Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa
File:                     3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa (raw, json)
Hash identifier:          jXfg4thR67TNTRbDJrfQsI+MdruXPqbmV4pYtvRDty8=
Subject key identifier:   8F:38:4E:17:C4:44:64:E3:75:79:A4:4A:7B:DA:EB:BC:D8:D3:57:74
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       285334661660D1AB9B8686A56C0C9A30B784DB07
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:06 +0000
ROA not before:           Wed 23 Oct 2024 17:53:06 +0000
ROA not after:            Wed 22 Oct 2025 17:58:06 +0000
asID:                     264927
IP address blocks:        201.159.90.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:53:34:66:16:60:d1:ab:9b:86:86:a5:6c:0c:9a:30:b7:84:db:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:06 2024 GMT
            Not After : Oct 22 17:58:06 2025 GMT
        Subject: CN=8F384E17C44464E37579A44A7BDAEBBCD8D35774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:c9:71:b9:38:c8:bf:a1:cf:15:e8:3e:d6:
                    43:36:b6:a5:aa:90:1e:0b:13:0b:5a:9c:79:2f:a1:
                    44:03:e7:8b:3a:16:03:aa:dc:9e:ac:d9:35:49:d3:
                    a9:14:42:9f:1c:a8:00:a6:50:d9:e1:e8:6e:93:2c:
                    36:45:7c:ec:c1:f5:7f:0f:1f:00:23:76:d7:c3:cc:
                    9a:c0:a2:d9:7f:a7:2d:c2:63:24:a1:cd:d1:8a:9c:
                    24:7e:a0:d9:fb:da:60:cc:ab:e7:6d:72:e4:ab:f7:
                    6a:31:55:b5:bd:12:95:46:10:f6:f9:7b:f2:74:37:
                    12:ac:ee:d1:cc:1f:3d:c9:f0:df:1c:a2:aa:de:96:
                    b4:47:7d:36:d1:db:98:20:ad:44:9f:72:3e:ec:e7:
                    ff:33:aa:e0:a2:98:5b:5a:4a:37:8a:c3:98:1e:47:
                    9c:a5:b6:04:9e:ef:56:95:4b:2c:9d:47:9b:8a:eb:
                    5f:4e:6f:51:78:58:05:a8:c7:ac:22:f6:05:3b:27:
                    a2:0d:8d:17:82:cc:d0:8a:37:96:1d:f4:e5:88:93:
                    64:d3:e1:bc:91:98:33:67:95:29:f2:30:b3:4d:eb:
                    0a:1d:22:69:1e:06:94:02:62:62:b5:ed:b1:a2:94:
                    05:19:83:eb:cf:ee:4d:29:92:de:0d:3f:63:4a:1b:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:38:4E:17:C4:44:64:E3:75:79:A4:4A:7B:DA:EB:BC:D8:D3:57:74
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:07:22:f6:3e:c0:0a:77:96:08:9d:b2:cb:82:80:9e:f8:
         43:df:ba:75:d5:63:30:10:ad:06:c3:f2:d7:99:30:ff:93:5a:
         bb:0b:72:37:c9:49:77:48:fc:da:e3:10:37:2f:c9:47:95:34:
         04:de:4a:7e:15:76:fd:b6:d3:40:f7:62:38:ef:d3:af:fc:b0:
         09:15:cd:4c:24:a1:56:64:b1:2b:17:bd:e7:75:c2:25:3e:68:
         86:c6:b7:a1:57:74:c9:b4:01:de:54:a9:83:b3:9f:14:3b:84:
         08:81:a3:8e:72:3f:4d:71:5f:12:e2:bb:12:88:44:71:eb:ab:
         94:6d:01:c8:b9:21:f3:d8:47:d8:5e:9b:a9:47:5a:f5:37:a3:
         2d:28:65:27:07:5f:62:a4:e9:c6:12:6c:a6:eb:3a:ef:82:f5:
         d1:75:83:6e:df:ee:0d:c7:46:c9:49:b9:64:f7:3b:dc:6d:50:
         d9:c7:f0:5d:fc:e7:72:0f:31:13:18:d0:00:b3:ce:70:02:b8:
         22:80:98:fe:28:ae:12:a8:7e:17:34:42:a6:4f:d0:9b:ca:14:
         b4:11:2d:82:07:76:7d:98:9b:14:c7:7e:be:a1:61:84:3b:9e:
         1b:53:14:46:b9:03:0f:ad:98:68:b0:07:b5:f6:48:f3:4a:48:
         25:eb:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 16:37:06 2024 by rpki-client on console-fra.rpki-client.org