Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e34382e302f32322d3234203d3e20323731343936.roa
File:                     3138312e3232342e34382e302f32322d3234203d3e20323731343936.roa (raw, json)
Hash identifier:          LtyQY2Ocy/+M874E6JRiT8Z7waDywld2O46YHTGTc8U=
Subject key identifier:   9D:23:2A:34:85:47:D3:6C:C3:2D:D3:6B:12:45:57:9E:B2:AF:B3:F5
Certificate issuer:       /CN=4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8
Certificate serial:       6DD12AD86BDF49CC965090DC273A0085FFC9AA67
Authority key identifier: 42:88:B4:C9:2C:50:CB:FA:D8:4B:9A:EE:EA:D7:A4:A4:BB:B3:BF:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e34382e302f32322d3234203d3e20323731343936.roa
Signing time:             Thu 05 Sep 2024 15:55:10 +0000
ROA not before:           Thu 05 Sep 2024 15:50:10 +0000
ROA not after:            Thu 04 Sep 2025 15:55:10 +0000
asID:                     271496
IP address blocks:        181.224.48.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d1:2a:d8:6b:df:49:cc:96:50:90:dc:27:3a:00:85:ff:c9:aa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8
        Validity
            Not Before: Sep  5 15:50:10 2024 GMT
            Not After : Sep  4 15:55:10 2025 GMT
        Subject: CN=9D232A348547D36CC32DD36B1245579EB2AFB3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:a2:2f:cf:c7:af:65:26:23:b9:31:dc:57:
                    62:fc:0d:bb:48:df:f0:6d:b1:e9:cc:53:08:70:f6:
                    6f:2e:7a:66:1f:c0:2c:73:1b:2e:1a:20:74:53:ca:
                    d0:1d:40:b7:2a:eb:5f:eb:85:b0:d1:d7:2a:9d:e8:
                    0b:32:86:36:0e:2d:f3:00:5c:0e:29:a9:0f:7f:d0:
                    34:18:07:ac:4d:71:76:dc:67:27:c5:79:a3:e7:a9:
                    7a:6c:1f:bc:74:4f:ac:21:c0:da:6d:b0:eb:71:58:
                    bd:82:ef:3e:fb:c7:b7:6d:be:39:5e:02:26:d2:8a:
                    5a:7f:6b:70:d5:f6:a0:4c:58:08:7a:c7:f0:89:02:
                    a7:51:3a:ae:e9:22:38:b8:40:a7:fb:05:82:35:65:
                    be:36:7a:5f:a9:f3:89:c1:65:c8:2d:43:5b:8a:e2:
                    db:4e:a9:4a:ed:87:14:b4:55:56:f4:d6:45:ba:88:
                    90:de:d6:83:ec:86:ad:6f:80:91:4b:d4:13:56:44:
                    54:0c:2d:3b:b2:6c:27:db:95:98:f8:10:0e:ce:7a:
                    61:82:22:a4:b2:47:24:ee:00:24:b3:58:c5:28:e7:
                    bd:e3:33:05:27:1f:b5:ee:7c:88:61:c9:0c:6c:85:
                    94:9a:85:20:28:f8:79:3a:0e:67:e2:3e:cd:24:42:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:23:2A:34:85:47:D3:6C:C3:2D:D3:6B:12:45:57:9E:B2:AF:B3:F5
            X509v3 Authority Key Identifier:
                keyid:42:88:B4:C9:2C:50:CB:FA:D8:4B:9A:EE:EA:D7:A4:A4:BB:B3:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e34382e302f32322d3234203d3e20323731343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:46:b0:84:34:db:c8:19:f9:ee:f7:fa:1b:b0:a2:11:f3:
         ba:27:b4:70:8a:5e:08:8d:af:c8:af:bc:89:69:78:80:2f:78:
         00:14:47:98:23:f0:c4:d0:91:f3:63:58:db:6a:f8:75:04:e0:
         34:17:42:11:85:75:5b:95:cb:47:51:2e:88:95:a3:2a:8b:e2:
         18:d2:a3:c5:25:3c:a2:92:1c:e4:09:a5:61:67:2c:91:d5:d1:
         d2:3e:1a:5d:7d:1a:f3:64:6c:fc:8c:84:78:59:ee:28:80:a0:
         97:31:c0:48:40:95:88:12:eb:1a:a7:8e:e1:c6:e1:20:48:e0:
         a7:3a:5c:59:23:5d:5a:ab:b6:e0:60:03:96:1d:da:bb:55:b8:
         f3:6d:73:d1:c7:90:0e:da:db:c9:60:4c:b0:6d:5b:de:76:8d:
         5c:9b:18:02:9f:3b:eb:2b:1e:8a:03:e3:1b:64:8c:f8:3b:74:
         e2:2f:fb:8c:9e:0d:96:a6:8c:b7:52:d9:f6:84:e2:93:46:20:
         b1:8d:e2:fe:75:f4:fa:d4:88:3e:6d:37:b6:da:83:69:65:6e:
         a4:19:fe:55:44:3e:fe:ce:0e:f9:dd:74:c2:8f:7d:ee:9e:53:
         8d:29:ca:dc:1c:7f:6c:54:3e:76:d2:ee:4d:b3:13:89:27:67:
         0d:88:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 12:04:27 2024 by rpki-client on console-fra.rpki-client.org