Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3139312e362e3139322e302f31392d3234203d3e203238323939.roa
File:                     3139312e362e3139322e302f31392d3234203d3e203238323939.roa (raw, json)
Hash identifier:          W53lBOSim25F3PeeXulRmWvg+2m/lxXsoIOQNCqB7O0=
Subject key identifier:   FA:B1:B2:F6:4A:99:90:32:A5:A1:B0:5B:EE:92:41:AF:23:B7:C4:64
Certificate issuer:       /CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
Certificate serial:       44D917A8F53FA21754EA093BAF9714DB8348EFDC
Authority key identifier: 34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3139312e362e3139322e302f31392d3234203d3e203238323939.roa
Signing time:             Thu 04 Apr 2024 23:14:07 +0000
ROA not before:           Thu 04 Apr 2024 23:09:07 +0000
ROA not after:            Thu 03 Apr 2025 23:14:07 +0000
asID:                     28299
IP address blocks:        191.6.192.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d9:17:a8:f5:3f:a2:17:54:ea:09:3b:af:97:14:db:83:48:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
        Validity
            Not Before: Apr  4 23:09:07 2024 GMT
            Not After : Apr  3 23:14:07 2025 GMT
        Subject: CN=FAB1B2F64A999032A5A1B05BEE9241AF23B7C464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:7b:c4:05:71:40:de:69:8a:9d:fc:cb:6f:
                    7c:d2:c8:bc:54:bf:39:25:07:9b:82:2a:b1:ad:a6:
                    7c:c1:2f:b9:15:a3:17:3a:79:5e:6d:07:20:d5:4a:
                    fa:89:80:04:94:af:f0:a7:f4:e7:4e:aa:e9:5a:69:
                    60:8b:70:db:cc:96:34:e4:11:43:c0:f1:0c:04:36:
                    a3:60:3c:a5:13:80:0e:db:82:d5:d2:e3:b3:73:00:
                    b2:14:61:9b:aa:59:a4:9a:ec:d1:60:06:4e:87:4d:
                    fe:3c:e0:4d:c6:45:b5:37:2b:90:06:4e:4f:ba:fd:
                    3d:5e:e9:d0:8e:13:f6:bb:df:a4:68:07:93:cb:47:
                    fe:dc:c1:05:1d:ee:0e:31:dd:e9:dc:24:e2:b9:dd:
                    47:b3:cd:0c:92:29:cf:b6:85:1b:24:dc:2d:27:b4:
                    7c:60:5c:19:98:38:21:ce:aa:85:69:6b:68:58:48:
                    bd:38:b0:02:ab:dc:f4:87:78:3e:51:42:dd:50:e7:
                    ea:09:4b:c1:10:ae:7d:82:d2:e7:04:41:83:e1:1c:
                    c8:3a:b3:ba:6a:5f:fa:85:71:a3:24:ff:b8:e3:4d:
                    08:47:a1:87:c6:75:59:b0:70:3a:0a:44:c3:56:c2:
                    fd:29:d1:b7:8b:72:e4:5b:7b:8b:24:c5:d2:89:f5:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B1:B2:F6:4A:99:90:32:A5:A1:B0:5B:EE:92:41:AF:23:B7:C4:64
            X509v3 Authority Key Identifier:
                keyid:34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3139312e362e3139322e302f31392d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:bf:c0:71:34:a2:d1:78:84:f8:a6:b5:0e:6b:c5:13:64:
         27:66:5d:b3:31:92:b1:ef:87:ca:d2:86:e2:ad:e7:a5:14:d9:
         ab:0a:21:cd:24:f9:de:0b:19:4f:aa:a5:2f:be:dd:14:cf:6e:
         26:3f:60:1b:6b:32:45:30:e9:a8:42:a3:fa:39:5b:c7:ea:75:
         d1:c0:90:db:94:bc:f3:9d:1f:34:f3:9f:dd:72:95:47:d8:74:
         7d:5f:8c:ee:60:b4:99:54:1e:bc:e9:f8:dc:41:ed:e6:56:9a:
         5e:75:d1:51:70:8c:31:b8:3d:ae:ac:86:67:38:c0:c6:de:44:
         59:85:1d:19:5d:f9:de:1c:9c:03:e2:07:e0:c6:e1:8b:7a:d2:
         e1:9c:aa:bd:df:d4:c2:ff:d0:c5:47:51:62:0f:66:e1:ad:b4:
         76:fc:8e:e4:e0:d5:3a:1b:18:87:72:42:38:72:28:eb:6c:7a:
         88:4f:da:5d:3a:75:c5:98:be:c9:1e:cb:cf:26:13:99:e6:00:
         c4:d6:39:88:0a:e5:de:5e:7f:0f:52:a9:16:a6:77:14:f3:8f:
         44:15:bc:7d:42:c7:c0:a4:93:d1:bb:27:5d:10:77:c1:fe:b8:
         c1:c1:91:ff:35:a4:60:f1:72:de:ab:b6:75:27:07:24:00:04:
         12:02:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:54 2024 by rpki-client on console-ams.rpki-client.org