Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32342d3234203d3e20323633353431.roa
File:                     3139312e352e3136362e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          TsW2wCaQO6pSN3HcuVoDMzDafAwW/M5QHrpz3pB/ji0=
Subject key identifier:   94:F3:91:0E:34:3B:E8:63:37:54:CC:EF:B2:32:B9:F7:88:10:81:A9
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       03059A48318F5187711447A035D8B8847011BAE5
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32342d3234203d3e20323633353431.roa
Signing time:             Tue 30 Apr 2024 14:47:31 +0000
ROA not before:           Tue 30 Apr 2024 14:42:31 +0000
ROA not after:            Tue 29 Apr 2025 14:47:31 +0000
asID:                     263541
IP address blocks:        191.5.166.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:05:9a:48:31:8f:51:87:71:14:47:a0:35:d8:b8:84:70:11:ba:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Apr 30 14:42:31 2024 GMT
            Not After : Apr 29 14:47:31 2025 GMT
        Subject: CN=94F3910E343BE8633754CCEFB232B9F7881081A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:d8:46:20:cb:37:df:63:39:33:92:3b:32:
                    0a:a0:47:25:55:2f:f6:fa:ff:50:7f:39:6f:4f:10:
                    da:62:49:7f:9b:e6:f8:3c:22:23:cd:80:45:31:6b:
                    9e:f1:a2:53:5a:14:74:90:41:bb:48:c4:be:ad:53:
                    25:20:8d:f0:23:3a:9f:8b:aa:d6:c0:c0:31:f3:cf:
                    0c:72:63:9f:e9:08:4a:62:e2:80:e4:0b:d2:fa:88:
                    a3:e2:8e:8e:0c:ae:67:2f:b6:22:a3:75:b8:f3:ee:
                    ed:86:e3:02:e7:3a:ab:d1:e8:8a:8d:9d:d4:6b:c4:
                    7d:f9:7c:c4:b8:e7:b8:91:7b:1e:80:39:66:1b:3e:
                    a2:1f:4c:6f:fd:a8:4d:cf:51:ce:7b:7c:ca:c7:fd:
                    6a:2d:c4:eb:55:80:e5:12:49:69:69:23:21:6b:f9:
                    2c:b6:6d:14:49:c9:22:8c:7c:25:a9:9e:ed:f5:54:
                    08:b1:35:6e:c8:09:ae:db:56:b6:00:8f:1c:ed:40:
                    31:ac:0d:63:cb:61:22:5d:30:90:67:fc:ce:a4:22:
                    07:4a:d1:b8:d2:b8:5a:6e:48:09:86:8a:d6:d3:f6:
                    cb:90:fe:a2:71:52:e9:3e:18:5a:e1:60:c0:7e:8c:
                    27:68:70:ff:7e:78:54:ea:c6:db:bf:d4:a5:af:3c:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F3:91:0E:34:3B:E8:63:37:54:CC:EF:B2:32:B9:F7:88:10:81:A9
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0b:1f:dc:b7:77:48:e1:97:19:93:c8:bf:31:65:62:5d:00:
         f5:df:ff:b0:19:da:59:89:52:c8:f5:b6:80:96:8e:e8:22:3b:
         d9:f2:b2:e5:2c:81:0c:7f:21:5e:ce:5e:2c:c1:4e:5d:51:52:
         b9:8d:f8:f3:d9:47:ea:b3:fb:b2:d7:c9:16:ce:68:97:4e:16:
         b4:b6:6c:da:31:ce:4c:ae:dc:04:85:4e:18:86:90:78:6e:cf:
         4a:80:ea:92:47:3b:4e:05:a2:5d:af:0a:53:11:3f:63:98:19:
         ec:c8:c8:32:ce:8c:d5:09:b4:b5:01:db:35:d3:c8:c9:c7:83:
         d3:5a:ef:8f:59:e3:9a:c0:88:87:d7:4d:21:87:95:be:fe:75:
         65:a9:ac:5b:04:27:8f:3f:11:b0:7a:ee:f4:5f:49:44:b2:56:
         06:a5:0f:29:d5:eb:3a:e8:77:a8:5c:55:39:36:32:cb:59:15:
         d7:ca:67:a7:d8:f7:a2:dd:11:61:3d:e9:28:93:15:ef:24:c3:
         8f:58:fe:be:d4:91:a4:f1:c9:a7:75:cb:4a:a8:78:05:c5:65:
         bb:03:a1:71:4a:39:c2:4a:5d:94:91:5d:ef:e5:c8:76:f4:de:
         53:53:0b:8b:35:2b:d9:ac:e7:bb:15:e8:82:ec:9c:7a:27:de:
         21:39:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 19:38:55 2024 by rpki-client on console-fra.rpki-client.org