Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          M0njXqGDaPN3sIGhhLHCdDYl/Zk5sx8vb0g1YEjFUSA=
Subject key identifier:   BE:2A:A6:72:92:DE:A5:D8:F7:48:7D:42:54:FF:06:52:77:22:E2:79
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       77AD39F8EA8F9BCED2E98B21C4C4A48CE40ED4FC
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:55 +0000
ROA not before:           Tue 24 Sep 2024 21:39:55 +0000
ROA not after:            Tue 23 Sep 2025 21:44:55 +0000
asID:                     270716
IP address blocks:        189.127.191.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:39:f8:ea:8f:9b:ce:d2:e9:8b:21:c4:c4:a4:8c:e4:0e:d4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:55 2024 GMT
            Not After : Sep 23 21:44:55 2025 GMT
        Subject: CN=BE2AA67292DEA5D8F7487D4254FF06527722E279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:7c:c0:8f:c9:d0:e6:d0:62:02:e9:fa:ef:
                    30:55:46:17:c5:b3:02:8b:41:27:b2:fe:d9:4a:b3:
                    d3:f0:0b:6f:43:16:96:82:bf:9b:6b:90:7b:15:b0:
                    ff:67:0d:6c:23:50:1e:09:8c:e3:fa:01:8e:2f:fe:
                    06:4e:0d:5d:2c:5c:39:1f:85:ca:31:46:fd:9c:68:
                    a7:ac:c0:2f:34:8c:ca:28:3b:75:9c:45:25:71:8b:
                    ae:fc:a5:54:6b:f8:69:38:78:92:38:cd:33:77:df:
                    83:5f:e5:d8:84:2f:06:d8:d8:6b:a8:02:11:da:0f:
                    bd:cd:4a:7e:37:b3:09:e9:fa:f9:05:09:ed:76:c7:
                    5e:aa:d1:20:61:92:3c:fb:e5:7e:9f:b2:ef:e3:9c:
                    a2:50:35:5c:12:7d:5d:13:d6:f5:c2:27:3e:1e:14:
                    01:fd:4c:f5:a2:ea:7e:6d:ab:ac:f2:f6:12:a1:83:
                    b4:82:5c:df:67:87:4f:df:a4:5a:ba:cd:dc:0b:5a:
                    c0:6c:92:3e:1e:24:b9:f0:21:f5:ac:f6:da:9d:f8:
                    12:fc:b6:1e:cb:bb:72:69:c5:8b:42:c3:4a:58:13:
                    a3:82:67:fb:93:7a:07:2a:34:64:32:69:dd:9a:f9:
                    f7:0f:4e:1c:f6:f8:cf:65:c7:f5:0c:f0:10:2e:06:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2A:A6:72:92:DE:A5:D8:F7:48:7D:42:54:FF:06:52:77:22:E2:79
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:99:c6:d8:76:a4:16:38:84:c0:77:d9:0f:9a:d4:36:c4:ff:
         7d:df:8f:ea:ba:b0:84:8c:7b:e5:c6:43:dd:dd:44:9b:c3:be:
         7b:86:a2:9e:b9:71:93:77:45:3e:46:c0:6a:0b:ee:bc:80:5b:
         e7:19:d4:79:b5:f1:6e:28:57:44:b4:9a:cb:e6:8c:bb:b8:86:
         0b:d0:77:84:09:57:5e:23:ad:5b:34:4a:4f:9c:54:e8:93:20:
         48:31:2c:42:16:22:ec:58:65:29:48:6a:29:38:fe:23:63:37:
         6a:c0:27:fa:ba:78:98:b2:8e:8c:91:11:b2:10:12:58:21:1f:
         8c:07:94:49:df:02:f1:45:a3:30:73:fa:ab:03:3b:77:0a:f8:
         21:d6:a4:e9:03:b6:f8:f1:c7:8b:f1:f8:ba:b3:c6:ad:7e:c7:
         0b:1f:c7:b6:6d:ad:4a:28:1b:0f:e5:bc:71:bc:57:f1:7d:6d:
         68:24:84:f3:43:42:fd:fa:34:b0:c8:ef:04:71:d3:76:e6:ce:
         92:a6:f4:5f:b5:2e:6d:f7:c0:05:50:b1:94:d2:5b:aa:74:08:
         24:e6:82:70:14:72:74:d8:8b:4c:4f:40:76:4f:24:46:32:56:
         a4:d8:78:2c:1e:65:c5:84:0c:b1:8a:ea:6f:5d:13:e4:f5:56:
         1c:35:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:59:28 2024 by rpki-client on console-ams.rpki-client.org