Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/3138312e3139312e342e302f32322d3332203d3e20323635393834.roa
File:                     3138312e3139312e342e302f32322d3332203d3e20323635393834.roa (raw, json)
Hash identifier:          /NRqneHtskJTTkNtBhgs7sOJUl/ed7LJrbfzmKihfug=
Subject key identifier:   5D:84:2F:FC:93:37:0A:B9:20:DF:63:DA:5A:C3:E7:AA:46:1B:E4:EA
Certificate issuer:       /CN=A5154B54CA09B3DAAC46C9181F69254C40E7F2F7
Certificate serial:       12583D058D77C7917C24023C5E4906DD030810BE
Authority key identifier: A5:15:4B:54:CA:09:B3:DA:AC:46:C9:18:1F:69:25:4C:40:E7:F2:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5154B54CA09B3DAAC46C9181F69254C40E7F2F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/3138312e3139312e342e302f32322d3332203d3e20323635393834.roa
Signing time:             Mon 21 Oct 2024 19:24:19 +0000
ROA not before:           Mon 21 Oct 2024 19:19:19 +0000
ROA not after:            Mon 20 Oct 2025 19:24:19 +0000
asID:                     265984
IP address blocks:        181.191.4.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:58:3d:05:8d:77:c7:91:7c:24:02:3c:5e:49:06:dd:03:08:10:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5154B54CA09B3DAAC46C9181F69254C40E7F2F7
        Validity
            Not Before: Oct 21 19:19:19 2024 GMT
            Not After : Oct 20 19:24:19 2025 GMT
        Subject: CN=5D842FFC93370AB920DF63DA5AC3E7AA461BE4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:76:b9:41:92:93:ba:c8:ac:8a:94:27:83:
                    ec:bc:07:d0:dc:f8:b9:66:bf:62:6d:15:53:4b:da:
                    f2:67:a7:a7:00:81:6b:9b:16:2e:bd:bc:e6:08:56:
                    13:49:f1:06:c6:5f:6f:4a:51:00:46:0e:f1:8c:5e:
                    fc:cc:c0:ed:9d:48:a5:68:01:3f:d1:58:72:5d:18:
                    40:82:d5:31:44:42:b4:c3:33:18:d7:d0:ae:bb:6f:
                    85:b9:2d:52:3e:9e:df:57:99:9b:35:80:dd:88:2c:
                    7d:bb:53:d5:88:a0:47:04:6d:c9:5e:82:76:2b:16:
                    e1:c1:c9:03:67:39:72:a6:b7:99:1a:10:18:4f:59:
                    e2:c4:22:9e:f1:fc:46:39:6f:92:5a:61:f5:ea:b9:
                    de:70:59:b2:31:d8:52:73:d8:0b:d5:91:d2:f7:4c:
                    8f:cd:db:18:1e:e7:5e:23:da:bc:6b:32:6e:b1:66:
                    1e:84:f1:68:76:fa:59:d1:f3:09:e3:61:a0:a2:b0:
                    3b:9a:a1:60:4c:c2:54:00:c4:7d:2f:2c:04:85:a9:
                    01:2f:40:f5:f4:a2:e9:9f:f2:e5:0d:0b:a4:7b:84:
                    10:9b:30:09:26:13:e3:33:6c:b6:56:5a:a7:4d:b1:
                    18:ae:e5:e7:af:19:c0:37:38:7d:7f:e1:83:76:36:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:84:2F:FC:93:37:0A:B9:20:DF:63:DA:5A:C3:E7:AA:46:1B:E4:EA
            X509v3 Authority Key Identifier:
                keyid:A5:15:4B:54:CA:09:B3:DA:AC:46:C9:18:1F:69:25:4C:40:E7:F2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/A5154B54CA09B3DAAC46C9181F69254C40E7F2F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5154B54CA09B3DAAC46C9181F69254C40E7F2F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/3138312e3139312e342e302f32322d3332203d3e20323635393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:67:4e:1b:f9:98:3d:65:e6:b0:6f:ea:7f:db:04:6b:9d:43:
         43:f7:ae:f6:24:8f:be:dd:dd:2e:ab:82:39:6c:2b:74:a2:00:
         14:a9:ea:a8:e3:98:df:76:f8:35:c4:bb:1e:8e:ba:c0:b5:a3:
         08:de:56:a2:de:78:11:b2:39:79:f2:ce:d6:0d:e2:a6:b8:80:
         6f:00:87:f0:cc:72:c1:a6:d7:10:8f:2e:47:89:7f:dc:af:3a:
         b2:1e:25:71:8b:d6:17:c8:b2:bf:ad:f5:e9:a2:99:3a:67:78:
         10:80:df:ab:dc:91:fd:2c:1d:a7:5d:3a:10:52:b8:49:e3:94:
         81:34:fc:b3:8f:8f:0a:79:29:91:96:f6:88:8d:2c:fb:7f:66:
         ef:00:69:90:a1:f2:d0:84:21:e7:89:ab:b4:a6:1f:7a:a1:dd:
         92:35:ff:79:67:08:f8:55:f5:3b:74:e9:ea:99:e5:7c:f5:94:
         5e:40:1c:34:e3:27:ed:48:c7:ab:74:16:92:70:be:1e:31:e3:
         85:e2:5a:ce:60:5c:d9:8c:db:b0:a4:f5:d7:43:cb:1c:81:eb:
         a4:2a:64:cb:ad:06:bf:5c:ad:ec:45:5c:b3:e8:ef:13:ed:28:
         4e:62:d7:67:9e:3b:88:10:4b:07:9d:14:c7:41:19:0e:df:97:
         da:c5:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 21:48:53 2024 by rpki-client on console-fra.rpki-client.org