Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          lwI9Irpo1jyx36hVBY7THujhIbpcbkSzk0GhFMKhqKM=
Subject key identifier:   42:9A:BD:8E:D7:A5:E9:CF:10:E0:F9:57:CC:66:43:AF:AB:75:F4:DD
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       4BC9E82096E6B912D197BDF0C6BBACA7852F4061
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:56 +0000
ROA not before:           Tue 24 Sep 2024 21:39:56 +0000
ROA not after:            Tue 23 Sep 2025 21:44:56 +0000
asID:                     270716
IP address blocks:        189.127.190.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c9:e8:20:96:e6:b9:12:d1:97:bd:f0:c6:bb:ac:a7:85:2f:40:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:56 2024 GMT
            Not After : Sep 23 21:44:56 2025 GMT
        Subject: CN=429ABD8ED7A5E9CF10E0F957CC6643AFAB75F4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:64:72:38:90:1e:21:70:16:f1:d9:4f:4a:
                    60:e0:1a:4e:dc:dc:ac:dc:c8:13:b7:97:85:b8:b9:
                    ec:4c:73:9b:ab:ab:99:f1:6a:6d:82:5d:aa:ce:81:
                    6f:16:50:c1:7c:50:6f:ad:39:f7:0b:7d:a4:8d:68:
                    38:cb:16:60:1a:86:a4:33:a0:02:db:8c:49:1a:72:
                    ad:f9:95:be:42:d2:e1:00:d3:b5:21:23:99:dd:0e:
                    de:b7:ba:b0:41:aa:0c:9f:b5:94:73:8c:e3:2f:98:
                    3f:b7:9f:bc:c6:6b:8f:1a:2f:5c:a6:e5:1b:46:8f:
                    b4:f8:e2:23:ba:e2:ff:f0:ec:8f:bf:2d:30:e3:81:
                    0d:5c:09:b4:5b:c2:ac:68:87:1d:30:ce:07:15:c8:
                    da:50:32:c0:6c:c3:13:19:e8:f5:61:c0:90:f2:9a:
                    22:ff:db:4e:f0:c2:32:c0:f2:d8:cf:5e:2a:5d:cc:
                    86:24:ef:46:5d:77:bd:78:a4:53:99:c4:08:62:05:
                    cd:50:b6:43:ac:35:fa:d7:ce:4b:0e:47:66:3b:d3:
                    7d:ba:b7:c8:b1:c4:58:f4:3e:fe:73:69:c0:ba:5e:
                    53:c7:ab:02:73:c6:5c:36:4d:3b:ec:fb:25:3d:20:
                    3d:b0:76:0a:7a:d5:82:34:32:6c:24:cd:c3:57:9e:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:BD:8E:D7:A5:E9:CF:10:E0:F9:57:CC:66:43:AF:AB:75:F4:DD
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:53:fd:74:55:a1:80:66:29:04:c5:43:2a:ed:0a:a9:19:
         9e:be:a7:24:aa:55:f6:13:b6:78:fa:85:8f:1c:65:bc:d4:af:
         72:c9:c7:47:67:31:94:05:d5:1e:42:67:27:9e:63:09:11:c3:
         fd:91:70:8e:99:74:8b:79:5b:72:17:3b:40:e5:4c:15:2c:cd:
         b6:a1:0f:9e:ff:86:c8:92:dc:3e:f7:58:a5:6d:5e:d7:6a:36:
         e6:f2:f1:59:27:70:86:71:93:8a:74:4f:f9:87:77:a8:69:ec:
         ab:97:5b:ca:d9:e0:65:d4:14:4f:61:05:5c:21:31:1c:a9:7a:
         ff:ca:1f:db:01:fa:b7:09:1c:db:8d:55:fb:c6:a3:19:58:38:
         91:a6:6d:ea:cf:c9:19:c1:ef:1e:b4:74:56:cb:24:94:ee:a4:
         c3:e6:46:6a:1f:06:e9:c9:4c:ed:82:dd:c5:7f:62:90:a3:06:
         38:26:29:71:b4:5f:66:14:cf:b1:e1:59:75:71:8a:23:2d:c6:
         fc:9c:ad:14:ea:80:af:ee:cb:fe:74:d0:99:64:73:07:5c:e8:
         4c:47:fb:8e:c8:a3:79:c7:22:91:cd:99:dd:5e:c7:d5:8c:ed:
         58:b8:46:ac:29:d5:08:15:8b:db:86:39:a1:75:90:54:0f:bc:
         83:06:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:27:45 2024 by rpki-client on console-fra.rpki-client.org