Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136362e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136362e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          UOuNZvdKJ4Rrj6zg+4+VyLkHaXpZLXMEB3Ah1cP9TTQ=
Subject key identifier:   5C:21:72:31:77:7B:46:18:8E:28:45:A5:2D:89:89:D0:B8:0E:72:2C
Certificate issuer:       /CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
Certificate serial:       1A51325ED92D83159467165E865D71204908CEB5
Authority key identifier: F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136362e302f32342d3234203d3e20323636313936.roa
Signing time:             Wed 14 Aug 2024 11:54:09 +0000
ROA not before:           Wed 14 Aug 2024 11:49:09 +0000
ROA not after:            Wed 13 Aug 2025 11:54:09 +0000
asID:                     266196
IP address blocks:        191.6.166.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:51:32:5e:d9:2d:83:15:94:67:16:5e:86:5d:71:20:49:08:ce:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
        Validity
            Not Before: Aug 14 11:49:09 2024 GMT
            Not After : Aug 13 11:54:09 2025 GMT
        Subject: CN=5C217231777B46188E2845A52D8989D0B80E722C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:02:fc:6f:89:f1:51:f3:a2:cb:bd:4d:89:
                    95:39:c6:8f:18:24:34:54:32:ec:af:3d:4c:71:a2:
                    9b:cf:16:f2:05:f4:81:c9:77:72:09:6b:3b:bb:62:
                    d0:96:90:b2:5e:82:c8:b6:ab:b2:80:b3:6a:2a:9a:
                    75:88:88:25:fe:e9:0a:a1:35:02:f5:3a:a5:ea:81:
                    3a:4e:8f:70:49:ca:68:af:95:ed:4d:30:cb:4e:e9:
                    ff:e8:f9:9b:50:b5:07:4d:cf:e3:23:66:02:6c:b3:
                    48:8a:c7:6a:45:ee:41:d4:73:17:5c:9f:95:13:93:
                    be:65:f6:86:b1:15:73:56:26:39:e4:2a:8f:87:ec:
                    e3:dc:76:15:20:74:2d:e9:f0:7c:fe:16:71:0f:89:
                    7d:a6:a8:af:57:36:f1:f8:6e:89:57:36:75:b9:3e:
                    8d:ca:79:86:32:2a:d3:0c:f8:a1:1a:2a:88:1a:d5:
                    3e:b8:d5:52:f1:c9:9d:65:9e:38:ce:e7:ea:d3:7a:
                    84:b1:52:0d:72:f7:8f:da:da:61:f1:4d:94:23:90:
                    17:cf:f3:ad:75:70:eb:2f:46:24:cf:da:5a:50:7a:
                    18:f6:49:6c:37:76:6a:36:11:32:d3:03:40:6f:db:
                    86:fd:22:49:26:d7:a6:ef:a7:44:80:ee:26:a5:89:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:21:72:31:77:7B:46:18:8E:28:45:A5:2D:89:89:D0:B8:0E:72:2C
            X509v3 Authority Key Identifier:
                keyid:F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136362e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:74:2a:ae:c7:60:fb:77:80:d6:30:64:7c:d8:4f:61:e1:
         ba:91:71:c4:6a:7b:da:53:5c:35:e4:ab:51:39:fe:45:9b:f3:
         08:bf:36:d5:b6:9b:ee:79:7f:57:57:1f:5d:06:b3:b0:23:8c:
         e4:ac:3c:5f:c6:b5:36:d3:d6:9c:4e:c9:1b:5a:1a:4c:98:86:
         b5:63:da:35:f0:77:ef:91:24:e5:32:50:fa:19:09:e6:8f:24:
         fa:08:ca:cb:18:83:22:90:22:01:4a:d4:a7:18:70:26:5f:e3:
         66:86:25:68:44:01:d5:c4:1f:eb:fe:5d:fc:ed:4a:6d:b2:f3:
         55:2f:8e:36:a2:f9:34:c0:be:fa:f9:60:ba:ff:88:78:0c:cd:
         a5:3a:e1:d8:88:82:14:74:ad:19:e0:35:5d:94:20:29:23:92:
         db:77:dd:48:69:23:4d:99:29:5c:81:ec:c3:fb:14:48:a9:ff:
         f7:09:88:a8:00:a3:dc:80:70:19:4b:36:44:36:6e:d2:4d:c9:
         d1:e9:9b:43:14:09:6b:af:a8:80:89:c9:eb:59:f9:c6:e0:76:
         e6:ef:c3:c0:bb:d6:51:8a:4d:76:58:5a:c0:fe:46:14:c1:83:
         c0:58:3d:8e:ec:c7:8c:0e:d8:20:74:5b:08:25:d8:80:ed:e6:
         06:07:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:56:25 2024 by rpki-client on console-fra.rpki-client.org