Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32332d3233203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32332d3233203d3e20323633353138.roa (raw, json)
Hash identifier:          7S9DXOcu8LpUKwil1il9zb4k+knoN724srLeIhrHzR0=
Subject key identifier:   DC:91:7A:32:9C:87:9E:C3:0F:D3:70:B4:5A:2D:B7:82:03:C8:71:02
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       5415A5E0C973CB347ACB75A9B001646FC55EBCB8
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32332d3233203d3e20323633353138.roa
Signing time:             Mon 14 Oct 2024 15:21:16 +0000
ROA not before:           Mon 14 Oct 2024 15:16:16 +0000
ROA not after:            Mon 13 Oct 2025 15:21:16 +0000
asID:                     263518
IP address blocks:        191.243.212.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:15:a5:e0:c9:73:cb:34:7a:cb:75:a9:b0:01:64:6f:c5:5e:bc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Oct 14 15:16:16 2024 GMT
            Not After : Oct 13 15:21:16 2025 GMT
        Subject: CN=DC917A329C879EC30FD370B45A2DB78203C87102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:c5:99:1f:d7:40:c1:7d:65:99:06:eb:ee:
                    83:cb:2b:a4:89:b5:bc:2b:9a:8c:6d:5f:11:a4:01:
                    9d:0d:28:95:10:58:d7:c6:5d:3a:04:29:11:1b:83:
                    c5:92:30:7e:57:91:81:6a:5c:00:bb:04:72:00:8c:
                    15:1c:7f:a2:48:10:3b:b9:da:42:36:09:a5:18:87:
                    53:8a:61:e6:71:a2:f4:99:33:99:b6:d1:36:2b:6d:
                    84:13:ed:9b:21:88:13:0e:49:27:c4:a3:5c:d8:5a:
                    c7:1e:d0:72:b7:27:93:c7:0e:85:b0:dd:e7:66:7a:
                    1d:cd:95:b0:a2:be:16:9d:35:e3:89:cc:ff:c3:38:
                    6b:38:04:9b:9d:f9:74:b9:14:ba:90:90:62:b3:88:
                    ea:76:2d:17:e7:65:60:fa:e2:2b:a6:a9:4e:fc:08:
                    8f:89:45:c6:69:bc:a5:ca:e1:ce:ed:dd:72:e6:dc:
                    54:54:10:3a:25:f9:39:9f:8e:7c:dd:a4:55:96:84:
                    06:65:ff:76:a5:f6:6a:c4:65:2f:06:03:8e:d6:ee:
                    cd:21:78:f6:f9:71:b3:af:c4:b6:4d:13:49:03:85:
                    4b:6d:c1:34:75:29:af:81:0b:ba:46:ce:5c:42:46:
                    ed:72:6f:d8:08:9f:f3:1c:02:15:61:13:d0:7d:ba:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:7A:32:9C:87:9E:C3:0F:D3:70:B4:5A:2D:B7:82:03:C8:71:02
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32332d3233203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:e4:00:df:d9:ba:cd:0c:1d:9a:1a:4a:ed:4c:9c:f6:e6:63:
         ef:f0:6e:66:85:34:f3:38:d7:19:48:b9:a2:09:87:40:f1:46:
         a1:ea:dc:44:37:20:a3:0f:88:96:d3:5f:15:f1:a5:a1:ad:1c:
         a7:1a:80:80:ac:e2:de:16:2a:3b:05:c9:11:0c:65:cc:e6:8d:
         c4:1c:cf:2a:7f:14:d8:ad:f5:47:5a:e1:e3:69:11:f6:a4:7f:
         fd:4e:db:cd:e8:1a:56:f5:1a:ac:be:4d:64:e2:77:9d:c3:7e:
         c9:25:c2:0f:97:83:c0:e8:5e:dd:0b:16:81:42:f0:c6:09:15:
         3e:da:c8:40:10:c7:be:6a:ee:18:68:ab:06:34:f8:2b:35:70:
         78:94:a2:01:e3:d5:f5:56:7f:59:67:88:3f:d5:c6:8e:ec:8b:
         92:06:75:26:d4:8f:43:21:01:82:e0:33:84:62:dc:83:a5:54:
         a9:59:b9:5d:5f:a8:60:66:99:c7:71:0d:de:6d:dc:61:99:93:
         ef:2c:46:8c:d1:ff:2a:03:79:97:53:04:a4:26:8a:5a:2a:a9:
         89:e5:57:51:af:88:8c:f7:d5:4f:e3:3d:92:7d:7d:b0:8c:98:
         8a:45:b8:3a:55:cb:2f:97:c5:a7:97:8a:69:68:2c:d6:b9:ae:
         c1:eb:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 05:14:14 2024 by rpki-client on console-fra.rpki-client.org