Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3138392e3132372e36342e302f31382d3234203d3e20323632353839.roa
File:                     3138392e3132372e36342e302f31382d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          WhX//1IRFIcB3Ns+9nCzPzFkws8xmk2qlcyPWAM0zmI=
Subject key identifier:   FF:8C:47:CF:75:92:5F:8C:F7:A4:43:14:56:3B:3E:7B:5A:C1:E4:12
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       226553F1452D7496F841DA2888988FDAEAA007CC
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3138392e3132372e36342e302f31382d3234203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:32 +0000
ROA not before:           Fri 05 Apr 2024 03:27:32 +0000
ROA not after:            Fri 04 Apr 2025 03:32:32 +0000
asID:                     262589
IP address blocks:        189.127.64.0/18 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:65:53:f1:45:2d:74:96:f8:41:da:28:88:98:8f:da:ea:a0:07:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:32 2024 GMT
            Not After : Apr  4 03:32:32 2025 GMT
        Subject: CN=FF8C47CF75925F8CF7A44314563B3E7B5AC1E412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:17:79:17:35:79:2d:ba:c5:a3:b0:47:15:
                    de:c4:c2:29:0a:2e:be:25:28:7b:d3:e1:86:c6:72:
                    77:58:cb:bd:1d:e7:80:cb:0c:a1:c7:9b:1d:22:ff:
                    1c:93:19:82:9f:dd:80:db:bf:2d:52:e9:39:f9:3c:
                    d8:f8:b8:24:d1:ce:4d:d5:06:a1:01:28:ce:f2:84:
                    76:11:e2:d8:96:0d:96:17:14:8b:97:8a:08:c9:67:
                    1e:ed:76:43:a0:ea:7d:8a:2e:9b:79:31:50:bb:b7:
                    2f:6f:23:a4:eb:be:8b:bc:e5:06:38:c5:68:3e:84:
                    cc:3e:82:25:6e:82:de:14:e3:e5:83:b9:e8:0a:fe:
                    6e:c5:25:c6:ff:2d:33:51:43:b8:4e:b7:09:37:59:
                    a0:b2:dc:33:df:6e:60:7e:e3:fe:82:06:00:1a:b1:
                    30:25:68:9e:95:e8:ea:0e:5f:1e:bd:de:7f:b5:80:
                    5a:d4:6e:4e:fd:62:2f:83:8c:36:df:fd:ed:a7:87:
                    fc:6f:2d:c1:45:d7:72:4b:f6:4a:4f:cc:99:31:e7:
                    d6:8a:e1:d1:b8:ee:48:fd:1f:83:62:ea:4b:6a:72:
                    d0:0d:08:d6:6b:e8:25:2e:f3:09:e4:21:bd:05:62:
                    62:b1:08:be:c6:53:29:6c:60:7b:a3:97:0c:0c:42:
                    8b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8C:47:CF:75:92:5F:8C:F7:A4:43:14:56:3B:3E:7B:5A:C1:E4:12
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3138392e3132372e36342e302f31382d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:aa:c9:b7:79:af:53:8b:3a:22:8f:9b:ff:8d:59:06:46:
         5f:ad:f8:0a:cd:5d:6c:3c:68:88:8c:93:ce:7b:f9:5e:93:ed:
         47:48:1d:e4:1b:35:3d:6c:83:a0:c3:db:80:b0:9c:3a:a9:5a:
         eb:d0:2d:f7:b9:4b:c3:70:07:e8:e5:e6:05:c0:0a:9f:56:fe:
         65:58:b7:7b:72:ba:b3:f9:f3:af:a1:bf:5b:47:80:fd:19:57:
         aa:54:35:e2:f6:d7:24:a0:8d:31:16:b6:dc:4a:4f:0e:d6:55:
         4e:96:b9:e7:ab:5a:20:58:5f:fc:ca:49:be:a6:35:c2:bc:ee:
         57:39:b2:b7:b6:26:be:8e:37:24:c4:5e:01:a0:47:99:d2:1d:
         4f:43:3a:81:70:f6:d8:2c:d9:06:8c:ed:fd:43:95:b3:1a:31:
         c6:ca:47:e5:6e:60:77:54:e1:83:90:70:21:9e:f3:28:a9:e7:
         96:d0:55:fa:ee:da:51:52:95:e4:09:1f:33:e4:c0:3a:9a:cf:
         31:a7:55:96:32:9b:2c:f9:97:dd:b7:f9:81:08:61:34:36:5e:
         a4:2a:b6:d8:de:0a:9f:20:51:16:de:99:16:0e:3c:a4:64:a4:
         80:cb:44:d8:8c:e9:a7:7b:69:6f:f7:88:b1:fb:26:37:db:a6:
         56:9f:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 06:30:44 2024 by rpki-client on console-ams.rpki-client.org