Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230372e302f32342d3332203d3e20323730333935.roa
File:                     3139302e38392e3230372e302f32342d3332203d3e20323730333935.roa (raw, json)
Hash identifier:          cR+UpI8GHn9E4x26ZHVFliz6HnTA3/aOTEJjM8NAPJk=
Subject key identifier:   05:3C:08:F5:07:81:D4:00:AD:33:05:01:A5:36:99:17:9E:CF:15:5E
Certificate issuer:       /CN=C9B9ACD433C2198F1292465FB2268B319D884930
Certificate serial:       4EF9B835FBA9909A59514380816B6DAD8A3390F6
Authority key identifier: C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230372e302f32342d3332203d3e20323730333935.roa
Signing time:             Sun 21 Jul 2024 21:51:44 +0000
ROA not before:           Sun 21 Jul 2024 21:46:44 +0000
ROA not after:            Sun 20 Jul 2025 21:51:44 +0000
asID:                     270395
IP address blocks:        190.89.207.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:b8:35:fb:a9:90:9a:59:51:43:80:81:6b:6d:ad:8a:33:90:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B9ACD433C2198F1292465FB2268B319D884930
        Validity
            Not Before: Jul 21 21:46:44 2024 GMT
            Not After : Jul 20 21:51:44 2025 GMT
        Subject: CN=053C08F50781D400AD330501A53699179ECF155E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:4a:11:ea:5a:1f:5a:a4:b7:cc:ad:f6:a2:
                    18:f3:c5:8b:80:9e:49:3c:1e:64:e6:9f:50:51:81:
                    2e:52:66:59:d4:56:a5:bd:de:95:b8:c0:9b:21:b2:
                    95:29:4a:0c:8a:72:5b:cb:1e:f2:72:d5:93:0d:e3:
                    24:b2:78:a8:2a:49:17:3c:56:d7:d8:dd:31:a4:43:
                    c6:07:de:fa:bd:a3:cf:6b:fa:1e:2e:e4:02:07:8b:
                    bc:86:90:46:14:b0:14:7b:6f:be:a8:11:02:7f:e6:
                    de:78:ff:82:b0:1c:0d:66:88:6a:9f:03:73:0f:21:
                    81:a9:98:c8:6b:0f:e9:06:c8:b7:4c:c7:a8:99:79:
                    24:52:91:2f:2c:2a:fd:27:d9:c0:0c:0a:65:c6:dc:
                    d7:7d:d6:a9:04:99:e6:30:a4:d4:f4:de:0b:d4:ac:
                    ac:4e:f4:b7:b6:96:72:83:e2:db:7a:5e:72:a0:c5:
                    5e:1e:f4:85:9a:03:1c:a3:25:55:b9:6e:4e:a8:9d:
                    02:cc:4e:7f:2f:f2:ee:25:95:ba:4e:cf:39:7d:e3:
                    c1:fc:96:88:df:35:1c:ba:fb:c3:22:5e:53:d3:97:
                    88:ea:92:09:41:57:0b:28:b4:10:88:27:7a:62:26:
                    cf:54:a7:93:b9:03:e3:06:47:ec:2e:9d:fc:40:a6:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:08:F5:07:81:D4:00:AD:33:05:01:A5:36:99:17:9E:CF:15:5E
            X509v3 Authority Key Identifier:
                keyid:C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/C9B9ACD433C2198F1292465FB2268B319D884930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230372e302f32342d3332203d3e20323730333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:28:14:17:56:a7:23:e9:d5:ba:5f:8c:e5:1c:ac:75:98:ce:
         ce:8f:db:25:1b:b0:a6:63:a9:d3:25:a9:ff:16:ef:49:a7:c2:
         81:59:0e:db:29:97:56:7c:df:c6:d7:f5:9e:97:3b:34:cb:d3:
         f3:48:6b:96:f1:ac:f6:82:6f:fe:04:75:60:00:b4:75:74:c3:
         f1:c2:e4:26:e1:00:dd:8f:4a:e6:13:f3:7f:6c:eb:5d:3f:9c:
         03:0e:1f:da:50:fe:64:50:15:95:86:30:be:2d:73:b6:d8:4a:
         2b:6c:ca:ee:6d:99:95:dd:e2:e7:77:96:dd:36:07:0d:0e:22:
         26:3e:92:99:cf:2e:9b:ee:bb:e3:44:b4:a7:22:30:e3:21:06:
         d6:a3:0d:db:c1:9a:76:84:62:96:2f:21:36:22:1b:12:a9:de:
         4e:75:d7:5e:1e:d1:3d:59:92:a6:7e:80:34:41:c7:57:40:c0:
         13:2a:5e:c1:e5:28:93:84:62:1e:43:c2:89:97:9f:a7:13:54:
         7f:d4:f2:df:5b:2d:ae:d3:2d:c9:a0:0a:2e:d9:61:ca:cd:4c:
         44:78:aa:46:c6:e9:11:56:55:ff:ab:bc:45:a3:60:06:7c:a0:
         53:9d:92:b8:36:de:c1:74:27:55:26:c3:de:9e:37:e1:de:0a:
         8c:80:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 21:14:48 2024 by rpki-client on console-fra.rpki-client.org