Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32332d3234203d3e20323730393238.roa
File:                     3139302e3132332e322e302f32332d3234203d3e20323730393238.roa (raw, json)
Hash identifier:          4NYQDmgkYH3C6pJxFxex0RGA2l49wVtpBhnbmwAqiEQ=
Subject key identifier:   6C:C3:60:75:56:A0:87:F9:1A:A6:DE:18:83:7F:E6:48:1E:3D:44:97
Certificate issuer:       /CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
Certificate serial:       2FAE55E5377276147F32BA9EC14A8FF632CE113E
Authority key identifier: 1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32332d3234203d3e20323730393238.roa
Signing time:             Thu 13 Jun 2024 04:25:26 +0000
ROA not before:           Thu 13 Jun 2024 04:20:26 +0000
ROA not after:            Thu 12 Jun 2025 04:25:26 +0000
asID:                     270928
IP address blocks:        190.123.2.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ae:55:e5:37:72:76:14:7f:32:ba:9e:c1:4a:8f:f6:32:ce:11:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
        Validity
            Not Before: Jun 13 04:20:26 2024 GMT
            Not After : Jun 12 04:25:26 2025 GMT
        Subject: CN=6CC3607556A087F91AA6DE18837FE6481E3D4497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:20:27:d4:c7:d4:d2:5a:8a:37:f8:c4:34:be:
                    fd:a1:bd:5f:27:27:42:11:e0:66:b3:ab:62:b5:4e:
                    7c:43:2b:04:ab:5a:e2:4c:1b:9f:9e:84:5f:3a:0a:
                    fa:59:c3:6c:6d:71:5e:e7:e9:23:ab:3b:77:8b:bb:
                    71:62:a8:85:12:fb:c9:ab:4e:7a:0b:b9:56:a0:3e:
                    d0:6b:45:82:ce:82:61:7c:49:ee:70:f7:9c:5f:c2:
                    30:e7:7d:a5:24:cf:b7:95:a3:83:7b:8f:c1:13:1d:
                    6f:c7:39:a8:82:f8:5d:dc:97:43:d2:5b:76:31:f7:
                    08:2c:49:39:9f:b4:82:9a:9c:61:68:10:f8:37:7c:
                    92:ed:a5:0b:f1:e0:c4:74:be:59:50:cd:a1:40:29:
                    94:92:cf:89:39:c3:ff:5d:5b:3e:ed:bc:39:e8:22:
                    87:cc:6d:02:28:e4:5f:c5:9f:68:e8:08:8c:1f:97:
                    a7:11:c8:c4:43:d8:ee:be:8c:73:8d:9d:b0:aa:f7:
                    ed:78:db:cf:59:fe:f5:72:c1:10:3e:94:30:f6:ff:
                    f5:90:6f:b7:2b:4a:48:ae:d2:8a:b2:e2:cf:9a:8c:
                    b1:2a:2c:84:6e:68:cf:49:80:d8:3f:35:99:b4:9c:
                    2d:6f:3a:c5:ff:bc:93:ea:49:d1:12:34:4d:d9:10:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C3:60:75:56:A0:87:F9:1A:A6:DE:18:83:7F:E6:48:1E:3D:44:97
            X509v3 Authority Key Identifier:
                keyid:1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32332d3234203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:77:02:b5:97:ee:7a:27:89:14:06:0a:1d:c1:52:9a:49:
         17:20:8d:84:1a:d4:7a:6d:78:89:38:df:01:20:15:50:c9:3a:
         1f:95:ed:8b:f8:30:b6:2e:84:39:d9:24:84:f3:71:de:11:26:
         d6:1d:bb:4b:bd:0b:43:68:0b:9f:36:59:30:59:72:07:3c:29:
         72:34:0d:d6:f8:9f:fb:f0:a1:4a:86:fb:a0:68:88:a2:8b:fd:
         f0:c3:7a:06:a9:d9:d0:11:5f:6a:f0:2a:82:36:f4:36:7a:72:
         ab:65:cb:ae:60:2e:70:78:fa:24:d1:78:f2:b5:66:31:20:20:
         90:49:1f:2b:73:27:c2:4b:a6:2d:bd:1d:69:43:f7:f8:f9:86:
         a0:de:70:a5:d5:f3:eb:cb:13:40:a4:76:a8:6c:66:74:b2:e2:
         2d:55:17:f5:aa:5b:bd:89:d9:59:6e:b1:fc:6e:33:be:09:22:
         cb:b3:22:d8:62:8a:b7:10:d1:16:da:31:00:fd:e6:7f:c1:74:
         f7:58:e1:7c:24:3c:14:f2:87:b9:d9:44:b4:07:77:17:20:7b:
         53:e2:58:6f:a9:ce:94:30:64:d3:2e:00:d2:16:cb:89:cf:9b:
         62:03:c5:d9:35:96:23:bd:eb:09:7f:f3:f7:48:a5:07:17:c5:
         85:08:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 14:29:32 2024 by rpki-client on console-fra.rpki-client.org