Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa
File:                     3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa (raw, json)
Hash identifier:          ueC+cOP6TsfO8u6shbWnyH669PV7hvDOf1pEWMxhYj4=
Subject key identifier:   D3:78:EF:C2:70:14:D3:5B:1E:51:60:A1:B6:26:9B:DF:7B:E0:62:99
Certificate issuer:       /CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
Certificate serial:       72FF6B7ABD90D5554E097FF03EC88E7BA073305F
Authority key identifier: E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa
Signing time:             Thu 10 Oct 2024 16:14:15 +0000
ROA not before:           Thu 10 Oct 2024 16:09:15 +0000
ROA not after:            Thu 09 Oct 2025 16:14:15 +0000
asID:                     266009
IP address blocks:        181.191.106.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ff:6b:7a:bd:90:d5:55:4e:09:7f:f0:3e:c8:8e:7b:a0:73:30:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E33158FC471B5D009E830B8F6FF0E98385BA5815
        Validity
            Not Before: Oct 10 16:09:15 2024 GMT
            Not After : Oct  9 16:14:15 2025 GMT
        Subject: CN=D378EFC27014D35B1E5160A1B6269BDF7BE06299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:86:3a:0e:a2:29:ed:71:14:bf:9b:38:d2:
                    0a:7e:09:9e:f7:ca:19:39:19:95:95:7b:c9:c1:ca:
                    29:d3:ea:f2:1d:2e:d1:5a:7d:c5:40:fc:01:ca:f9:
                    ed:02:5b:ec:69:80:b9:d7:60:3b:58:5c:1d:63:4d:
                    26:b0:e5:1c:0d:73:af:1d:67:fb:a1:db:72:3d:bc:
                    4b:a2:f6:f7:82:73:68:a5:4f:35:c6:c0:c6:17:db:
                    44:23:e8:87:7a:90:24:9f:5c:37:0a:3b:f5:02:1c:
                    d1:ab:8e:70:50:7e:84:3a:6d:9a:ff:0f:2f:ca:f3:
                    ef:b4:1c:01:43:84:5b:31:44:f0:7b:d4:aa:01:8f:
                    25:f3:96:e6:bc:c1:74:96:b2:4d:56:f2:c6:22:aa:
                    d2:fe:69:de:c5:f3:57:41:08:78:b6:15:c8:dd:e1:
                    12:71:2b:5f:97:28:6a:86:d2:80:28:21:8f:5b:a3:
                    38:c6:a4:23:5f:a0:e1:24:3d:c5:f2:f6:96:c8:88:
                    a6:fe:59:5f:f8:75:1e:02:83:72:77:d5:6f:f4:38:
                    56:94:52:80:9e:8a:14:cc:da:10:9f:ea:72:d8:73:
                    e9:e0:bd:c0:d0:8d:e1:71:ba:c4:f8:12:0f:9f:0e:
                    1f:e6:03:95:8b:42:40:a9:89:72:3e:84:19:50:e6:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:78:EF:C2:70:14:D3:5B:1E:51:60:A1:B6:26:9B:DF:7B:E0:62:99
            X509v3 Authority Key Identifier:
                keyid:E3:31:58:FC:47:1B:5D:00:9E:83:0B:8F:6F:F0:E9:83:85:BA:58:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E33158FC471B5D009E830B8F6FF0E98385BA5815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/1/3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:59:b1:0b:0a:0d:37:b4:e6:54:8a:e9:81:34:a9:56:f4:c8:
         9b:e2:86:80:7c:cd:26:e3:07:ef:e9:27:a2:ee:11:cb:50:6f:
         68:31:d9:dd:09:8e:44:07:3c:55:44:18:21:5b:1d:d0:28:dc:
         04:83:3f:df:9f:b9:dd:1b:f4:96:46:cd:e7:dc:4b:77:0d:4c:
         06:5b:46:97:02:3b:79:b7:f0:58:53:a4:57:cb:70:b3:d7:0d:
         f4:10:ce:bd:ba:94:9d:df:03:3e:da:5c:42:6b:ee:39:53:48:
         bf:eb:fd:ff:8e:8c:7d:22:51:9c:ae:19:53:90:17:e2:2d:29:
         4a:0c:f5:5a:08:a9:d2:40:3b:9e:74:d8:11:3d:20:57:8d:24:
         72:b5:67:31:11:b6:8d:5e:b2:0f:4d:f7:03:f2:52:db:3e:94:
         60:6c:70:8b:ba:ec:dc:08:28:a9:f0:6c:31:78:1d:7f:d0:0f:
         be:9c:9f:0c:b7:c1:d6:d2:98:f5:f4:78:d6:a1:be:13:6b:4e:
         e4:6d:71:32:96:5b:5e:ba:cb:46:91:0c:f9:0c:f5:8a:35:7d:
         1c:77:71:dd:8f:8d:be:56:a5:8b:4e:fc:81:df:0e:be:75:8e:
         3d:ae:02:07:2b:d0:5e:c2:2b:b0:80:51:3f:d1:62:6b:f3:62:
         1c:86:72:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 10:21:31 2024 by rpki-client on console-fra.rpki-client.org