B0:18:B6:06:39:AD:3A:B1:F9:4F:39:5E:D3:48:8D:C5
            X509v3 Authority Key Identifier:
                keyid:19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/198A6D21600CF2DD4E43C384F7379E891DD16986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133332e302f32342d3234203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:aa:bf:1e:15:c8:a4:3a:32:e9:56:52:17:fa:ba:50:1c:
         77:59:9b:5d:8a:ee:8c:14:ce:59:72:7f:a0:8d:34:ec:50:47:
         40:bd:f7:43:55:1b:e0:b1:22:d5:79:7e:f5:d1:5f:e9:05:73:
         d3:46:22:3c:f5:78:f2:3c:87:9c:24:7a:7b:09:83:36:6c:2b:
         53:5d:16:be:b1:ac:9e:25:05:e3:c1:72:82:be:29:4c:61:6e:
         84:1c:c0:c4:28:79:13:13:ae:ad:12:66:b3:0f:3c:39:ab:4c:
         d4:46:8e:b4:cf:88:16:a2:fb:0f:9e:dd:ed:b4:a4:8f:ae:fd:
         9b:b5:52:6d:37:f5:b1:cc:55:1d:49:6f:c0:31:1a:f0:46:8a:
         6f:f7:68:16:26:e5:fe:fc:0e:f4:88:d9:e0:9b:90:a3:ad:fb:
         a7:e1:9a:90:9a:9a:7f:7b:2e:01:fa:a9:eb:60:88:c5:c0:bb:
         99:6a:89:a2:4a:0a:dc:e2:67:80:d1:69:92:19:07:07:43:77:
         ac:c3:61:41:35:f0:e1:8e:7c:cc:ce:7f:2e:a5:bc:80:be:09:
         e7:5c:fa:fa:41:68:eb:29:cb:15:45:a3:f0:28:d7:da:db:02:
         0e:fc:b5:4b:1f:2a:b5:2e:da:11:91:42:d3:4b:4b:48:8f:cb:
         ac:e7:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 10:00:54 2024 by rpki-client on console-ams.rpki-client.org