Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/3139302e3137312e38352e302f32342d3234203d3e20323731323630.roa
File:                     3139302e3137312e38352e302f32342d3234203d3e20323731323630.roa (raw, json)
Hash identifier:          nPVL4S55gaMa5DCWIoI3ggJe023W8vlhanWqPWwo61E=
Subject key identifier:   4C:24:66:E6:43:88:6D:5D:24:E2:06:28:90:75:15:0E:13:D7:07:78
Certificate issuer:       /CN=3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB
Certificate serial:       1BB5365269E4E0FDD5A576226921FF9A3CF7F7A2
Authority key identifier: 31:57:DF:FC:50:D5:E3:CB:2A:92:5A:F3:5D:7F:ED:AC:4A:55:95:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/3139302e3137312e38352e302f32342d3234203d3e20323731323630.roa
Signing time:             Wed 03 Apr 2024 21:28:06 +0000
ROA not before:           Wed 03 Apr 2024 21:23:06 +0000
ROA not after:            Wed 02 Apr 2025 21:28:06 +0000
asID:                     271260
IP address blocks:        190.171.85.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b5:36:52:69:e4:e0:fd:d5:a5:76:22:69:21:ff:9a:3c:f7:f7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB
        Validity
            Not Before: Apr  3 21:23:06 2024 GMT
            Not After : Apr  2 21:28:06 2025 GMT
        Subject: CN=4C2466E643886D5D24E206289075150E13D70778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:13:0c:66:0f:50:4b:6e:10:d0:c5:4d:aa:
                    a6:4b:3b:e6:60:07:05:50:4c:73:61:e0:21:a0:6e:
                    5c:62:c5:8c:b6:bd:49:ba:26:86:69:42:38:08:4f:
                    2b:5a:7f:75:92:6e:6b:93:4b:07:de:80:da:82:6d:
                    9d:17:d8:5d:52:90:ec:83:87:41:c1:5c:f2:52:97:
                    e7:9c:26:72:17:c8:fa:42:fd:1e:c1:62:a6:2d:c2:
                    61:86:a5:0f:1e:95:98:30:27:c6:00:51:6d:d7:e0:
                    90:a5:f4:05:97:b3:94:57:82:20:16:41:3c:c5:b6:
                    93:40:03:e8:32:54:63:55:56:2e:42:3f:bb:07:5c:
                    04:a0:8f:24:1b:63:c2:f8:41:25:c1:9f:c0:1d:dc:
                    e2:31:dc:de:1b:f2:09:b4:3a:d1:6b:e6:49:8e:cd:
                    65:bf:9d:97:e5:80:19:ad:42:8d:0b:1f:f6:42:33:
                    65:3a:83:b3:a5:4a:2b:f8:ad:ab:23:f4:69:ca:7a:
                    57:80:bf:69:9f:6e:f1:fd:e7:76:13:93:64:f0:95:
                    ee:d9:ab:8e:73:b9:dd:01:5a:70:2b:29:38:ac:63:
                    f5:c1:36:b9:ba:3e:df:a6:12:be:f1:fb:fe:93:f5:
                    82:9d:ec:75:46:f9:56:98:58:a3:39:8d:14:22:e9:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:24:66:E6:43:88:6D:5D:24:E2:06:28:90:75:15:0E:13:D7:07:78
            X509v3 Authority Key Identifier:
                keyid:31:57:DF:FC:50:D5:E3:CB:2A:92:5A:F3:5D:7F:ED:AC:4A:55:95:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/3139302e3137312e38352e302f32342d3234203d3e20323731323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:10:4b:58:94:9b:d5:1f:b8:f7:65:64:a6:0b:ff:d8:89:d0:
         85:ab:c4:40:b3:73:ab:5f:33:c5:cd:6e:67:32:90:f6:67:b7:
         10:c4:d6:d5:92:64:44:69:1e:ee:4c:2a:a0:57:c9:cc:b3:55:
         bf:8b:f2:40:71:91:04:71:9e:74:06:e9:82:ff:44:ce:45:0e:
         fe:56:f5:41:47:51:f7:36:8a:45:16:82:b9:c4:14:47:9f:05:
         33:68:4b:06:5d:e5:77:d3:c1:47:25:da:ff:8d:de:f5:5e:0d:
         42:db:e2:fe:c4:1b:47:6a:8c:86:12:5c:42:a8:ff:43:9b:c8:
         24:96:65:e5:44:92:fe:67:6a:7d:3f:81:d9:d1:ea:88:22:e1:
         24:f3:99:21:49:bc:a5:8f:5d:42:2b:7c:8c:b4:9a:e3:20:11:
         b6:9c:63:2d:b8:94:25:34:f0:59:c9:94:50:35:40:5f:f6:96:
         a3:f2:25:c0:e4:a5:ed:d4:92:29:80:2f:1d:e9:af:18:c4:12:
         5f:61:20:84:90:75:72:6e:73:2f:27:c8:fa:37:7d:e9:fc:af:
         b4:31:f3:bb:45:8c:4e:98:70:31:44:24:c9:b2:75:7a:6a:b6:
         6c:4a:f2:3c:a4:9d:96:ae:08:ef:2c:9d:e1:2d:80:6d:28:f1:
         0a:cc:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 10:59:34 2024 by rpki-client on console-ams.rpki-client.org