Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33302e302f32342d3234203d3e20323730333438.roa
File:                     3139302e38332e33302e302f32342d3234203d3e20323730333438.roa (raw, json)
Hash identifier:          I4dhV63XqSEaMGe6DF2Eq9zVITSI62PaIvOyzIwR2Mc=
Subject key identifier:   FF:08:82:A8:2F:43:4D:1F:9A:BE:0C:B2:0A:34:EB:BF:72:DF:01:A4
Certificate issuer:       /CN=F56EFCA70F4D47C16E985AD896951551D366CD18
Certificate serial:       60D519E3FB6E4245B8C365615D06CB8946BECDF1
Authority key identifier: F5:6E:FC:A7:0F:4D:47:C1:6E:98:5A:D8:96:95:15:51:D3:66:CD:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F56EFCA70F4D47C16E985AD896951551D366CD18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33302e302f32342d3234203d3e20323730333438.roa
Signing time:             Thu 17 Oct 2024 20:16:14 +0000
ROA not before:           Thu 17 Oct 2024 20:11:14 +0000
ROA not after:            Thu 16 Oct 2025 20:16:14 +0000
asID:                     270348
IP address blocks:        190.83.30.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d5:19:e3:fb:6e:42:45:b8:c3:65:61:5d:06:cb:89:46:be:cd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F56EFCA70F4D47C16E985AD896951551D366CD18
        Validity
            Not Before: Oct 17 20:11:14 2024 GMT
            Not After : Oct 16 20:16:14 2025 GMT
        Subject: CN=FF0882A82F434D1F9ABE0CB20A34EBBF72DF01A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:51:f1:87:b3:11:6e:af:bc:9c:8a:5d:9f:
                    12:e1:14:c3:60:7e:d8:68:be:00:27:4e:14:8f:fc:
                    19:35:2b:8a:7c:97:bf:5c:60:28:1f:b0:ec:44:d7:
                    c5:fa:6f:21:87:b8:d8:66:e1:04:03:d9:d9:83:69:
                    60:cf:2b:c1:8f:7d:a0:eb:71:1a:63:d4:cb:19:22:
                    21:c6:1a:66:7a:38:59:6f:f6:0b:29:48:27:89:5f:
                    d9:98:50:a9:56:01:45:9d:3a:df:53:eb:e2:94:93:
                    39:fa:91:79:73:d4:86:7f:e8:16:1f:d0:98:04:c3:
                    62:ff:df:12:43:b7:b8:04:fd:9e:85:15:e6:bb:6b:
                    09:f2:b1:fb:b4:13:01:53:b3:00:65:70:6a:32:d5:
                    53:5f:a9:7c:35:3a:4f:8b:41:f8:74:23:18:96:3f:
                    71:0f:d6:02:8f:50:54:33:f6:09:01:41:1b:27:92:
                    05:1f:9e:b1:99:0d:b5:d3:00:1c:05:cd:4f:d2:cd:
                    69:ea:97:cf:55:93:de:18:de:28:5c:94:6c:c3:51:
                    42:5a:11:a8:3c:b1:8d:28:8e:09:a4:61:21:36:18:
                    7c:17:b7:7c:18:e9:db:72:3b:79:cb:35:12:fb:dc:
                    3d:77:98:e7:64:ed:98:5e:65:1f:55:d3:af:09:f4:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:08:82:A8:2F:43:4D:1F:9A:BE:0C:B2:0A:34:EB:BF:72:DF:01:A4
            X509v3 Authority Key Identifier:
                keyid:F5:6E:FC:A7:0F:4D:47:C1:6E:98:5A:D8:96:95:15:51:D3:66:CD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/F56EFCA70F4D47C16E985AD896951551D366CD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F56EFCA70F4D47C16E985AD896951551D366CD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33302e302f32342d3234203d3e20323730333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:16:33:b3:47:56:54:9c:f0:41:98:37:bf:8f:61:e7:8d:ce:
         3b:40:80:c4:de:0c:6d:a2:ee:37:0b:a9:c7:69:7a:24:e6:9f:
         db:b6:d2:b1:44:ca:28:03:0d:15:09:4d:91:a4:d3:82:18:77:
         9b:1b:41:17:f1:31:70:b9:75:b9:93:50:dd:67:30:22:2e:a9:
         a4:37:33:b0:72:c3:38:3a:e8:7b:ff:3d:b6:5b:8c:99:01:cb:
         90:51:46:f2:be:36:26:34:f7:8d:0e:d4:21:c9:49:f9:f6:58:
         e2:54:8b:aa:c5:f4:5f:3e:d8:df:ae:b4:57:fd:38:b3:a6:63:
         b7:d1:3a:d5:7b:2c:a1:c7:b5:27:64:4f:3d:a8:3d:3c:39:b6:
         1e:c4:98:0f:3a:39:99:5f:e4:78:1e:8c:06:a8:1d:c5:0b:5c:
         69:0f:e0:f9:f6:7a:a9:f6:1f:6e:f5:aa:35:e0:6f:ed:67:bc:
         db:93:6f:a5:10:e4:ca:7b:f1:8d:71:fe:67:fb:fa:2f:c3:e7:
         9e:41:de:dd:94:32:8f:cd:fe:ef:6b:69:33:16:84:78:36:18:
         b7:ed:8a:4f:91:5f:16:df:50:5c:38:3e:09:1d:d1:3f:ca:53:
         d2:c7:27:98:67:91:37:73:9a:86:d7:31:58:32:51:ce:8d:2a:
         9c:f3:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 01:52:16 2024 by rpki-client on console-ams.rpki-client.org