Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa
File:                     3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa (raw, json)
Hash identifier:          Blvj757hOQ/EPF/pEfyNVmcGOJ2uKhBNt729+LTD/DQ=
Subject key identifier:   26:C5:06:F5:DE:51:AA:08:B2:C6:0A:BB:6B:E9:58:17:98:55:8F:88
Certificate issuer:       /CN=E4E6B5BEE4918D4DB219ADD5463627D9F71B7200
Certificate serial:       2DDEFFAEF1FE2E53BF05DA6C071AD856A7933071
Authority key identifier: E4:E6:B5:BE:E4:91:8D:4D:B2:19:AD:D5:46:36:27:D9:F7:1B:72:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E6B5BEE4918D4DB219ADD5463627D9F71B7200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa
Signing time:             Mon 05 Aug 2024 21:16:02 +0000
ROA not before:           Mon 05 Aug 2024 21:11:02 +0000
ROA not after:            Mon 04 Aug 2025 21:16:02 +0000
asID:                     270430
IP address blocks:        190.111.156.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:de:ff:ae:f1:fe:2e:53:bf:05:da:6c:07:1a:d8:56:a7:93:30:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E6B5BEE4918D4DB219ADD5463627D9F71B7200
        Validity
            Not Before: Aug  5 21:11:02 2024 GMT
            Not After : Aug  4 21:16:02 2025 GMT
        Subject: CN=26C506F5DE51AA08B2C60ABB6BE9581798558F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:5b:7f:35:c2:0b:91:8a:d4:32:8a:2e:cd:
                    d0:25:66:11:d9:57:c8:9a:b0:54:3e:c3:cd:2b:4e:
                    a0:d1:b7:2e:fd:d5:9e:e0:91:26:95:3e:aa:86:53:
                    4f:9b:3e:ac:75:e5:05:02:3e:a1:bd:a6:6a:26:47:
                    b8:e4:b7:63:79:8e:c6:9c:5e:eb:1e:73:f2:25:35:
                    98:f9:8f:b7:b4:27:94:e6:57:54:ac:82:07:5d:be:
                    36:4a:14:12:dc:c5:07:b7:02:d8:07:c6:94:41:0e:
                    72:47:b0:93:07:07:6b:6a:2b:91:4a:8b:e4:c7:eb:
                    d3:9e:e8:e7:6c:85:8d:03:e8:6e:0b:72:f9:5e:df:
                    71:41:af:eb:8e:eb:63:f3:0a:9f:87:c1:af:3c:60:
                    07:08:f6:f1:f2:06:42:3d:8c:36:4d:19:4a:85:b7:
                    33:cf:9f:90:53:27:d2:49:10:9b:bd:8e:02:2d:dc:
                    fd:8d:5e:1f:32:49:c6:33:2c:5b:ce:95:3e:46:7e:
                    7b:1c:7e:74:42:7c:c3:4e:3c:82:cd:6e:e2:cd:ec:
                    3a:3b:c3:ed:26:ae:dd:c9:0f:bd:6c:56:27:2e:ca:
                    2e:5c:d2:37:6b:92:44:ef:4d:7b:29:c7:46:8e:cb:
                    44:8f:bb:32:41:78:45:22:72:6a:cf:47:fe:15:a1:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C5:06:F5:DE:51:AA:08:B2:C6:0A:BB:6B:E9:58:17:98:55:8F:88
            X509v3 Authority Key Identifier:
                keyid:E4:E6:B5:BE:E4:91:8D:4D:B2:19:AD:D5:46:36:27:D9:F7:1B:72:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E4E6B5BEE4918D4DB219ADD5463627D9F71B7200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E6B5BEE4918D4DB219ADD5463627D9F71B7200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:ca:f5:62:da:f4:ab:89:7b:8e:30:26:f8:20:be:72:3c:
         89:5c:c1:e9:df:3e:0c:39:51:ea:0f:28:f3:9c:ab:15:7b:0a:
         9d:93:72:68:b1:05:1f:a8:bc:56:0c:3a:61:fb:87:08:9f:57:
         9b:2d:48:bc:0d:0d:09:da:b4:0a:a2:82:a4:a6:38:39:0b:b9:
         b2:b6:12:a9:94:5e:15:8b:6d:f8:67:b2:2c:95:f1:29:21:35:
         e2:30:c5:fd:61:5f:92:ec:92:89:36:1d:4a:cc:5b:2f:2d:f2:
         68:f9:ee:32:fa:a1:3d:6c:a7:b3:f9:c4:41:a8:09:c4:bb:70:
         80:82:c3:f8:52:ce:f4:0e:7c:b1:e0:d9:7d:85:79:00:d1:81:
         55:0d:ce:84:6d:a0:29:8d:bd:19:46:75:36:88:c1:6b:91:69:
         fa:1e:d7:f6:2e:3f:17:ed:cc:34:5c:6f:a4:af:4c:d2:a8:8e:
         f7:ba:c8:41:6b:16:b0:97:7f:20:b5:fb:74:a2:24:f3:22:f8:
         78:f7:0a:49:06:2a:3e:b9:dc:ad:49:c2:f0:7e:eb:51:d0:0c:
         4a:7d:10:7d:e3:17:16:d6:10:8a:5e:2f:37:78:59:ef:e0:06:
         4e:a6:f4:21:90:46:8e:e7:c8:13:40:f0:8f:a5:42:cd:3f:2c:
         5d:eb:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 05:25:49 2024 by rpki-client on console-fra.rpki-client.org