Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230372e302f32342d3234203d3e20323636323432.roa
File:                     3139322e3134352e3230372e302f32342d3234203d3e20323636323432.roa (raw, json)
Hash identifier:          4PSnA6LdTGi2Ok3nTey98V57IbCSjERwn0kAX9p4BO8=
Subject key identifier:   C3:C6:0E:F9:05:1E:DA:8A:E6:24:2C:41:62:09:22:40:76:80:12:34
Certificate issuer:       /CN=CED535AAD1233C2161BDBD4439E62790A2F55012
Certificate serial:       466D23585DFFCB101623E3942DE3FFF9C8AD3A99
Authority key identifier: CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230372e302f32342d3234203d3e20323636323432.roa
Signing time:             Thu 04 Apr 2024 01:01:13 +0000
ROA not before:           Thu 04 Apr 2024 00:56:13 +0000
ROA not after:            Thu 03 Apr 2025 01:01:13 +0000
asID:                     266242
IP address blocks:        192.145.207.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6d:23:58:5d:ff:cb:10:16:23:e3:94:2d:e3:ff:f9:c8:ad:3a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED535AAD1233C2161BDBD4439E62790A2F55012
        Validity
            Not Before: Apr  4 00:56:13 2024 GMT
            Not After : Apr  3 01:01:13 2025 GMT
        Subject: CN=C3C60EF9051EDA8AE6242C416209224076801234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:88:57:0d:d0:66:26:77:8a:78:c0:54:f7:
                    c3:0c:a7:5a:fa:62:a5:cc:c8:38:32:58:1f:f2:59:
                    8f:d3:6a:81:b6:72:21:00:70:02:69:6d:fd:6b:25:
                    13:7c:99:ec:b4:93:5b:d5:94:48:4b:31:2c:03:cc:
                    25:a0:cf:09:e8:56:70:ea:09:6e:0c:42:d9:4b:3e:
                    79:f8:59:d8:23:c7:e4:62:80:fc:c3:c4:b6:41:e5:
                    ce:6d:08:75:c9:25:80:e9:4e:39:8e:e6:ce:81:84:
                    ca:76:2c:12:3a:d2:b8:0f:99:48:7c:32:a5:68:24:
                    81:85:99:62:10:fc:66:34:0f:13:6d:2a:4c:27:46:
                    74:60:f5:00:4f:2a:33:8c:7a:bf:ae:dc:01:b3:fa:
                    a9:1d:32:ee:a6:f2:a3:f8:03:82:09:31:23:fd:c9:
                    6f:45:db:e5:c4:74:e0:2e:ed:a8:29:e6:41:a6:4f:
                    cc:ab:9c:d8:31:16:d9:c8:99:6e:63:5e:98:cb:93:
                    ac:09:60:a7:1d:05:7b:50:55:00:b7:90:0a:37:63:
                    4e:e3:2f:71:21:19:7f:66:83:6a:53:64:48:a7:50:
                    d6:2d:87:cc:e6:0c:17:84:3e:7c:69:18:26:f7:96:
                    0c:54:11:1b:74:5b:e7:39:88:a2:3c:5e:e2:37:a4:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C6:0E:F9:05:1E:DA:8A:E6:24:2C:41:62:09:22:40:76:80:12:34
            X509v3 Authority Key Identifier:
                keyid:CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/3139322e3134352e3230372e302f32342d3234203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:48:18:37:96:14:67:ee:d1:d3:db:7a:fd:19:a4:a0:36:84:
         48:60:d3:ad:c8:2a:50:c0:38:ce:27:e0:69:7b:ef:df:b1:a5:
         8d:d2:e0:5b:27:ce:d3:44:8a:14:3f:1b:11:27:5b:fe:48:b1:
         1e:08:80:ff:b9:71:8d:21:1c:2b:1b:9a:01:f0:29:b0:25:53:
         31:a6:ad:f2:ee:0c:ad:1c:9c:c5:0d:c9:a0:7f:d1:0c:b4:94:
         62:dc:41:f6:c1:d3:21:f0:d3:a2:74:97:35:a8:5b:cc:1d:c4:
         18:4f:96:76:c2:91:d0:c4:bd:52:0c:25:b1:bb:50:9a:63:8d:
         e6:93:95:c8:83:1d:37:14:4f:6a:b3:65:58:0b:31:53:f8:83:
         da:58:ba:5c:ea:45:56:ac:b6:11:34:70:b6:77:be:6c:d5:a7:
         91:09:26:88:f9:93:2c:91:fe:80:ec:81:17:fa:fa:2d:cc:b6:
         82:ef:1d:71:cd:8d:a6:69:70:3e:4b:13:df:da:85:f2:5b:b0:
         e7:43:0a:f2:cd:cb:d4:75:71:15:41:3b:7e:51:41:b6:b7:5b:
         6f:b0:dc:92:33:3e:d5:3a:11:1b:cd:46:48:35:2f:af:f3:b9:
         27:63:dd:ea:ea:f3:f3:fe:1d:8f:62:22:04:a9:20:dc:7b:fd:
         c5:a7:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org