Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa
File:                     3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa (raw, json)
Hash identifier:          dSxBxi6hDlPK6X5WMXknFDUU61LZSxMY0dm7jnKei/g=
Subject key identifier:   FF:33:1B:B6:86:32:AA:C9:03:C4:BE:9D:D2:AE:03:97:B7:DA:8F:11
Certificate issuer:       /CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
Certificate serial:       01F6445C57C2BCE2A4D173246DA2BFF4E1D0DD5C
Authority key identifier: E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa
Signing time:             Thu 10 Oct 2024 16:00:40 +0000
ROA not before:           Thu 10 Oct 2024 15:55:40 +0000
ROA not after:            Thu 09 Oct 2025 16:00:40 +0000
asID:                     266009
IP address blocks:        181.191.104.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f6:44:5c:57:c2:bc:e2:a4:d1:73:24:6d:a2:bf:f4:e1:d0:dd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
        Validity
            Not Before: Oct 10 15:55:40 2024 GMT
            Not After : Oct  9 16:00:40 2025 GMT
        Subject: CN=FF331BB68632AAC903C4BE9DD2AE0397B7DA8F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:d3:17:a5:e7:95:40:31:f9:8b:5f:d9:9e:
                    ef:40:96:ca:78:db:42:0e:c5:19:20:61:42:d9:8c:
                    15:da:8c:13:31:70:72:6d:da:58:cc:49:b2:b6:35:
                    1d:94:df:7a:f3:9c:84:3e:fa:ab:a2:7c:92:a8:e0:
                    32:2d:9f:60:8d:1e:2a:d1:26:b9:52:c5:78:53:20:
                    3d:30:d5:2e:38:bd:d1:56:c8:7c:61:a2:02:2f:e1:
                    fc:1c:8b:d9:5d:06:ad:ea:57:d4:f5:a9:77:3c:40:
                    d2:4f:10:09:ef:dd:af:1e:d5:4d:36:76:56:a7:35:
                    2a:0b:22:93:a8:31:28:a4:3e:9f:f4:bc:38:5c:cf:
                    6d:f5:78:d4:92:cb:8a:ce:3b:52:6f:73:04:84:57:
                    3b:6e:0f:0a:ff:c8:17:c1:8f:95:dc:43:8f:28:cf:
                    41:39:34:49:60:e6:87:6d:9b:6a:60:a4:2c:55:20:
                    2b:60:03:4e:48:17:34:41:dd:e0:30:d7:c5:76:9c:
                    63:64:d1:cd:74:e1:cf:31:2e:7b:d5:30:ba:a3:05:
                    da:80:ff:3e:31:ea:da:47:78:f0:2b:8c:a7:5c:94:
                    b3:23:7a:be:dd:85:7c:30:2c:6c:65:07:20:84:d5:
                    d5:50:cc:02:c3:96:d0:28:5a:40:4e:78:5c:d5:f9:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:1B:B6:86:32:AA:C9:03:C4:BE:9D:D2:AE:03:97:B7:DA:8F:11
            X509v3 Authority Key Identifier:
                keyid:E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:7e:64:fb:f6:a5:ca:e1:81:3f:20:be:9f:78:b6:a5:5e:
         c2:f9:b3:d7:7e:40:c4:da:08:dc:67:df:18:97:fa:fd:e3:d3:
         e5:7a:50:6d:18:89:50:8e:c1:f3:2a:1a:3b:47:72:1f:b6:25:
         ff:81:34:56:ee:df:90:09:93:c9:e4:74:91:67:74:be:e6:ba:
         49:6b:2d:5d:61:89:48:3d:92:9d:91:60:99:ce:59:0f:91:2f:
         54:4c:16:d8:e3:80:27:38:78:2a:4d:29:df:d1:54:45:f1:30:
         d2:e6:27:b6:d5:85:16:f7:5d:76:90:20:6e:d3:8d:e4:24:95:
         3d:4e:1e:31:a0:e0:74:f9:ef:c9:65:7c:b2:b2:b0:3f:92:71:
         26:c4:47:ab:d0:ed:30:54:89:ab:a8:79:de:34:bf:cc:b2:29:
         52:2a:db:be:ca:e5:63:00:08:ca:ca:32:71:10:01:39:e8:9f:
         3d:40:47:2e:6a:a4:1d:36:d3:89:6a:a6:a7:db:5d:74:65:c1:
         38:8e:da:d6:86:9d:ef:67:27:80:fb:72:28:80:44:58:55:36:
         21:05:51:d7:e2:00:a1:64:96:3b:e8:6c:d3:88:5b:f7:0d:a6:
         b0:52:53:5b:7a:57:b0:18:c6:27:6a:73:52:fe:c6:63:85:a8:
         47:02:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 09:40:59 2024 by rpki-client on console-ams.rpki-client.org