Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32342d3234203d3e20323639333539.roa
File:                     3136382e3139342e3234382e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          +oh2KzE6PvoqpXVLl63K5e40brZYNxEAu7uLwFCmqrs=
Subject key identifier:   8D:95:F9:8B:AD:53:38:1B:8B:35:F4:6C:79:FC:03:C9:2C:74:69:8F
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       2E5725452976A17AEEEC4A5D418F4AB089ABF9CA
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32342d3234203d3e20323639333539.roa
Signing time:             Tue 27 Aug 2024 15:02:23 +0000
ROA not before:           Tue 27 Aug 2024 14:57:23 +0000
ROA not after:            Tue 26 Aug 2025 15:02:23 +0000
asID:                     269359
IP address blocks:        168.194.248.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:57:25:45:29:76:a1:7a:ee:ec:4a:5d:41:8f:4a:b0:89:ab:f9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 27 14:57:23 2024 GMT
            Not After : Aug 26 15:02:23 2025 GMT
        Subject: CN=8D95F98BAD53381B8B35F46C79FC03C92C74698F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:f1:d4:43:4a:87:e2:77:c7:4b:05:8a:a4:
                    9a:5e:23:51:15:26:8c:28:79:77:00:1a:9f:c9:c0:
                    5a:96:ee:34:f2:eb:12:76:dc:dc:5d:b1:e2:0f:32:
                    e6:8d:56:31:79:4e:ed:a1:2e:fe:45:14:91:e4:87:
                    ec:41:19:6a:b3:a3:89:f1:f3:4f:11:95:e8:95:ea:
                    f3:ab:f2:24:de:44:0c:ca:9d:e1:27:2f:8a:67:2c:
                    f8:8e:6d:96:a9:20:25:aa:ad:f5:b1:e7:a3:1b:8f:
                    2f:6d:ab:71:ea:b4:a9:ad:80:db:3a:21:94:02:42:
                    f9:e6:41:f9:1d:b7:73:0b:0b:24:84:95:cc:43:9d:
                    bf:11:47:e2:5a:3c:ca:59:b9:e9:f7:79:67:c7:68:
                    17:e8:41:56:be:2c:08:90:27:67:5e:00:35:34:c9:
                    1f:ed:e6:66:56:5a:d6:c2:72:91:e0:0e:6b:cc:b5:
                    40:60:29:8e:22:47:56:e5:ee:8a:6c:da:5b:f2:68:
                    d6:b8:22:e2:d4:9f:d6:35:86:7f:5e:6c:24:ea:49:
                    bb:6f:ae:3b:9a:fe:a5:8e:6b:d0:e6:f2:ae:2d:aa:
                    d2:9c:0e:16:58:19:66:ad:d5:1e:39:a0:3b:77:df:
                    82:97:7e:17:07:83:db:cc:31:2a:cd:4b:11:73:d5:
                    00:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:F9:8B:AD:53:38:1B:8B:35:F4:6C:79:FC:03:C9:2C:74:69:8F
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:a9:f6:97:e7:a6:aa:cd:ee:d6:13:10:eb:9c:f7:3f:3d:b1:
         1d:cf:42:11:c9:a4:67:6e:cf:4d:19:84:0c:6a:4f:de:d9:4e:
         c1:43:4c:4c:7e:62:71:9a:c1:a1:b8:e1:15:15:64:9d:d4:a1:
         e5:ce:70:54:88:cd:cd:51:2d:d3:88:8d:69:5d:ca:d3:76:ed:
         c8:ea:32:6b:c0:31:bd:63:4c:a6:13:85:5b:b0:09:ef:8f:f1:
         77:cd:3d:3b:7c:1c:2a:b8:f6:d9:9a:98:d7:9c:b3:8f:e0:e2:
         32:c0:4d:73:1f:d3:15:2d:79:b8:f4:27:8d:41:41:c7:b9:0a:
         31:4e:31:42:90:a4:7e:32:d8:52:aa:1d:3a:d7:9b:c7:2f:71:
         99:56:f1:6d:bc:7a:f5:ff:dc:3a:52:3f:27:ad:53:e6:cb:fe:
         02:ae:6f:50:51:85:54:79:93:21:6c:58:94:42:81:8f:5f:3b:
         c7:44:ac:29:e2:41:71:66:c9:9b:48:93:35:3c:19:c1:ce:88:
         73:11:34:2d:7f:ad:a1:55:3e:76:b5:03:ef:8a:58:38:a9:f9:
         52:f3:e6:38:45:38:c7:a8:a7:95:69:6d:2e:63:88:10:1d:a3:
         89:20:34:ed:b2:7e:79:b4:10:f9:a0:3c:e3:e9:0f:d6:5f:9b:
         8a:e0:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:58 2024 by rpki-client on console-ams.rpki-client.org