Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          qbUvKFHsiNZWI571Cd5/MEsaA7ocQlKcFRNvp8cwX20=
Subject key identifier:   FD:70:2E:00:25:F4:5C:7C:CB:75:6D:8A:02:60:29:2E:A6:BA:41:8B
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       3B0FE1CC468FA979EA0B72C2FB99D69E40E5996F
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa
Signing time:             Fri 11 Oct 2024 13:12:40 +0000
ROA not before:           Fri 11 Oct 2024 13:07:40 +0000
ROA not after:            Fri 10 Oct 2025 13:12:40 +0000
asID:                     263335
IP address blocks:        191.36.141.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:e1:cc:46:8f:a9:79:ea:0b:72:c2:fb:99:d6:9e:40:e5:99:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Oct 11 13:07:40 2024 GMT
            Not After : Oct 10 13:12:40 2025 GMT
        Subject: CN=FD702E0025F45C7CCB756D8A0260292EA6BA418B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:83:d7:e2:b5:45:61:f8:dd:71:75:31:38:
                    5e:f4:00:97:3c:12:ae:0d:d2:93:b0:a0:3b:b2:8e:
                    f8:4c:9e:17:8a:27:85:39:ca:6e:5c:1d:84:65:d8:
                    1c:bd:40:86:01:35:bd:9c:d4:80:1f:db:b7:40:e8:
                    ee:79:82:d3:7b:dc:75:5a:e4:ef:80:b5:67:32:54:
                    f1:d0:36:8f:c6:78:4e:18:b3:a0:10:f8:78:ef:ae:
                    b1:6d:f7:3c:d8:f1:50:d3:58:30:94:72:82:ee:cb:
                    ec:e3:17:19:fc:c2:23:6c:c4:8e:e8:e7:0a:2a:ef:
                    26:ae:6f:24:56:e0:67:87:0e:11:6b:33:be:85:66:
                    d6:73:95:62:b3:dc:a7:00:8e:b4:bf:ed:57:b1:57:
                    c1:7a:ec:9c:c8:f8:70:30:5d:0b:26:8d:e6:43:18:
                    c6:b6:30:54:32:6d:03:4b:b1:16:e9:ed:b8:8a:f8:
                    d7:20:d3:a0:12:74:88:60:63:60:c2:a3:f9:bb:89:
                    6d:c0:06:7b:37:d6:cb:5b:42:25:5e:11:6d:ce:29:
                    ea:99:a9:77:7b:2e:78:c3:5f:05:eb:5d:06:28:5e:
                    31:e3:8a:77:e4:60:38:bf:ef:4b:aa:49:2b:27:13:
                    53:55:5b:4b:ea:12:5d:25:1e:b7:cc:d2:03:46:88:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:70:2E:00:25:F4:5C:7C:CB:75:6D:8A:02:60:29:2E:A6:BA:41:8B
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:98:b6:d6:54:61:45:91:84:9b:7f:52:c2:21:fd:47:d1:c1:
         98:52:96:a5:c4:74:a5:b8:f0:37:6d:2a:45:f8:9b:75:f7:77:
         56:82:25:c9:8a:84:a3:b0:56:47:fe:f4:de:90:1d:80:8d:15:
         13:bc:5d:54:f3:f2:6e:7b:46:4f:0d:6b:8e:2e:c5:3c:e0:90:
         28:86:36:2e:46:9f:1d:a8:41:77:3c:d9:01:cb:fe:c7:3c:c7:
         e0:55:c6:4a:97:62:85:70:92:9b:df:5e:3a:f0:42:11:bc:98:
         02:62:b9:62:59:b0:6b:f2:fc:15:13:ea:14:b5:06:e0:95:2b:
         4d:66:fd:e4:24:e4:cf:08:49:90:60:29:f2:3f:78:86:c6:fe:
         2a:42:f6:44:55:31:66:e4:7b:73:3f:29:03:97:d0:eb:97:e3:
         f8:fd:73:ab:8d:de:90:a3:56:10:1c:6a:2a:6f:6a:62:2c:31:
         86:b0:af:d7:82:db:be:00:c0:01:f3:41:13:3a:30:bc:25:60:
         8e:70:b1:bb:4a:07:75:b9:65:00:9c:79:68:11:08:7c:37:ff:
         dc:23:b7:77:1d:59:90:72:d9:98:f8:b0:fc:7d:f9:6b:3c:e8:
         36:8b:8a:5a:07:05:3a:92:7f:be:b8:68:11:79:2c:10:24:d0:
         f5:cd:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 10:21:30 2024 by rpki-client on console-fra.rpki-client.org