Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa
File:                     3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa (raw, json)
Hash identifier:          GLXKs+1LNq4lkGQY6EyGOP+NFD0zA8DVIQBn6zMq9cQ=
Subject key identifier:   40:12:1F:2C:54:12:06:1C:86:52:24:93:50:05:D3:43:8F:A3:7C:F6
Certificate issuer:       /CN=CED535AAD1233C2161BDBD4439E62790A2F55012
Certificate serial:       2C009601E8386EE84BC7DAE502DCE12A18D332EC
Authority key identifier: CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa
Signing time:             Thu 04 Apr 2024 01:01:14 +0000
ROA not before:           Thu 04 Apr 2024 00:56:14 +0000
ROA not after:            Thu 03 Apr 2025 01:01:14 +0000
asID:                     266242
IP address blocks:        192.145.204.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:00:96:01:e8:38:6e:e8:4b:c7:da:e5:02:dc:e1:2a:18:d3:32:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED535AAD1233C2161BDBD4439E62790A2F55012
        Validity
            Not Before: Apr  4 00:56:14 2024 GMT
            Not After : Apr  3 01:01:14 2025 GMT
        Subject: CN=40121F2C5412061C865224935005D3438FA37CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bc:3d:78:25:5e:57:c4:80:a3:77:fe:ae:7e:
                    a4:c4:b2:2f:98:85:28:f3:7f:fa:eb:d6:3a:fa:8e:
                    b8:5b:d3:18:73:55:24:7e:9c:b5:3b:71:d0:0f:9b:
                    ae:cb:26:a1:7c:f4:a8:ab:fb:1a:a3:d2:f3:f5:67:
                    d2:6c:c2:19:e6:9a:b6:d1:93:02:cf:83:0f:ed:e4:
                    7c:73:00:28:18:96:52:36:d3:38:bc:75:bf:5b:b0:
                    82:d5:35:98:8f:4e:dc:fc:a9:17:16:d0:6a:aa:31:
                    5d:d4:5f:43:58:2d:74:de:8c:ec:d1:cf:d9:39:2b:
                    41:30:4c:76:62:10:84:15:a3:02:77:1b:9f:11:be:
                    a2:9f:ee:cf:70:7c:fe:86:b9:df:21:bb:3f:55:9b:
                    37:70:a0:1f:b2:a8:6f:bf:eb:52:64:dc:1d:69:62:
                    5d:34:20:57:0d:7b:f3:62:af:99:83:d1:6b:73:59:
                    6f:60:98:3f:a4:d9:af:ed:c9:e0:e0:38:6a:f6:8b:
                    54:ff:ae:1e:36:69:33:d7:60:28:7b:37:cf:17:00:
                    39:c5:54:04:6d:5d:d5:90:ad:34:38:26:02:72:c8:
                    88:bc:fc:42:ba:d4:cb:f7:5e:c1:61:e7:b8:6c:0e:
                    88:36:49:16:c4:24:7a:e3:55:79:f3:4f:b4:5b:e8:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:12:1F:2C:54:12:06:1C:86:52:24:93:50:05:D3:43:8F:A3:7C:F6
            X509v3 Authority Key Identifier:
                keyid:CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:14:cc:0e:3c:0b:35:5f:3d:cd:41:f3:d7:cd:8e:67:27:
         0d:df:6d:d5:f9:60:72:15:b0:42:53:74:42:32:16:32:7a:a5:
         fc:09:2e:84:79:8a:90:ed:26:dc:13:bd:d4:12:61:3e:2e:e2:
         6a:a9:a0:d4:1d:5a:57:30:50:59:46:00:9f:fd:0c:e8:5c:04:
         85:8f:cf:1c:62:e0:a0:77:7f:8a:e9:05:a0:50:a7:f0:ab:19:
         1a:c0:55:f3:a1:13:7e:d4:2c:c7:31:19:c7:08:79:d5:2b:a2:
         d7:54:64:0b:ef:14:5e:60:fc:4a:07:a2:7b:a2:9f:33:f2:6e:
         c1:1d:26:1e:d4:d0:f7:5f:a8:bf:1b:7e:5e:ca:30:43:a4:dd:
         7d:2d:59:38:97:4e:35:fc:63:6e:3d:71:52:27:bc:d9:9f:e2:
         5e:c2:4a:ec:7d:3d:93:7a:df:a0:c7:b4:8e:5f:dc:68:e3:91:
         9d:b0:a8:72:d8:49:4b:ad:00:ad:cb:e2:94:54:b4:de:55:c2:
         e0:69:75:ee:d4:3c:67:55:46:af:7c:d7:da:3e:c8:64:a0:94:
         c1:de:7b:d5:6a:1b:e7:92:45:16:ca:d6:40:80:f1:da:e9:b1:
         79:8d:d7:88:56:1a:72:79:ba:b2:6e:1d:4a:70:b3:23:0c:1d:
         25:a9:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org