Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa (raw, json)
Hash identifier:          KTmh0ZkoPuECj6HDwBgj+MRmGtJ7dywf20wbmRDv5aY=
Subject key identifier:   CA:02:67:92:2E:5E:86:AC:94:7C:BD:63:35:E4:37:BC:7F:F3:A0:06
Certificate issuer:       /CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
Certificate serial:       6E59CD722833CC68FBB1C3398D4AB857FB698994
Authority key identifier: A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa
Signing time:             Sat 29 Jun 2024 13:10:14 +0000
ROA not before:           Sat 29 Jun 2024 13:05:14 +0000
ROA not after:            Sat 28 Jun 2025 13:10:14 +0000
asID:                     271390
IP address blocks:        181.189.104.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:59:cd:72:28:33:cc:68:fb:b1:c3:39:8d:4a:b8:57:fb:69:89:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
        Validity
            Not Before: Jun 29 13:05:14 2024 GMT
            Not After : Jun 28 13:10:14 2025 GMT
        Subject: CN=CA0267922E5E86AC947CBD6335E437BC7FF3A006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:32:c6:63:6c:b9:7c:da:af:55:56:de:2a:
                    f1:ca:4a:04:bb:73:fb:f2:50:f7:a8:9f:6a:f7:7f:
                    6d:1f:ac:ae:92:7a:af:54:8d:a9:62:36:52:ba:c1:
                    af:cb:f2:e3:c7:52:30:04:4e:94:75:f0:9d:f6:b0:
                    fc:cc:65:35:30:4b:12:66:85:78:ca:bc:68:26:81:
                    bd:cd:79:1b:12:5d:cc:b4:e6:79:61:41:3e:e3:85:
                    62:da:fc:3d:1f:04:c2:2c:cc:a2:0f:ae:b2:a2:5f:
                    32:81:dd:25:e6:ff:f9:11:3e:c8:3a:21:eb:dc:ad:
                    a6:82:fc:7e:b7:2f:5a:69:ff:07:b5:1d:98:28:03:
                    2c:af:bd:ef:18:5b:81:19:56:e5:1d:eb:40:15:95:
                    7f:fa:97:e5:bf:b1:b2:5f:db:43:88:41:7d:79:5a:
                    ff:dd:ea:94:cd:b6:ce:65:a7:67:82:08:0a:6f:dd:
                    b3:02:7d:d0:4a:70:a0:8e:9f:dd:fa:f9:d9:48:d2:
                    39:57:98:45:90:30:83:21:27:ec:21:cd:ec:78:b8:
                    53:98:17:b3:db:fe:82:7f:fa:46:fa:0a:f2:2c:f8:
                    9d:76:58:d6:c7:99:c8:46:db:6f:8f:1f:8b:07:af:
                    9c:01:bb:8e:bd:8e:73:88:5e:49:01:c9:a5:25:c7:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:02:67:92:2E:5E:86:AC:94:7C:BD:63:35:E4:37:BC:7F:F3:A0:06
            X509v3 Authority Key Identifier:
                keyid:A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/A302BABB2EFB467142775FFB8C45477B6C1C318D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:e8:0a:b2:a8:2f:ba:2d:6d:11:0e:02:58:76:dc:13:c2:d5:
         01:df:c7:00:5b:d8:ae:bb:a9:71:5e:d5:4e:8b:c0:75:5a:f5:
         99:70:0c:5c:a9:4b:0c:ab:da:86:41:d8:b1:d1:ef:fd:d5:b5:
         a4:3f:03:11:27:e3:bf:be:1d:6c:bd:e0:fd:5e:b7:e3:a4:b5:
         e6:e1:bc:0d:68:d9:82:f2:26:51:1f:71:fc:6f:43:68:39:64:
         13:e4:39:71:37:84:dd:65:e6:d9:af:23:0d:12:35:7e:a4:65:
         0b:71:fd:7d:d7:cc:89:92:76:32:af:9a:26:8f:ef:28:a7:d6:
         fa:12:5e:ea:67:cb:41:35:47:7b:af:0c:9d:5a:3e:0e:e7:08:
         37:bb:7a:ad:23:13:bd:52:5b:36:1c:54:75:0b:7c:34:01:d2:
         c5:fd:d6:88:99:95:2f:73:6b:98:bb:2e:dd:df:c4:49:73:02:
         d5:5c:48:ee:37:c2:c9:aa:9d:62:c9:e2:38:34:04:e6:8e:33:
         58:34:02:ee:06:71:ad:51:bb:bb:fd:0a:4d:15:11:2a:64:f7:
         0e:6d:7a:70:53:06:ef:c5:1d:66:70:96:25:58:64:88:78:68:
         a9:62:23:92:0c:ae:b8:14:9d:37:19:4e:d6:86:e5:a1:04:b1:
         60:17:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 19:53:01 2024 by rpki-client on console-ams.rpki-client.org