Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa
File:                     3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (raw, json)
Hash identifier:          aJxjxw+5XR+s+APqctiw4klFDtI2951rG+5lhuPUnoY=
Subject key identifier:   8E:60:C7:06:10:A6:CC:DB:7A:95:8B:28:04:A4:9A:3F:6C:EA:DF:67
Certificate issuer:       /CN=168B11ECD2ABB221671D884FD24056BAADEE2EA3
Certificate serial:       1CDC4324676AA6052A26D9F0F2A63F91382E514F
Authority key identifier: 16:8B:11:EC:D2:AB:B2:21:67:1D:88:4F:D2:40:56:BA:AD:EE:2E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa
Signing time:             Thu 04 Apr 2024 18:23:59 +0000
ROA not before:           Thu 04 Apr 2024 18:18:59 +0000
ROA not after:            Thu 03 Apr 2025 18:23:59 +0000
asID:                     263486
IP address blocks:        191.242.248.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:dc:43:24:67:6a:a6:05:2a:26:d9:f0:f2:a6:3f:91:38:2e:51:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168B11ECD2ABB221671D884FD24056BAADEE2EA3
        Validity
            Not Before: Apr  4 18:18:59 2024 GMT
            Not After : Apr  3 18:23:59 2025 GMT
        Subject: CN=8E60C70610A6CCDB7A958B2804A49A3F6CEADF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:dc:17:b5:55:01:02:91:4b:36:e1:e2:a6:
                    f3:76:05:e3:fd:11:88:a0:a2:01:e5:ca:e2:41:85:
                    14:97:fc:9e:82:1d:1b:c2:5d:6c:d5:32:fd:82:6d:
                    50:72:06:17:5b:58:2d:ba:ec:ac:48:17:74:90:a8:
                    2e:a9:34:af:40:68:9d:bc:42:da:26:84:d6:5f:34:
                    a8:7f:85:b4:e8:3b:01:12:4f:2a:e9:eb:54:dc:e7:
                    3d:a5:41:48:5f:7b:b0:cb:5d:17:f0:1a:2c:07:0e:
                    7b:76:f7:96:15:c4:62:1b:64:4e:8b:25:9b:ec:d3:
                    46:dc:91:4f:3c:bc:fb:00:2c:d5:d0:af:8c:9d:fc:
                    4c:69:b7:55:c8:83:c3:d2:1b:44:4d:98:e2:4d:7a:
                    e8:4c:90:5c:1b:16:48:7a:c0:1a:93:f9:39:fe:ea:
                    b3:7e:13:51:fa:8d:55:5d:60:f7:f7:3e:0d:19:4e:
                    b9:a3:dd:b8:0a:84:db:98:fe:30:0a:0d:1b:2a:f7:
                    5e:50:2b:17:e2:1a:3b:c3:86:e7:4f:c6:31:4c:e2:
                    f2:4e:62:ed:21:d1:a0:61:b3:ac:8c:79:d6:b2:92:
                    6e:64:01:74:f0:53:f3:00:f7:8d:85:61:50:78:58:
                    0d:1a:31:50:a0:19:7e:7f:c6:f3:21:30:cd:39:7b:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:60:C7:06:10:A6:CC:DB:7A:95:8B:28:04:A4:9A:3F:6C:EA:DF:67
            X509v3 Authority Key Identifier:
                keyid:16:8B:11:EC:D2:AB:B2:21:67:1D:88:4F:D2:40:56:BA:AD:EE:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168B11ECD2ABB221671D884FD24056BAADEE2EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/1/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:b7:bc:9b:51:6a:6b:b7:2c:4b:01:90:85:e4:12:9f:1f:
         37:2a:31:68:96:a5:18:5c:a9:48:50:c9:be:a6:b8:b1:28:ef:
         d2:34:67:a5:bd:46:b6:de:cc:5c:b1:89:21:39:9e:fe:5f:8f:
         e4:f8:0c:6f:02:98:8b:73:8c:64:fb:ee:63:d8:61:d5:87:8e:
         47:c4:a9:f8:dc:4f:50:2b:f0:04:93:fa:81:38:15:6e:26:ec:
         ff:b2:ac:26:6d:1e:fb:d2:64:a0:95:99:37:6f:4f:e5:ab:82:
         04:5a:ff:a9:75:3f:82:4e:7c:fb:b5:0f:63:84:17:bf:e7:41:
         62:6f:09:09:7a:31:65:b1:7e:fd:71:c9:32:ac:03:dc:10:50:
         72:3e:dd:a5:47:8f:b9:e6:4b:c7:84:d7:67:7b:e8:2d:c8:26:
         ed:71:14:55:62:40:e1:24:8c:9f:02:95:d5:34:ce:6e:37:03:
         76:79:53:5c:c1:a8:c0:b4:89:a2:7e:db:4f:39:41:60:9c:4c:
         3d:ea:d9:e7:46:98:fe:5e:f9:a0:a9:14:a4:e1:a5:a3:e3:07:
         b3:23:9e:bc:86:1d:91:a6:1d:32:cb:33:88:1e:c3:1b:18:bd:
         d0:ce:94:90:8e:09:fd:4a:e6:75:e5:c4:8b:bd:9f:af:53:5f:
         f1:08:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 09:58:20 2024 by rpki-client on console-fra.rpki-client.org