Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa (raw, json)
Hash identifier:          /dgMbxS0fmP0OVlCoR5mmgIcgxnlR48W7T2eNyNs3Fw=
Subject key identifier:   6D:D1:60:29:7F:62:5F:46:20:21:A3:60:08:47:43:04:FB:A0:2D:29
Certificate issuer:       /CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
Certificate serial:       684C7CA209DBB5394D356424E1B9E7FBD752D865
Authority key identifier: A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa
Signing time:             Sat 29 Jun 2024 13:10:13 +0000
ROA not before:           Sat 29 Jun 2024 13:05:13 +0000
ROA not after:            Sat 28 Jun 2025 13:10:13 +0000
asID:                     271390
IP address blocks:        181.189.104.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4c:7c:a2:09:db:b5:39:4d:35:64:24:e1:b9:e7:fb:d7:52:d8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
        Validity
            Not Before: Jun 29 13:05:13 2024 GMT
            Not After : Jun 28 13:10:13 2025 GMT
        Subject: CN=6DD160297F625F462021A36008474304FBA02D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:83:a7:d5:05:74:ae:98:0c:45:89:44:f3:
                    09:71:32:b2:06:aa:2a:e5:17:3f:10:27:26:02:d7:
                    87:ea:3c:0e:6e:28:39:1b:32:29:58:24:ab:ab:52:
                    f8:d7:cc:b8:53:ad:c3:c2:e9:84:34:6e:8c:fa:c2:
                    7d:28:be:3c:73:d5:c3:51:29:c6:d5:83:f4:29:2b:
                    df:c8:cd:81:31:b1:95:f8:0e:f3:f6:15:76:2f:04:
                    fe:0a:e8:ee:61:2d:a0:8b:dc:34:e0:71:00:72:5c:
                    e9:41:b4:56:0f:6c:cc:71:90:83:34:94:be:79:5f:
                    d5:88:22:52:bc:40:c0:d7:22:d6:05:78:b7:1f:56:
                    7a:9c:29:ce:af:fd:34:e8:c4:f3:b7:d4:00:35:3e:
                    0b:ab:f3:ea:94:72:25:32:a5:34:a0:c2:de:51:2f:
                    7f:ae:32:68:7a:09:4e:ee:b8:58:c7:41:4b:02:72:
                    b2:b0:d4:07:35:32:f4:f2:b0:4a:f7:22:1b:b3:05:
                    cb:fd:1f:94:4d:bf:f2:60:c9:f8:07:4a:44:40:d0:
                    84:68:2c:c7:b2:2f:cb:1e:a8:4b:db:24:8d:52:55:
                    1f:34:73:d9:e9:a3:d8:84:ec:b2:90:e6:a3:e6:34:
                    a7:a8:2d:01:0f:72:19:39:c9:cf:24:30:c2:f0:b9:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D1:60:29:7F:62:5F:46:20:21:A3:60:08:47:43:04:FB:A0:2D:29
            X509v3 Authority Key Identifier:
                keyid:A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/A302BABB2EFB467142775FFB8C45477B6C1C318D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:47:fd:f7:7d:ff:12:12:c4:17:1b:d7:75:8d:a9:ec:d5:86:
         ac:83:a8:ca:72:f8:4b:53:e3:2c:cf:c4:bd:ce:85:19:15:ab:
         4b:c6:42:b6:82:31:b6:13:25:ab:9c:ea:c7:d6:87:13:16:fa:
         71:79:d4:81:40:ea:76:a8:55:78:59:22:a0:c7:96:10:cd:6e:
         15:02:a6:b3:40:b7:a5:ef:f1:f6:00:06:ed:6f:1f:88:37:a6:
         ca:b2:65:1b:1d:26:c3:46:e3:30:07:5c:df:be:23:a1:33:62:
         9e:b0:fd:63:bc:52:ac:68:cc:2b:d6:20:e1:4c:25:66:4a:8c:
         40:89:2f:47:6f:dc:4e:88:22:4e:22:be:cf:27:ae:bc:52:7d:
         71:6a:30:eb:98:53:3f:11:5b:32:68:2f:9d:f6:a1:f5:35:be:
         70:5b:b7:5f:05:50:a9:de:68:47:f3:8b:71:cb:6e:a0:82:ee:
         0a:ff:bc:ea:5b:94:95:e4:13:74:bc:fd:36:05:cc:e5:cb:86:
         32:c3:01:a7:79:52:35:27:c0:58:7b:57:2d:6f:aa:01:09:ef:
         37:e6:7f:48:9e:84:9f:ee:f8:9b:1d:d3:97:11:93:5e:e8:84:
         92:e0:c2:42:61:f6:d6:07:15:f6:5c:8d:c7:ae:c1:6c:74:c2:
         10:56:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 19:22:44 2024 by rpki-client on console-fra.rpki-client.org