Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa
File:                     3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa (raw, json)
Hash identifier:          ImeKkZ7wJRmphfBdtqcSONuThBr+qlA/DgMs2FHNHD4=
Subject key identifier:   AE:B2:2D:CE:2B:16:E6:F1:E2:53:7C:5D:67:95:AF:B7:40:21:11:AA
Certificate issuer:       /CN=CED535AAD1233C2161BDBD4439E62790A2F55012
Certificate serial:       46A2F667FB71172A60F224118715045CA1D7F78B
Authority key identifier: CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa
Signing time:             Thu 04 Apr 2024 01:01:12 +0000
ROA not before:           Thu 04 Apr 2024 00:56:12 +0000
ROA not after:            Thu 03 Apr 2025 01:01:12 +0000
asID:                     266242
IP address blocks:        192.145.205.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a2:f6:67:fb:71:17:2a:60:f2:24:11:87:15:04:5c:a1:d7:f7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED535AAD1233C2161BDBD4439E62790A2F55012
        Validity
            Not Before: Apr  4 00:56:12 2024 GMT
            Not After : Apr  3 01:01:12 2025 GMT
        Subject: CN=AEB22DCE2B16E6F1E2537C5D6795AFB7402111AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:4e:87:99:63:9a:1c:d3:12:ac:78:11:f9:
                    a6:ae:7e:98:03:5d:df:18:a7:91:eb:f0:af:e2:35:
                    3c:f1:4b:6a:4d:b2:09:55:29:a5:26:86:47:68:9f:
                    16:22:ff:14:40:14:d8:9e:a1:3b:6d:b0:ac:07:3b:
                    a4:1f:df:44:dc:56:e0:c6:db:f0:43:60:18:80:3e:
                    50:e8:8d:d7:20:db:61:50:f3:23:7e:be:30:65:7e:
                    db:cb:0a:1d:5d:a0:d4:67:a4:85:6b:7e:8f:a4:04:
                    7e:ea:0e:fe:08:48:49:24:0f:6a:5d:ba:36:11:01:
                    d6:f4:0d:41:59:36:39:bd:67:fb:85:fd:01:e4:ac:
                    9b:04:26:b0:0f:81:d3:b1:31:e4:40:29:92:b3:63:
                    d1:7e:3f:03:60:e8:3a:af:c1:c0:0a:42:e2:7c:52:
                    b5:e5:ae:c4:40:92:b0:c0:90:8f:0c:a8:b6:a5:9e:
                    97:cb:ae:29:78:99:51:32:00:a1:97:b5:bc:9f:f0:
                    2a:a9:a4:aa:c1:77:85:7a:17:47:c8:fc:e3:d4:6f:
                    d0:d3:dd:be:e3:f5:c2:f6:5e:d1:b8:fe:ef:9e:cc:
                    5f:34:18:18:91:2a:a5:f4:f1:42:24:5c:23:0d:3f:
                    a3:8c:a0:83:e1:4c:6d:ba:b8:86:08:10:2f:ee:ef:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B2:2D:CE:2B:16:E6:F1:E2:53:7C:5D:67:95:AF:B7:40:21:11:AA
            X509v3 Authority Key Identifier:
                keyid:CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:16:0c:e8:da:ca:f7:5a:c2:10:8f:fc:3f:78:0c:8a:13:f2:
         77:c3:94:62:3b:80:27:0e:92:86:24:54:5d:14:fd:1b:65:f4:
         2b:68:7a:38:bc:ca:1d:a9:6d:25:b6:a2:2f:aa:16:3a:52:68:
         e9:81:20:f3:15:2f:4d:c8:2a:b9:cf:72:8e:12:c5:4d:ea:3b:
         bb:ad:7f:f2:47:c3:42:1c:55:ce:b0:b8:6f:d7:03:9c:7b:6b:
         9e:ce:5f:65:28:3d:89:ab:e3:ae:03:6e:6a:34:31:b6:e3:63:
         e8:15:a9:0b:8a:e7:51:c1:a7:16:c5:cc:e6:05:20:3b:58:a5:
         56:68:81:15:59:54:bd:9a:fb:f3:21:6c:be:dc:d5:71:87:55:
         f0:c0:6a:91:40:5b:66:62:6a:4e:c6:a5:c6:d6:23:05:88:3e:
         56:cc:1e:ce:49:9e:3e:de:1f:82:20:92:33:14:4b:90:65:66:
         38:2c:87:39:77:93:fa:a3:0e:0b:87:0d:92:11:37:91:6b:2d:
         7f:68:b3:2a:dd:96:df:fc:98:e4:55:35:de:fb:5d:b2:68:fe:
         90:d4:b1:96:71:5a:58:94:26:2f:ca:01:2b:c3:6c:20:b7:18:
         11:a3:8b:1c:1b:b0:99:4e:02:a1:47:a2:6f:e5:c6:9d:c5:0f:
         7c:1b:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org