Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa
File:                     3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa (raw, json)
Hash identifier:          fs/2w2jztOGIT+D3dpThpZsmccAvXqRjR1ZMbsB1n0w=
Subject key identifier:   7E:E9:00:01:E8:61:51:F0:ED:59:F1:1F:D5:47:90:C4:E3:21:6A:88
Certificate issuer:       /CN=A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705
Certificate serial:       73BBDD8E2ACAFB433B847FE3676C3B3162289B01
Authority key identifier: A6:BB:4B:54:E7:D9:FB:3B:44:3F:45:2E:AA:DE:7B:B2:B8:84:17:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa
Signing time:             Thu 11 Jul 2024 12:07:13 +0000
ROA not before:           Thu 11 Jul 2024 12:02:13 +0000
ROA not after:            Thu 10 Jul 2025 12:07:13 +0000
asID:                     266002
IP address blocks:        181.191.94.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bb:dd:8e:2a:ca:fb:43:3b:84:7f:e3:67:6c:3b:31:62:28:9b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705
        Validity
            Not Before: Jul 11 12:02:13 2024 GMT
            Not After : Jul 10 12:07:13 2025 GMT
        Subject: CN=7EE90001E86151F0ED59F11FD54790C4E3216A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:c2:94:a8:af:72:38:24:03:3f:44:0f:0c:
                    ed:9e:6b:4d:c7:35:c0:70:aa:55:f9:b1:51:e9:87:
                    ed:5c:b6:07:32:12:79:fd:f4:af:7b:89:7f:2c:f0:
                    84:7d:a8:1c:28:1d:06:00:38:dc:b7:f8:0b:47:25:
                    e8:c2:a3:2c:60:73:66:89:d2:d1:5b:f7:f8:69:4c:
                    72:3a:74:6b:41:67:97:86:93:05:4d:6f:80:0d:30:
                    6d:17:2a:21:cb:1b:a0:fc:06:c8:34:7d:e0:e6:f4:
                    09:8e:3f:92:2b:f7:97:38:18:ae:92:32:e8:5e:37:
                    06:ee:b2:b1:24:be:95:a8:26:cc:4e:1c:81:37:7c:
                    e7:a4:d1:4b:30:c8:9e:93:67:a2:b8:99:ea:cd:69:
                    c1:c5:5f:b4:84:47:63:a9:58:e3:a3:36:31:5d:3a:
                    b6:cb:1a:6a:7a:de:06:ce:31:f0:fc:aa:d2:fc:c4:
                    b0:e5:20:d5:bf:99:35:73:4f:2a:37:ce:3f:20:6a:
                    ba:18:9b:a8:51:8c:c1:50:01:08:93:3e:89:e7:9d:
                    ea:b3:47:51:d2:22:58:64:79:84:16:3b:df:76:72:
                    c3:c5:3b:52:7f:cf:d4:87:8c:a8:71:55:07:05:5e:
                    77:21:16:fe:22:ce:f7:66:ee:a4:ad:ca:88:e3:07:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E9:00:01:E8:61:51:F0:ED:59:F1:1F:D5:47:90:C4:E3:21:6A:88
            X509v3 Authority Key Identifier:
                keyid:A6:BB:4B:54:E7:D9:FB:3B:44:3F:45:2E:AA:DE:7B:B2:B8:84:17:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:02:46:11:9d:bf:1d:66:98:df:58:a8:b5:53:85:ea:50:
         e3:6b:fc:d6:43:4d:5c:84:14:8f:56:27:fa:9c:30:00:92:fc:
         d2:fe:d4:ae:f9:09:f2:b3:e1:3a:b8:41:f2:a8:95:15:ba:5a:
         52:96:57:56:e9:ad:49:1a:ad:27:64:38:33:7c:c9:ec:ac:f3:
         08:92:5a:aa:01:e8:7a:a7:97:01:a8:5d:64:20:40:b5:d4:18:
         1d:35:ad:0e:34:dd:47:c9:d7:33:74:cf:88:cc:56:37:9a:ab:
         12:82:0d:f3:46:f0:98:bd:66:1c:e0:0f:6f:29:ba:27:31:fa:
         54:c4:93:48:10:52:91:55:b3:27:d8:0d:21:b2:1f:bd:d0:50:
         70:c5:d0:39:c8:c0:b9:3c:be:48:61:df:f5:69:d6:cf:4b:a5:
         ed:63:bb:22:5f:6d:4c:29:fb:3c:14:79:1b:66:39:8e:94:89:
         60:b9:e3:bb:4e:14:0a:f1:58:a7:da:87:d1:af:30:b6:2a:e8:
         ab:6d:8c:38:17:7f:a3:02:6b:ff:ef:a8:7d:57:39:7e:94:47:
         6f:86:10:bb:af:f9:62:6f:71:d1:d0:95:ee:ce:d2:d8:12:b9:
         fb:4c:98:6f:f9:d4:a6:d1:44:e1:eb:8e:61:38:a9:11:89:13:
         d0:14:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 16:17:44 2024 by rpki-client on console-fra.rpki-client.org