Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa
File:                     3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa (raw, json)
Hash identifier:          fCGm3fLsNjBmD4QjmcxZKhnoi6qoQl7amL9nQJmEOss=
Subject key identifier:   14:BB:92:CE:A5:D2:30:1F:D1:A6:00:9F:21:14:E5:C1:EF:31:D0:D2
Certificate issuer:       /CN=A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705
Certificate serial:       163CC0B785CB86BF421D86CF8AC2CA2B14A5D864
Authority key identifier: A6:BB:4B:54:E7:D9:FB:3B:44:3F:45:2E:AA:DE:7B:B2:B8:84:17:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa
Signing time:             Thu 11 Jul 2024 12:07:15 +0000
ROA not before:           Thu 11 Jul 2024 12:02:15 +0000
ROA not after:            Thu 10 Jul 2025 12:07:15 +0000
asID:                     266002
IP address blocks:        181.191.95.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3c:c0:b7:85:cb:86:bf:42:1d:86:cf:8a:c2:ca:2b:14:a5:d8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705
        Validity
            Not Before: Jul 11 12:02:15 2024 GMT
            Not After : Jul 10 12:07:15 2025 GMT
        Subject: CN=14BB92CEA5D2301FD1A6009F2114E5C1EF31D0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:ce:aa:93:1a:a9:9d:ab:e7:40:7e:06:1b:
                    ac:0f:c9:2f:89:2b:18:98:a3:5f:42:8b:0b:06:34:
                    a1:ed:9c:ae:75:cf:28:aa:f4:da:b9:88:95:32:e2:
                    6f:49:e6:2f:e8:87:c1:a2:df:40:93:93:96:22:c9:
                    e8:c0:5a:6c:02:e0:30:b4:97:e3:42:b1:9f:12:5c:
                    ae:0c:e5:60:77:f1:ee:33:a3:f9:bf:f9:cf:e3:e2:
                    8d:44:8c:0b:3f:6c:5f:96:58:52:4e:8c:9c:b2:b7:
                    17:22:dd:7c:12:8d:a9:98:08:69:e2:a1:6f:32:47:
                    ea:10:02:86:4f:c4:10:94:2c:7a:38:32:72:59:5e:
                    0d:a1:58:7e:af:51:a2:2a:8a:81:4c:fd:0f:22:e6:
                    81:d2:74:0b:95:1f:b4:1d:30:71:33:5f:df:37:f2:
                    b8:79:36:c2:58:ab:6e:3b:2d:cc:6d:b9:18:4d:b6:
                    31:a6:cd:64:de:c3:09:2e:f5:04:9d:85:37:03:c4:
                    bd:8c:ac:a6:36:13:2c:23:ec:76:18:ca:95:4e:1e:
                    51:95:40:eb:0b:f9:f7:36:95:2e:37:33:ed:e0:f5:
                    9b:73:6e:96:68:66:87:cc:70:95:c5:9a:76:95:86:
                    02:0e:6a:8b:bc:6f:23:aa:72:14:ba:b4:89:55:f7:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:92:CE:A5:D2:30:1F:D1:A6:00:9F:21:14:E5:C1:EF:31:D0:D2
            X509v3 Authority Key Identifier:
                keyid:A6:BB:4B:54:E7:D9:FB:3B:44:3F:45:2E:AA:DE:7B:B2:B8:84:17:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6BB4B54E7D9FB3B443F452EAADE7BB2B8841705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:75:10:bc:f0:e2:b3:59:5a:f7:5c:c4:fe:47:0c:b9:e6:66:
         07:db:c9:7d:01:23:19:18:08:74:1b:90:e6:92:17:69:80:c8:
         ec:63:20:85:2c:b8:0f:b0:69:2f:19:f5:08:2f:a6:4a:60:35:
         44:5e:97:ba:64:49:8a:bb:09:25:78:b8:3b:78:f6:04:01:4f:
         6a:d6:49:52:84:f5:cb:99:d4:d5:6c:69:58:08:c7:82:63:aa:
         fb:b4:3a:58:e3:83:c5:a6:80:1e:3b:0b:03:db:80:d4:f7:fe:
         60:3c:f1:e8:5d:a0:1b:3f:bf:3e:3d:71:aa:21:31:24:6f:7b:
         ba:a2:32:34:51:4f:8d:ee:37:7e:44:56:42:8b:cb:c8:6d:65:
         02:fc:b1:a4:ec:77:e5:ba:b8:35:25:2e:45:ff:dd:2d:1a:0f:
         58:5c:7f:eb:7e:b6:7a:4e:97:36:74:dd:49:98:d0:c7:5e:db:
         2f:59:a9:b7:4b:6b:34:b5:bc:58:ca:e0:2b:ff:a2:4c:58:ab:
         74:d1:71:89:c9:07:14:fc:97:b3:08:fb:bd:2f:3e:b3:eb:ba:
         b4:3b:b0:45:aa:7b:a8:8c:22:4a:4f:3f:28:94:4e:bf:fe:f6:
         b7:47:26:18:c5:75:fc:7b:b5:f5:27:1d:a4:9e:76:b8:84:b1:
         23:01:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 16:17:44 2024 by rpki-client on console-fra.rpki-client.org