Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa
File:                     3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa (raw, json)
Hash identifier:          TvkuPRYxJsua6U/KQsH5bQhr4QIkIKNTtK97l0p+/yw=
Subject key identifier:   28:39:49:4D:34:ED:DD:E2:89:C0:00:AE:26:C0:87:7F:EC:B7:6A:75
Certificate issuer:       /CN=CED535AAD1233C2161BDBD4439E62790A2F55012
Certificate serial:       7A279272C0A9A1093FD1394DAE7F89CB6F42A771
Authority key identifier: CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa
Signing time:             Thu 04 Apr 2024 01:01:15 +0000
ROA not before:           Thu 04 Apr 2024 00:56:15 +0000
ROA not after:            Thu 03 Apr 2025 01:01:15 +0000
asID:                     266242
IP address blocks:        192.145.206.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:27:92:72:c0:a9:a1:09:3f:d1:39:4d:ae:7f:89:cb:6f:42:a7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED535AAD1233C2161BDBD4439E62790A2F55012
        Validity
            Not Before: Apr  4 00:56:15 2024 GMT
            Not After : Apr  3 01:01:15 2025 GMT
        Subject: CN=2839494D34EDDDE289C000AE26C0877FECB76A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:a7:6b:3b:ea:c0:01:5a:18:d6:90:d9:44:
                    fa:89:2c:28:da:8c:4a:ca:46:66:55:dd:e1:e8:ac:
                    40:0b:85:c7:32:e2:57:d3:d7:ee:f2:9d:dc:91:8c:
                    a2:a3:22:51:8d:28:0c:01:86:76:69:10:3f:b3:9f:
                    2c:2b:f3:68:5a:e5:c6:b0:06:b6:12:21:2a:04:ce:
                    7d:4a:ee:b4:a1:c1:f2:61:1a:7f:9c:72:ef:30:4e:
                    38:39:75:07:43:7b:a3:eb:4c:f3:b5:84:82:ae:63:
                    b4:7d:6f:de:5e:e6:1a:e1:0e:49:c0:b9:37:19:b3:
                    97:2d:81:87:23:04:ab:40:a2:48:fe:ad:8e:fe:de:
                    62:f1:8d:20:55:f2:6f:91:c7:d4:82:58:eb:7e:56:
                    8f:b8:57:bd:e3:11:44:9a:80:6b:eb:6a:f9:b8:94:
                    da:a2:e5:54:eb:47:1c:2b:3c:4b:15:04:29:f5:32:
                    9a:62:81:d5:6a:ba:0e:64:93:a9:3e:a7:d8:58:4e:
                    df:60:5a:b3:bd:b7:44:c3:31:8d:ad:51:18:26:4d:
                    d8:50:65:f6:d2:9d:fd:09:40:39:bb:2d:d1:a8:76:
                    bb:14:c9:6e:a0:cc:12:ca:64:64:7b:d2:dd:cc:a3:
                    58:c4:8b:ef:df:72:fc:6c:3f:51:4c:05:fc:0b:aa:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:39:49:4D:34:ED:DD:E2:89:C0:00:AE:26:C0:87:7F:EC:B7:6A:75
            X509v3 Authority Key Identifier:
                keyid:CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:51:e3:6b:b9:05:db:db:13:cc:21:57:bd:fb:7b:05:6a:60:
         46:34:cb:e4:4e:3b:60:48:12:1a:a6:8f:46:1e:ea:79:3d:5f:
         b9:23:59:b6:0f:eb:04:e2:28:ae:c7:91:f8:28:a5:59:22:2d:
         f4:ba:0d:b9:46:fa:33:cc:f9:44:9c:fd:86:64:43:ac:ce:a9:
         1c:bb:c1:db:94:fd:81:13:a8:07:5e:f1:34:09:12:b1:f3:cd:
         d6:58:c4:8a:9a:3f:b0:0e:04:67:ac:94:f5:14:f6:a2:de:30:
         f2:ff:d9:08:eb:f5:2f:85:51:29:07:17:56:ed:f5:4d:91:1d:
         7c:c1:13:56:1e:d8:59:74:90:d4:51:0d:3c:0c:4f:c4:22:33:
         b0:71:ee:8a:e4:65:48:fb:a7:32:f8:ab:74:3b:ef:a3:fc:9d:
         2b:0d:97:66:55:82:b3:f8:5a:1f:c1:bd:18:b1:2c:3b:c2:47:
         8c:b0:52:9f:70:e0:b6:ed:b7:5f:f0:8b:d8:b8:b5:e7:b6:9f:
         ed:40:53:89:1b:10:21:f8:64:1e:93:52:2d:4b:88:b8:71:c2:
         bb:8b:67:06:6e:09:b1:f5:df:27:3d:7b:bd:15:3d:03:6b:a9:
         05:4a:c5:ab:4e:c1:b4:e6:e3:1f:7d:46:71:88:0f:c0:6f:51:
         53:a9:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org