Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3332203d3e20323633343836.roa
File:                     3139312e3234322e3234382e302f32312d3332203d3e20323633343836.roa (raw, json)
Hash identifier:          iJqvtBuEF66KZUr/QNvUiFWx3wLFnKGNrAmFa8HoFiY=
Subject key identifier:   C1:67:3F:AF:64:11:0D:3D:63:1E:7D:5E:06:0E:97:DF:0B:38:5E:57
Certificate issuer:       /CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51
Certificate serial:       53800BFEBBD0AF4EF90063E14397AA12B28F4874
Authority key identifier: 3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3332203d3e20323633343836.roa
Signing time:             Mon 26 Aug 2024 18:33:24 +0000
ROA not before:           Mon 26 Aug 2024 18:28:24 +0000
ROA not after:            Mon 25 Aug 2025 18:33:24 +0000
asID:                     263486
IP address blocks:        191.242.248.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:80:0b:fe:bb:d0:af:4e:f9:00:63:e1:43:97:aa:12:b2:8f:48:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51
        Validity
            Not Before: Aug 26 18:28:24 2024 GMT
            Not After : Aug 25 18:33:24 2025 GMT
        Subject: CN=C1673FAF64110D3D631E7D5E060E97DF0B385E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:f6:d2:19:58:1c:76:2b:07:05:de:6c:d0:
                    2b:82:36:82:1b:24:bf:49:78:08:eb:99:7d:93:a9:
                    60:a1:27:0b:7f:2c:f4:f2:29:d2:a7:23:42:5b:63:
                    49:a4:7f:df:62:62:1e:da:ec:f2:78:6c:0a:c7:45:
                    d2:89:eb:70:6f:82:bc:19:e2:19:d8:bc:73:3e:8c:
                    58:14:25:67:63:d5:de:fd:e4:b4:f8:4a:47:31:f4:
                    5b:e6:13:d1:8c:56:ef:18:a7:af:b3:62:5f:b4:93:
                    62:45:7c:53:86:72:76:d3:62:72:e3:05:f3:33:21:
                    6b:9a:c4:5f:5f:b1:3f:75:51:ea:2a:e5:44:ee:27:
                    0b:12:93:61:85:de:33:d9:6e:c3:25:e7:a1:69:c8:
                    81:be:37:64:29:f2:e6:0c:5e:e2:28:57:4b:ab:0e:
                    1c:8c:69:21:c4:18:31:6a:73:6b:71:08:63:dd:cd:
                    53:92:f7:45:d8:c5:0a:79:b5:a4:26:0a:af:25:d2:
                    da:a3:5b:fd:45:5f:a8:0b:d6:98:cf:39:1b:1f:cb:
                    88:11:39:a9:29:7a:a3:b8:83:f6:68:64:e0:2c:a5:
                    61:bf:8e:08:3a:31:d5:2b:57:70:5d:91:46:3b:11:
                    4c:06:51:31:d3:7b:6e:ef:99:4f:17:47:7d:40:06:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:3F:AF:64:11:0D:3D:63:1E:7D:5E:06:0E:97:DF:0B:38:5E:57
            X509v3 Authority Key Identifier:
                keyid:3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3332203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:98:42:08:1d:f8:25:ad:27:15:4c:13:42:ed:5b:30:6c:92:
         d9:d7:8e:a0:02:bc:aa:c2:18:66:20:f7:5c:96:5a:c1:7b:11:
         fd:d9:e8:f9:b9:71:89:f5:0d:91:c9:63:11:49:46:c8:d1:67:
         11:cf:f2:10:f8:87:c8:0c:a9:d1:fd:c5:ea:c2:63:72:07:a3:
         3b:f9:27:11:60:9a:30:e1:10:d6:09:39:6e:fa:f3:07:84:fc:
         ca:4f:91:f8:7a:6e:60:58:95:44:a3:73:15:23:11:1e:10:f2:
         9b:f2:d9:60:44:35:84:85:8d:d2:88:81:12:0f:0f:b6:99:f7:
         18:14:c6:b4:2a:a7:ea:a8:fe:16:e3:0d:84:c7:8b:74:20:11:
         f8:af:fc:fd:a6:07:2f:80:32:78:94:48:81:e6:2b:6e:46:e0:
         93:d5:e7:85:9d:b2:a6:ec:53:61:74:48:b8:44:aa:32:c1:1c:
         1b:45:bc:2b:66:23:83:dd:fc:ce:45:7f:09:5d:30:a5:f0:2f:
         58:ac:7b:20:e5:0b:2c:a2:39:57:8a:36:2c:c2:f3:58:0b:9b:
         8e:00:e0:41:54:b4:de:ab:1c:17:f1:01:e7:b6:54:57:10:c8:
         29:c4:b6:be:6d:d2:34:ae:cb:d9:e0:01:d0:87:3c:73:2c:b2:
         40:8a:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 07:36:16 2024 by rpki-client on console-ams.rpki-client.org