Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/3136382e3132312e33302e302f32342d3234203d3e20323635333036.roa
File:                     3136382e3132312e33302e302f32342d3234203d3e20323635333036.roa (raw, json)
Hash identifier:          xGgZf0IxcRr2spnPpo5+o6QVhzLVdwYMDKL1Os38lBk=
Subject key identifier:   7C:65:8D:93:75:76:B1:C7:8A:E5:35:A7:AC:49:9D:A1:38:51:0A:F6
Certificate issuer:       /CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
Certificate serial:       4D6A2533ABBADFC18C9A519A911B4B9F73220315
Authority key identifier: 19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/3136382e3132312e33302e302f32342d3234203d3e20323635333036.roa
Signing time:             Mon 07 Oct 2024 17:02:51 +0000
ROA not before:           Mon 07 Oct 2024 16:57:51 +0000
ROA not after:            Mon 06 Oct 2025 17:02:51 +0000
asID:                     265306
IP address blocks:        168.121.30.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6a:25:33:ab:ba:df:c1:8c:9a:51:9a:91:1b:4b:9f:73:22:03:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
        Validity
            Not Before: Oct  7 16:57:51 2024 GMT
            Not After : Oct  6 17:02:51 2025 GMT
        Subject: CN=7C658D937576B1C78AE535A7AC499DA138510AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:54:6b:03:b0:c4:c2:ea:98:22:6b:39:52:
                    c6:7b:d5:4c:9b:24:97:77:c6:d1:c4:d3:61:64:25:
                    cd:55:35:82:87:ba:7f:8c:26:2b:24:9a:11:e0:b1:
                    6e:19:9f:39:fe:67:99:06:3a:92:e1:da:86:fb:e5:
                    8d:dd:36:3b:08:d5:67:01:07:45:06:68:a1:ba:89:
                    4b:93:00:e2:e0:eb:c1:5a:22:d7:a2:54:ce:0c:b1:
                    bd:7a:aa:4b:fa:a6:50:4b:c6:e9:c9:b3:75:3f:e9:
                    45:60:1d:cf:d7:24:4f:c3:14:c7:7c:c5:45:b6:ae:
                    7e:cd:87:61:64:95:ac:f0:9a:69:90:b6:88:27:c4:
                    78:61:7e:33:9d:c2:76:48:93:c4:b4:a7:e6:3f:00:
                    58:f6:62:46:76:f6:c8:42:14:f8:fa:b7:c0:fb:33:
                    3e:6c:74:e4:62:44:8b:41:07:8c:84:c5:51:cb:35:
                    2f:45:43:db:66:6e:c8:93:28:c8:80:ea:69:67:85:
                    80:a3:ce:73:f6:0f:62:7c:b5:38:ce:95:01:18:8c:
                    b0:06:97:c0:30:c8:6b:4b:e4:c4:4a:7e:ae:28:52:
                    22:1a:2b:6b:e2:91:9a:67:1c:5b:4d:29:a6:71:4d:
                    61:ce:b0:f5:e0:ff:d9:c4:7b:ad:45:e0:ae:9a:db:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:8D:93:75:76:B1:C7:8A:E5:35:A7:AC:49:9D:A1:38:51:0A:F6
            X509v3 Authority Key Identifier:
                keyid:19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/3136382e3132312e33302e302f32342d3234203d3e20323635333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:c9:a8:a8:ed:53:41:83:bd:87:14:f8:b8:b0:25:00:4c:
         21:4b:03:cd:d6:0e:0d:e4:78:e2:5f:1f:21:5c:b3:fa:a0:09:
         d9:c8:0f:b9:ff:89:8e:fa:a7:5a:23:89:d5:37:85:1b:67:68:
         e8:c9:61:fb:04:d7:c7:ca:1f:9f:34:fd:01:a3:60:4d:06:9b:
         e2:39:29:69:90:2a:d5:96:d5:65:4f:b6:07:05:28:29:80:0d:
         82:ef:6a:35:83:d8:9e:46:46:04:00:a0:e5:c8:cb:f6:1c:59:
         7e:73:62:a6:8c:48:77:fa:66:ff:6d:06:d0:fa:1e:da:ce:71:
         ee:eb:fe:9b:44:16:87:a7:9a:5c:3c:1c:4e:c8:1f:64:d4:78:
         73:53:44:9b:80:9d:74:90:5a:3c:4c:0a:32:29:03:33:d3:98:
         11:0d:de:03:3e:d1:9d:c7:28:d6:8f:26:5f:4e:7f:bb:71:31:
         f9:83:a5:5e:56:b0:82:67:eb:68:4a:48:a1:86:6e:79:5e:c5:
         8f:de:c3:3e:97:e3:40:b8:43:8d:cb:1e:b8:8b:b1:48:88:d3:
         d4:f9:36:9d:1c:11:ac:63:7f:8c:25:87:77:21:dd:5f:1a:ea:
         ad:e3:59:da:75:f1:18:36:09:ff:ea:db:51:81:d8:60:13:f6:
         82:2d:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:23:24 2024 by rpki-client on console-ams.rpki-client.org