Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133342e302f32342d3234203d3e20323730333338.roa
File:                     3139302e3131322e3133342e302f32342d3234203d3e20323730333338.roa (raw, json)
Hash identifier:          EXZyjI7OPSliML1Ysf86hOmIzpYk5+BBJtvxWtm13aA=
Subject key identifier:   BE:1E:D8:E2:21:17:1E:4D:70:A7:9D:9F:D5:50:B7:03:F2:42:6D:9E
Certificate issuer:       /CN=198A6D21600CF2DD4E43C384F7379E891DD16986
Certificate serial:       491FBEA1CA2ADC4D76926B8752566FE114E39EB4
Authority key identifier: 19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133342e302f32342d3234203d3e20323730333338.roa
Signing time:             Thu 04 Apr 2024 04:18:02 +0000
ROA not before:           Thu 04 Apr 2024 04:13:02 +0000
ROA not after:            Thu 03 Apr 2025 04:18:02 +0000
asID:                     270338
IP address blocks:        190.112.134.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1f:be:a1:ca:2a:dc:4d:76:92:6b:87:52:56:6f:e1:14:e3:9e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198A6D21600CF2DD4E43C384F7379E891DD16986
        Validity
            Not Before: Apr  4 04:13:02 2024 GMT
            Not After : Apr  3 04:18:02 2025 GMT
        Subject: CN=BE1ED8E221171E4D70A79D9FD550B703F2426D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:7f:82:aa:3f:fa:d3:74:eb:f6:67:78:04:
                    0d:4e:f5:80:40:d0:0c:18:19:6d:f1:cc:f0:d2:10:
                    d7:14:7d:b3:a6:02:91:fd:3a:19:f4:c8:53:39:7b:
                    09:ee:8b:c6:24:35:41:0c:0e:20:18:39:01:a5:39:
                    ba:98:05:ed:4f:fd:34:25:d9:7c:7f:eb:69:ce:aa:
                    ca:2b:b9:2c:66:e3:92:26:43:ce:c7:74:71:2f:5e:
                    4f:2d:9f:d5:77:bb:d9:d9:99:1b:60:54:55:49:4a:
                    76:5e:d3:19:26:e5:a3:1b:c1:97:2b:24:6a:4e:1b:
                    7f:07:5b:0a:a7:ed:97:ab:ef:d9:02:3a:39:c0:4b:
                    e8:a0:66:5b:26:09:4d:47:1b:c0:0e:1d:75:ee:50:
                    58:f9:03:ba:e3:57:f1:d1:d6:13:c3:f9:03:fd:3b:
                    d8:5b:ed:b3:d3:8c:6a:e0:a9:60:1c:f4:36:13:18:
                    d6:c1:35:8c:17:92:e0:3a:55:f9:5b:ec:94:28:10:
                    56:14:4a:5d:c7:c6:62:37:d1:7f:0f:50:eb:7b:79:
                    4c:ba:97:36:70:4f:21:96:51:b8:32:5d:cb:82:ac:
                    66:68:95:98:f5:0b:29:03:b3:17:c8:26:9f:a8:db:
                    45:7d:74:d1:cb:99:67:9e:a5:2e:db:be:77:f1:4d:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:D8:E2:21:17:1E:4D:70:A7:9D:9F:D5:50:B7:03:F2:42:6D:9E
            X509v3 Authority Key Identifier:
                keyid:19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/198A6D21600CF2DD4E43C384F7379E891DD16986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133342e302f32342d3234203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ec:56:f2:56:e6:11:c1:ef:7e:32:e1:85:88:11:45:33:42:f9:
         f7:9a:88:ec:84:cf:41:0e:9d:df:49:68:98:e8:75:a0:0b:e3:
         1a:0a:d2:ed:c2:cf:e4:91:ee:dd:5a:7e:6a:95:62:9a:ee:92:
         f2:fa:92:46:7c:55:f5:ab:5c:c8:1d:e1:2b:c9:d8:a7:d3:62:
         4c:8b:9d:2f:cd:92:df:16:6f:d9:9b:3a:32:9b:6d:c0:da:97:
         e2:63:e5:ef:30:cc:88:df:95:b8:ed:9c:24:e4:63:0b:db:05:
         8e:80:75:8b:be:8f:44:7c:04:d9:97:99:85:25:e1:e4:ae:c2:
         96:b7:a8:69:31:e1:30:ba:5a:33:d1:0a:84:73:cc:10:c4:73:
         80:f2:07:1d:e1:41:49:30:ec:3f:47:5a:fb:7a:13:d6:cf:b9:
         61:8e:a0:90:22:9f:a5:7b:d2:29:d0:46:70:af:08:35:40:44:
         14:3a:d6:96:8a:52:f5:2b:67:97:00:b5:bd:d0:fe:f9:7f:c2:
         ff:bc:52:e9:ee:0e:df:89:b6:d5:94:81:f8:ce:15:d4:ef:79:
         f1:c7:68:86:c8:87:15:81:7c:db:02:83:b6:41:2f:42:3e:4a:
         3e:37:9b:93:8d:63:c1:2d:cf:56:ec:bc:c2:5f:51:cd:83:f0:
         b6:59:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 10:00:54 2024 by rpki-client on console-ams.rpki-client.org