Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234302e302f32322d3234203d3e20323637353432.roa
File:                     3139322e3134312e3234302e302f32322d3234203d3e20323637353432.roa (raw, json)
Hash identifier:          2FTCQxbFA5iKH8z+7DnvIQamLwX09pHjWr2By7Xfe1Y=
Subject key identifier:   FE:FB:41:60:5C:CA:BF:30:F4:65:A8:39:62:88:24:09:71:58:AE:5B
Certificate issuer:       /CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
Certificate serial:       1443A4DF5A61870DB4719175C9888147F8703589
Authority key identifier: D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234302e302f32322d3234203d3e20323637353432.roa
Signing time:             Wed 22 May 2024 11:26:18 +0000
ROA not before:           Wed 22 May 2024 11:21:18 +0000
ROA not after:            Wed 21 May 2025 11:26:18 +0000
asID:                     267542
IP address blocks:        192.141.240.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:43:a4:df:5a:61:87:0d:b4:71:91:75:c9:88:81:47:f8:70:35:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
        Validity
            Not Before: May 22 11:21:18 2024 GMT
            Not After : May 21 11:26:18 2025 GMT
        Subject: CN=FEFB41605CCABF30F465A839628824097158AE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:b8:c7:86:4b:1f:63:e8:d6:42:02:6c:c6:
                    2f:ef:9d:a0:ca:11:91:f5:84:29:3b:2d:bc:c7:d7:
                    8a:16:09:68:8b:ba:0a:f7:fd:fc:74:51:89:d5:f1:
                    be:89:eb:42:2e:a4:f9:6a:57:13:69:76:22:59:48:
                    14:ae:79:3a:45:f5:e0:9c:d8:fb:f1:35:e7:60:5b:
                    8e:cc:29:8f:01:76:81:62:32:45:84:e6:15:c7:22:
                    7b:a4:1f:01:7b:7b:4b:a8:34:e7:0e:7e:a4:ef:1b:
                    b8:09:c8:f4:35:c6:10:30:d2:73:79:a1:57:45:90:
                    ed:d3:2f:b9:dd:09:2d:ff:0e:cd:47:51:20:b6:38:
                    3e:b2:fb:f0:dd:50:f3:a8:ad:9f:7d:2d:1b:87:e9:
                    5d:9d:6e:78:4b:04:dd:37:ca:7e:90:db:29:40:4d:
                    a8:2b:21:a6:7f:ba:a5:e5:71:a7:7f:a0:51:c9:d8:
                    92:28:79:3d:67:c3:1a:a4:10:1d:2b:62:b3:85:e4:
                    99:c7:16:f7:6f:f1:21:9b:bc:cc:e3:1b:88:79:89:
                    5b:9a:9f:81:34:1b:05:f1:6f:90:8e:f0:69:36:04:
                    82:61:ad:66:bd:72:64:01:49:5e:42:62:98:e2:48:
                    93:d3:de:f4:f6:2f:4d:f2:f2:17:4d:6d:91:35:46:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:41:60:5C:CA:BF:30:F4:65:A8:39:62:88:24:09:71:58:AE:5B
            X509v3 Authority Key Identifier:
                keyid:D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234302e302f32322d3234203d3e20323637353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:f7:9a:10:e3:b4:60:45:21:5d:ee:3d:5a:37:fa:78:85:
         ee:c6:70:89:ed:2d:b9:63:3f:26:ee:7d:77:31:ba:c2:38:33:
         fc:5d:e1:d1:0c:83:60:2d:57:65:2c:30:a6:e4:11:eb:68:e0:
         d0:d6:1c:3d:8f:64:06:a8:8e:26:f1:12:f4:a0:72:a3:1a:50:
         ec:9d:99:2f:6f:07:d6:1b:58:9e:e2:37:7b:1c:12:68:44:ae:
         d6:01:ff:b3:f2:aa:c3:2b:4d:a7:4f:4c:82:28:a4:4c:7f:f3:
         5a:6e:39:54:6d:d5:ba:bf:7e:38:3a:5c:3c:fc:83:d5:60:9d:
         aa:75:ec:7a:f2:b2:15:b4:fe:6d:66:ce:af:2e:e7:0a:50:ae:
         8d:68:21:30:86:bf:4f:db:80:1f:d1:4e:0c:3e:ea:cc:6f:cc:
         ce:2d:4d:c3:4e:ba:87:b7:4c:39:3e:bf:17:75:3f:1f:d1:a3:
         41:e1:ef:83:51:61:af:25:56:fa:f9:4d:18:f6:cc:06:28:4b:
         4d:de:4b:dc:44:bb:52:90:1d:c7:cf:06:0d:c1:e1:c1:5c:8b:
         79:b3:37:00:a9:27:54:c9:7a:7b:85:04:b7:e7:a6:a7:67:9b:
         46:05:9b:a4:47:d5:bf:74:ec:dd:f8:ae:85:8f:b5:5a:80:ce:
         d1:9e:f0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 04:19:39 2024 by rpki-client on console-ams.rpki-client.org