Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/3136382e3132312e32392e302f32342d3234203d3e20323635333036.roa
File:                     3136382e3132312e32392e302f32342d3234203d3e20323635333036.roa (raw, json)
Hash identifier:          kq3I5qpCgNsMf2sQK80/bBaSgIX8ziE8Idp+A4IxHLM=
Subject key identifier:   BC:9F:F1:8A:21:18:DB:E0:70:C1:E9:74:54:1D:B1:71:42:23:A5:27
Certificate issuer:       /CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
Certificate serial:       0D33050047F0454AAD89A722C01459973931DB39
Authority key identifier: 19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/3136382e3132312e32392e302f32342d3234203d3e20323635333036.roa
Signing time:             Mon 07 Oct 2024 17:02:51 +0000
ROA not before:           Mon 07 Oct 2024 16:57:51 +0000
ROA not after:            Mon 06 Oct 2025 17:02:51 +0000
asID:                     265306
IP address blocks:        168.121.29.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:33:05:00:47:f0:45:4a:ad:89:a7:22:c0:14:59:97:39:31:db:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
        Validity
            Not Before: Oct  7 16:57:51 2024 GMT
            Not After : Oct  6 17:02:51 2025 GMT
        Subject: CN=BC9FF18A2118DBE070C1E974541DB1714223A527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:ae:bc:2d:f2:c5:5b:7d:10:bc:c8:57:da:
                    36:b6:00:16:14:fb:89:47:95:da:1d:a1:92:bf:fe:
                    f0:c3:72:3a:c9:15:24:14:bd:42:39:eb:e7:d9:8a:
                    30:94:43:e5:f1:ab:b2:ae:d5:4f:72:6a:7b:ba:75:
                    6f:f4:c7:cd:7e:7a:4a:7f:70:e9:d4:0d:a7:5f:f9:
                    e7:2f:ab:c6:8f:1b:f3:16:2c:18:b2:6f:0e:63:79:
                    50:de:ef:6c:05:03:25:34:df:4b:1b:0e:4e:39:1c:
                    26:89:61:5e:7f:97:82:04:7c:f7:f5:03:39:dd:e5:
                    49:0a:8a:64:db:4e:c8:38:45:67:c9:94:8b:1e:c0:
                    a6:21:91:c9:b7:db:ad:17:4f:bb:6d:af:8b:2b:aa:
                    98:37:f9:03:bc:e9:89:e1:a8:5f:19:27:5f:d0:54:
                    b1:68:13:6b:07:e2:55:43:37:cd:0a:76:28:cf:35:
                    a1:32:d4:bf:7f:7f:5a:fe:1e:b8:a3:ab:1b:42:e7:
                    ee:8a:81:e2:c3:cb:e8:60:e7:db:f7:ea:b0:6b:8c:
                    45:f2:37:97:ce:34:76:ae:9a:74:2d:ce:03:08:6b:
                    82:71:19:28:03:54:1f:29:e7:16:51:38:02:8d:3f:
                    cf:28:88:27:8e:fa:76:2c:2e:d0:7a:c1:6b:74:d8:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:F1:8A:21:18:DB:E0:70:C1:E9:74:54:1D:B1:71:42:23:A5:27
            X509v3 Authority Key Identifier:
                keyid:19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/3136382e3132312e32392e302f32342d3234203d3e20323635333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:14:ad:4d:8e:e0:3f:84:f4:c8:3f:84:66:7f:27:61:f8:c4:
         2f:96:7e:62:81:6d:67:3e:9e:f2:f1:4c:b0:cb:43:22:4e:e6:
         3f:70:28:b0:2d:d1:e8:22:53:62:f9:6d:0a:2d:59:a4:27:0f:
         f4:44:ec:36:94:01:36:13:c9:4d:60:d2:ee:82:6f:73:6a:08:
         cf:e8:08:8b:b3:1a:78:c6:3f:46:af:9e:57:c3:07:98:2d:80:
         fe:05:96:6a:f4:d5:74:a3:59:a8:a2:0d:7e:12:f5:aa:9c:53:
         fe:4b:83:0e:31:35:bb:92:26:66:64:b1:0c:bb:0b:31:a8:d2:
         74:ec:40:50:ff:53:56:82:20:7e:2f:e2:06:62:0d:a5:9d:ae:
         ee:8d:d1:82:80:a1:65:33:90:6a:d2:a4:35:78:42:26:25:5d:
         a9:78:33:4c:99:6a:00:4c:7c:33:79:cc:ad:d8:84:c5:23:25:
         7d:c8:78:98:a6:3c:f4:45:5e:77:c9:58:6e:26:e8:ff:ef:8b:
         8f:1b:d4:02:c9:4d:3f:14:18:c8:6d:ee:8f:6a:9b:c0:d0:6d:
         9a:dd:db:ba:5b:f1:2d:f7:7f:94:48:1d:01:bb:89:34:0e:69:
         a8:dd:ac:16:c7:64:41:2d:f8:3d:70:98:88:98:c0:56:e1:c3:
         47:20:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:23:24 2024 by rpki-client on console-ams.rpki-client.org