Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
File:                     3138392e33382e38302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          IgesrPhWk0dYrkmuBKaAkNX/uZqDeEOx9UNT19Z3SVs=
Subject key identifier:   D0:82:22:98:7B:3B:EE:A7:B9:03:E0:92:EA:56:0F:E1:60:8C:68:5C
Certificate issuer:       /CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
Certificate serial:       7CF6F8BBAC365CE3D3FAFAC4471431D11335B046
Authority key identifier: 34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
Signing time:             Thu 04 Apr 2024 23:14:07 +0000
ROA not before:           Thu 04 Apr 2024 23:09:07 +0000
ROA not after:            Thu 03 Apr 2025 23:14:07 +0000
asID:                     28299
IP address blocks:        189.38.80.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f6:f8:bb:ac:36:5c:e3:d3:fa:fa:c4:47:14:31:d1:13:35:b0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
        Validity
            Not Before: Apr  4 23:09:07 2024 GMT
            Not After : Apr  3 23:14:07 2025 GMT
        Subject: CN=D08222987B3BEEA7B903E092EA560FE1608C685C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:5d:f1:92:2f:73:0b:23:4a:55:df:a0:69:
                    84:68:0f:24:f9:fd:b8:a2:29:9b:a4:d5:22:25:16:
                    ba:1c:27:4a:1d:e8:68:8b:99:30:8d:19:9a:d2:44:
                    98:a1:32:0e:dc:76:b2:6e:ec:63:72:99:35:1a:33:
                    0c:86:50:52:a7:f3:d3:e6:5d:c5:03:2d:6c:40:0e:
                    58:aa:7b:25:c0:86:52:a6:4b:81:8f:ff:2d:75:2f:
                    c5:9a:e9:fc:41:f8:bf:b9:6d:5f:e7:0f:21:a1:9f:
                    f4:53:fd:9f:a4:fb:dd:be:65:f8:0f:c9:35:4b:29:
                    b9:cd:85:1f:04:86:bf:ea:62:05:bf:89:43:72:ca:
                    54:63:9c:57:f9:60:1e:f8:9c:80:e4:b9:9d:2b:c4:
                    08:93:71:ae:b0:97:aa:de:49:0e:87:88:11:7d:45:
                    26:31:a6:3d:6b:48:10:7e:02:27:8b:13:55:9e:4b:
                    28:20:64:bf:4c:68:9e:8a:54:8f:de:72:03:7c:0a:
                    3c:4f:56:42:a6:36:cd:78:7e:39:63:8d:62:35:c7:
                    ef:d7:31:1c:4f:ae:41:96:f9:25:e3:1f:84:ff:2e:
                    71:63:e7:5b:4b:58:84:7f:b7:91:5b:f2:12:70:b0:
                    d9:28:6d:99:da:76:e0:34:92:ac:59:14:e9:c8:40:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:82:22:98:7B:3B:EE:A7:B9:03:E0:92:EA:56:0F:E1:60:8C:68:5C
            X509v3 Authority Key Identifier:
                keyid:34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3138392e33382e38302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:df:d9:e6:22:31:74:cb:c4:19:a5:86:33:6b:77:3e:98:
         e7:a7:3d:92:1f:5e:b9:10:51:87:02:da:c4:83:a6:26:bb:59:
         d9:b2:72:76:e9:a4:5e:4b:38:72:d1:8c:4b:69:92:29:22:5e:
         9d:83:d3:79:3c:ac:17:2e:73:b2:74:5a:4c:78:3e:93:4c:08:
         09:34:fd:62:56:ae:91:ac:b1:ef:31:a1:c4:a3:54:dd:f6:9c:
         44:76:d9:44:61:9f:64:fa:44:b0:75:33:11:23:c6:bc:78:ac:
         1c:3a:80:33:c2:85:51:0c:ab:8c:66:f1:d4:de:86:44:6e:bd:
         93:9c:bd:68:f1:e9:28:9c:7f:92:be:3d:bc:bc:fb:d8:3a:75:
         a1:14:f8:46:6f:dd:dc:54:7e:16:3c:ba:0b:12:0c:52:2f:4a:
         79:95:dc:71:b0:84:09:a3:d2:8b:1f:94:15:ad:5c:d1:5f:b5:
         d5:52:65:fa:e6:3a:89:10:8b:4f:38:ad:39:a1:70:28:72:f1:
         c4:07:f2:5f:0b:d7:8b:cc:32:9d:c4:6c:e6:07:8f:78:a6:4f:
         97:58:50:56:63:31:2b:11:19:43:e1:22:e3:af:e6:b5:a8:a1:
         9d:5d:f2:5b:36:64:30:88:c4:4a:07:69:36:a5:91:b0:1a:2c:
         8b:27:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:54 2024 by rpki-client on console-ams.rpki-client.org