Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa
File:                     3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa (raw, json)
Hash identifier:          kCqaPTvDMmk9DsGs2Wr7JQkS5JDe1K0XT4YdQQtcYEM=
Subject key identifier:   38:DC:BD:E5:A3:2E:BF:4D:E3:A8:C1:77:8F:E6:2E:17:58:19:77:07
Certificate issuer:       /CN=CED535AAD1233C2161BDBD4439E62790A2F55012
Certificate serial:       24BABFF3EDACDFFF90846F9FF348EA998E217D70
Authority key identifier: CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa
Signing time:             Thu 04 Apr 2024 01:01:12 +0000
ROA not before:           Thu 04 Apr 2024 00:56:12 +0000
ROA not after:            Thu 03 Apr 2025 01:01:12 +0000
asID:                     266242
IP address blocks:        192.145.206.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ba:bf:f3:ed:ac:df:ff:90:84:6f:9f:f3:48:ea:99:8e:21:7d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED535AAD1233C2161BDBD4439E62790A2F55012
        Validity
            Not Before: Apr  4 00:56:12 2024 GMT
            Not After : Apr  3 01:01:12 2025 GMT
        Subject: CN=38DCBDE5A32EBF4DE3A8C1778FE62E1758197707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:7f:0a:91:51:b3:33:58:2c:11:30:9c:78:
                    54:70:ed:1a:53:98:22:42:f4:66:f7:79:b3:36:91:
                    aa:f7:99:3d:46:e1:f6:fd:dd:0c:3f:a9:27:b7:4c:
                    6a:3c:91:2b:a1:72:ee:a3:65:88:af:81:d6:c2:3f:
                    e4:f5:df:21:28:59:ba:b2:a8:47:7c:72:59:24:c1:
                    32:b6:86:f0:13:cb:e0:a0:71:cf:7e:a1:a4:8c:8e:
                    1c:ee:b1:85:fe:ad:4a:b1:f2:b6:17:09:d8:c6:c2:
                    2d:0c:eb:3e:7f:64:a2:da:eb:b3:cc:25:11:19:ef:
                    74:1f:a7:54:3e:e4:16:c1:1b:75:bc:20:7b:af:dd:
                    03:b3:1b:29:43:0b:c8:3e:ee:e9:ff:0d:c3:80:f7:
                    8d:49:6c:bd:6c:66:89:c3:c3:d2:86:1c:6e:a9:00:
                    ae:24:4d:8d:61:e6:7e:3d:1a:61:a7:40:0b:5e:62:
                    5c:43:2b:41:2d:b7:06:78:0f:ee:55:9d:9c:48:c3:
                    cc:d0:c5:41:6e:3f:9b:d2:0b:37:18:c6:35:9c:9d:
                    34:16:07:38:b5:21:01:17:59:1a:a0:d3:61:79:31:
                    82:38:67:9a:7a:8d:0a:07:02:b5:54:ca:6d:4a:23:
                    4b:78:9f:7d:2f:43:4a:ec:f1:bd:9e:83:e7:63:4a:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DC:BD:E5:A3:2E:BF:4D:E3:A8:C1:77:8F:E6:2E:17:58:19:77:07
            X509v3 Authority Key Identifier:
                keyid:CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:88:ed:e0:4a:6b:67:0f:52:ba:d1:8e:dd:e4:7a:46:d6:ea:
         3b:f0:42:f6:ff:d4:f5:ae:d1:8d:b3:8f:cf:e4:90:5a:15:20:
         15:38:7e:fa:36:e5:6c:54:a5:e1:70:1a:78:63:ed:7f:14:fb:
         39:cc:2f:3e:41:f0:2b:59:da:72:6a:b7:64:a0:d1:5d:3f:46:
         68:c7:92:53:b2:a4:b2:05:da:99:75:b0:db:4d:9a:99:89:89:
         36:fa:b9:04:90:5c:1d:b4:d6:8a:70:9b:01:d0:75:4f:3c:ab:
         0b:39:5a:51:4b:1b:52:ba:27:1f:75:28:41:92:f7:8e:7b:19:
         d2:d8:2a:51:58:c6:88:1d:d0:66:5f:47:1d:b5:51:76:52:ec:
         c5:ed:2c:b7:30:31:d3:a2:46:eb:a0:6a:62:6d:f5:00:7e:fe:
         72:29:d5:df:bd:3e:2c:bd:9b:55:aa:41:3c:3f:c4:af:76:ad:
         03:6b:3e:cf:c3:8a:b2:7c:4e:e3:f2:c4:32:08:d5:ac:10:76:
         8c:84:29:fa:ab:df:fb:5d:7c:d6:a9:11:86:05:a0:d0:55:a7:
         b3:f2:4c:89:db:40:43:0b:5c:f5:67:7b:60:2a:89:c4:25:3e:
         91:6e:ff:8a:ed:18:4d:0e:32:7a:29:ad:d5:05:88:34:4a:ab:
         88:d8:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org