Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39312e302f32342d3234203d3e20323634393237.roa
File:                     3230312e3135392e39312e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          xO1OSrWoojYnmUve3Bk3G8BfJCrCgo6m5sU0o7GFVqg=
Subject key identifier:   B7:E9:8C:DC:20:14:35:31:12:67:AE:C7:3C:9F:A9:D8:D1:C7:FE:AA
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       69D58C7DD711880B02B392A08EAF85D586B78B09
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39312e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:06 +0000
ROA not before:           Wed 23 Oct 2024 17:53:06 +0000
ROA not after:            Wed 22 Oct 2025 17:58:06 +0000
asID:                     264927
IP address blocks:        201.159.91.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d5:8c:7d:d7:11:88:0b:02:b3:92:a0:8e:af:85:d5:86:b7:8b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:06 2024 GMT
            Not After : Oct 22 17:58:06 2025 GMT
        Subject: CN=B7E98CDC201435311267AEC73C9FA9D8D1C7FEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:ef:f2:65:58:ee:c7:4e:fc:57:ef:b8:27:
                    fd:bd:88:2e:a4:a4:2a:06:42:cb:84:73:c5:89:17:
                    62:30:9d:6c:71:b8:7a:42:09:5f:a0:02:a7:43:42:
                    67:1c:98:78:7f:46:9d:07:f3:11:52:57:4b:b6:24:
                    35:b5:04:09:0f:cc:59:f7:7d:df:dc:0d:87:78:26:
                    c0:e8:7d:f1:52:51:00:a1:7f:de:17:cd:46:48:d1:
                    07:54:f0:3f:88:5e:32:64:17:87:b0:55:70:34:8d:
                    a6:5f:83:c5:ba:bd:02:ce:be:c8:48:6f:8c:3c:a4:
                    52:b8:ac:0f:58:c6:04:b4:4b:f2:2e:dc:e7:4f:17:
                    30:c9:61:f4:00:32:cb:dd:1a:7c:ed:62:b1:06:fc:
                    19:cb:ab:8b:e9:6e:88:b4:2a:65:b0:96:76:75:0d:
                    49:c3:55:a2:9a:76:13:2c:60:d7:fc:b6:f8:a7:f9:
                    2e:20:60:91:e6:e7:59:01:29:6d:33:b3:4a:09:23:
                    69:4b:de:7e:11:52:e9:2e:a0:5e:21:d1:61:e2:c7:
                    4d:bf:52:c6:b4:4d:58:3c:38:c2:3d:32:d4:da:a2:
                    66:a9:0c:48:cf:0e:e3:82:54:7d:52:d4:9b:10:7d:
                    7d:96:0e:eb:a0:c1:ff:cc:23:57:a6:26:d9:ce:57:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E9:8C:DC:20:14:35:31:12:67:AE:C7:3C:9F:A9:D8:D1:C7:FE:AA
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39312e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:f2:4e:3f:88:88:6c:5e:2c:0f:d6:b3:67:99:cc:88:7b:
         2c:55:d3:19:73:00:28:9b:b9:1b:9b:6a:3d:06:35:cf:c1:33:
         23:54:39:15:2d:30:65:9f:6e:50:5d:d1:19:9e:4b:78:20:12:
         b5:07:c9:fc:a1:22:0e:be:98:c5:9f:f1:f9:de:27:41:f1:a1:
         48:70:7c:9c:e1:f8:22:f7:24:06:f9:39:2b:6c:49:55:22:19:
         ee:35:1d:ac:c4:80:e4:ac:6c:e1:e2:a2:9f:aa:44:8e:80:99:
         44:b6:b1:5c:0d:fd:c5:3b:87:1b:f4:35:64:04:f2:48:66:8f:
         70:57:fe:68:62:f5:3f:3f:99:47:d4:d2:81:54:b0:a8:f8:02:
         03:dd:fe:ad:2c:65:8b:3e:d5:cf:16:2f:66:58:ca:27:d5:22:
         fc:69:a7:10:5e:c0:25:67:33:da:bb:b2:80:ac:18:90:12:21:
         7e:3c:01:f6:9c:69:0e:bc:ae:ba:5f:f6:09:27:c3:4e:48:e8:
         47:da:3e:6b:59:52:c3:70:da:ad:8b:84:54:55:a8:ab:93:9f:
         8d:99:12:e3:ae:06:ab:a8:29:01:3d:e2:d5:d5:36:79:d1:12:
         15:4e:e2:14:9e:a9:d1:05:ad:06:40:08:e7:8e:c8:4b:ef:b1:
         f4:13:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 16:37:06 2024 by rpki-client on console-fra.rpki-client.org