Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa
File:                     3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          KAyLizVFmzpHE3iahPd4OzL6eRtFSy7ugczteiUeVTI=
Subject key identifier:   EC:FD:79:4A:F8:77:A9:31:B8:B5:D0:86:DE:63:93:8A:43:AF:33:F4
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       0C10E69E306B98ACF7C568C5B54905A54031A719
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa
Signing time:             Tue 27 Aug 2024 15:02:34 +0000
ROA not before:           Tue 27 Aug 2024 14:57:34 +0000
ROA not after:            Tue 26 Aug 2025 15:02:34 +0000
asID:                     269359
IP address blocks:        168.194.249.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:10:e6:9e:30:6b:98:ac:f7:c5:68:c5:b5:49:05:a5:40:31:a7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 27 14:57:34 2024 GMT
            Not After : Aug 26 15:02:34 2025 GMT
        Subject: CN=ECFD794AF877A931B8B5D086DE63938A43AF33F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:3d:53:03:cc:dc:12:5f:77:28:73:70:08:
                    35:10:be:d7:dd:b5:2b:33:e4:ab:7a:05:50:87:2a:
                    c8:a9:67:d2:33:6d:e6:30:b6:25:6b:ae:e3:ff:b0:
                    40:46:2b:6e:e4:68:a8:04:69:f3:32:9b:ab:e2:d8:
                    6d:5f:d8:40:a0:fe:38:d2:6b:72:80:84:3d:48:8b:
                    bb:d9:9d:8b:d7:21:bd:0c:93:0a:e5:4b:c2:44:b7:
                    bd:83:82:5d:5b:34:5f:b2:31:7e:82:36:f8:64:6d:
                    49:fb:12:d9:f7:40:c4:88:05:5b:5a:83:43:df:2d:
                    70:56:8e:db:69:b2:db:0f:fd:bd:f1:96:22:3f:e7:
                    94:b4:00:90:60:99:ab:88:cf:3d:28:31:84:09:11:
                    04:e0:58:66:24:93:3e:ed:32:23:74:33:84:17:c6:
                    95:9d:cd:95:20:9b:27:48:24:80:4d:eb:05:81:43:
                    50:4c:03:9c:c0:18:de:ac:0d:a2:2a:6d:95:c7:53:
                    7a:e7:2c:8a:92:29:ab:b6:d9:52:f8:1b:b1:41:ca:
                    98:2e:3f:04:3e:5e:04:42:66:54:bd:ba:d7:20:54:
                    88:eb:3b:2a:c9:de:58:be:25:9a:74:89:3c:ad:d5:
                    61:72:36:2c:44:70:11:43:11:da:8f:08:26:0c:c7:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:79:4A:F8:77:A9:31:B8:B5:D0:86:DE:63:93:8A:43:AF:33:F4
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:1b:f9:dd:14:b9:52:20:4a:63:25:2d:a8:9f:e0:80:01:
         d4:72:e2:67:eb:93:11:75:49:6c:87:88:f2:5a:58:68:b5:b4:
         0e:f2:46:d3:b0:e9:62:57:eb:e4:33:59:b6:77:a0:f5:e7:04:
         7f:50:a2:54:31:7a:1b:4a:4e:c3:08:0e:f3:ee:55:fa:77:d6:
         ec:4c:48:8b:3f:d3:fe:1b:e0:7c:10:8c:e3:d1:c3:d6:f3:14:
         55:e5:90:6a:3f:e2:36:3a:f2:c2:f5:3b:45:e3:e4:48:07:88:
         77:87:19:50:7a:49:de:4d:77:92:82:ee:d5:2a:1e:b3:af:5a:
         3f:75:34:cf:23:3d:da:48:fe:d4:33:d3:7d:91:2e:58:1c:cb:
         de:76:f2:e7:34:43:04:49:21:32:2d:ed:07:19:fb:2d:50:06:
         7a:d2:68:29:7b:2f:fb:e8:03:01:16:07:46:0a:65:e9:97:e0:
         9c:79:ad:e5:96:9b:08:74:df:86:62:00:9d:a3:a5:9a:dc:9d:
         be:aa:db:d8:cb:8b:99:2b:50:dc:d7:11:cd:a3:fe:77:4c:44:
         11:a2:81:d2:57:c2:97:63:0c:60:e5:1f:a3:50:c6:97:ba:a6:
         21:1d:58:d1:76:d7:2b:2e:b8:5e:78:40:b1:29:80:3f:04:83:
         55:23:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:58 2024 by rpki-client on console-ams.rpki-client.org