Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/3138312e3138392e38342e302f32322d3234203d3e20323731333935.roa
File:                     3138312e3138392e38342e302f32322d3234203d3e20323731333935.roa (raw, json)
Hash identifier:          RJR/nQd6bhIwSyZVMgj9+9uf4so5i+U1OcV3uvhjvLE=
Subject key identifier:   87:B4:70:05:1E:83:E6:3F:F5:01:64:9E:62:4D:F1:04:50:A4:7F:A7
Certificate issuer:       /CN=F8077B9FBA152C29E14E548BF94CE8567559B1F1
Certificate serial:       657BBC79A319D2C3FB3C7C5DDEEE29ADA7512E04
Authority key identifier: F8:07:7B:9F:BA:15:2C:29:E1:4E:54:8B:F9:4C:E8:56:75:59:B1:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/3138312e3138392e38342e302f32322d3234203d3e20323731333935.roa
Signing time:             Thu 04 Apr 2024 17:43:56 +0000
ROA not before:           Thu 04 Apr 2024 17:38:56 +0000
ROA not after:            Thu 03 Apr 2025 17:43:56 +0000
asID:                     271395
IP address blocks:        181.189.84.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:bc:79:a3:19:d2:c3:fb:3c:7c:5d:de:ee:29:ad:a7:51:2e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8077B9FBA152C29E14E548BF94CE8567559B1F1
        Validity
            Not Before: Apr  4 17:38:56 2024 GMT
            Not After : Apr  3 17:43:56 2025 GMT
        Subject: CN=87B470051E83E63FF501649E624DF10450A47FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:08:d4:73:14:29:43:e4:e7:0e:b9:cb:de:
                    36:32:21:ca:d1:38:e9:d4:29:c0:bd:13:73:7b:be:
                    b6:8a:01:35:52:e7:ef:11:48:a8:6c:67:39:af:f5:
                    bc:4a:24:d8:bc:23:77:b6:e8:cb:8c:11:6e:11:8c:
                    34:84:a0:96:55:eb:fa:37:bf:4d:45:59:ba:10:f9:
                    ab:6d:84:23:84:4a:31:bb:bc:87:d7:02:27:2c:45:
                    42:94:af:d1:dd:56:97:89:97:81:3c:f4:85:83:37:
                    cc:40:c4:f1:3e:83:ca:9e:d4:95:a6:e4:ff:1b:53:
                    c2:4d:be:23:93:ba:0d:70:81:6c:cc:32:75:c6:4a:
                    a7:30:01:a7:c1:a0:b6:59:cb:2d:9e:92:77:1b:13:
                    f4:d6:fe:31:02:a1:cf:9e:a8:e0:b9:5e:58:f7:b5:
                    d3:a7:92:06:e0:05:5c:7c:88:d1:e3:c2:d5:3d:dd:
                    ff:6b:68:16:04:80:d4:49:fa:b2:4e:a2:79:10:c2:
                    47:a0:3c:17:0e:8e:96:8c:5d:0a:dc:b1:3b:85:15:
                    ca:81:b7:c0:6b:97:72:b4:70:ff:38:d1:e5:49:b7:
                    ab:58:18:f2:9a:5c:ba:ab:8c:99:61:00:59:47:89:
                    aa:cb:41:ea:d1:3c:f5:bf:a6:29:18:4d:dd:d2:af:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B4:70:05:1E:83:E6:3F:F5:01:64:9E:62:4D:F1:04:50:A4:7F:A7
            X509v3 Authority Key Identifier:
                keyid:F8:07:7B:9F:BA:15:2C:29:E1:4E:54:8B:F9:4C:E8:56:75:59:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/3138312e3138392e38342e302f32322d3234203d3e20323731333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:f2:32:24:34:cb:6e:f4:0a:d0:e3:51:e5:89:5c:1f:fa:
         e7:4b:79:79:7f:07:47:24:7c:dd:28:61:65:cc:d8:db:5c:62:
         e8:ed:e8:21:cc:75:ed:e2:f0:0b:d0:fb:99:73:ed:b3:bf:25:
         e3:b3:5b:3a:1c:5f:ed:40:a5:1d:bd:c6:f7:55:0e:bd:40:a9:
         79:99:63:39:c3:aa:f7:7d:ca:d6:48:d4:f9:57:68:0f:12:32:
         7a:64:6c:ad:bc:3e:d3:c7:35:b7:25:82:13:80:77:5d:41:eb:
         e8:10:8d:6d:59:8e:71:8f:32:3e:ca:43:0b:52:37:d5:4b:21:
         a6:a1:61:42:4d:ea:ab:10:2f:bb:e6:2b:e2:ea:42:57:b1:d8:
         50:59:3c:ff:86:89:25:e8:aa:b4:1f:5c:9f:f2:86:fa:71:5a:
         a3:31:a5:14:32:57:3d:56:ed:62:08:b5:a2:06:c8:63:02:0b:
         7a:94:94:64:0d:4a:3d:b9:11:94:b8:27:b2:01:9c:c5:0d:01:
         c7:a9:78:aa:a7:d7:8e:c7:40:a9:c6:13:d2:77:e4:c9:87:da:
         4a:0f:cc:b3:a9:a2:6e:17:26:07:b6:c0:b2:d9:d0:62:d3:c2:
         4d:31:35:f0:91:b1:68:22:be:25:0b:02:70:c0:bf:b5:1b:b4:
         c0:33:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 06:53:59 2024 by rpki-client on console-ams.rpki-client.org