Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          ajqsWja/d+umzZWV/nV8AEfVIxFNDrxot3vKG+OwLx8=
Subject key identifier:   D6:E4:A9:78:4D:2D:65:92:2E:80:CD:69:63:D4:AE:D2:BA:71:FD:82
Certificate issuer:       /CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
Certificate serial:       6CC39FEEF34A2F188E2C86F0FF7D54FC24D12437
Authority key identifier: A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa
Signing time:             Sat 29 Jun 2024 13:10:13 +0000
ROA not before:           Sat 29 Jun 2024 13:05:13 +0000
ROA not after:            Sat 28 Jun 2025 13:10:13 +0000
asID:                     271390
IP address blocks:        181.189.104.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:9f:ee:f3:4a:2f:18:8e:2c:86:f0:ff:7d:54:fc:24:d1:24:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
        Validity
            Not Before: Jun 29 13:05:13 2024 GMT
            Not After : Jun 28 13:10:13 2025 GMT
        Subject: CN=D6E4A9784D2D65922E80CD6963D4AED2BA71FD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:3b:17:9b:cc:b2:87:d1:af:11:03:dc:6f:
                    ae:40:4d:50:05:1f:d2:56:b2:2b:f6:35:c0:b0:3c:
                    54:90:de:dd:53:81:b0:eb:e0:26:10:bd:2e:bb:e2:
                    c0:bc:47:e7:00:4c:8e:b1:61:06:b9:f6:fb:34:f4:
                    57:03:61:ad:26:3a:2c:2a:96:33:bd:f1:c3:76:ec:
                    0c:bc:4f:aa:02:32:56:98:2a:39:74:40:82:23:bd:
                    50:5a:c8:50:4e:a2:86:3a:1d:69:72:c2:0c:52:de:
                    ff:67:da:41:53:2f:22:3b:c5:c9:bc:52:ce:3a:fe:
                    da:5f:36:f6:71:d2:29:ca:20:3f:22:43:03:44:31:
                    b3:92:87:0c:9e:9c:ce:9d:41:45:e7:04:59:e4:35:
                    42:d4:e6:26:30:fc:af:a1:01:dd:4b:d9:e8:fc:dd:
                    a1:2c:f6:cc:67:ae:20:b4:a0:1a:51:e8:5c:e3:68:
                    62:c2:3e:ba:2c:13:e0:86:aa:9f:71:29:26:df:00:
                    ef:c4:96:3a:fe:0c:18:29:d6:5c:ff:85:83:7e:98:
                    8f:07:ae:b4:69:34:7c:ea:77:8e:2e:7a:75:eb:a9:
                    80:f0:ff:88:3a:a7:7b:a4:03:57:38:01:2d:78:c6:
                    b4:cb:f3:0e:3e:47:6a:ae:ca:6e:9a:8f:d9:18:03:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E4:A9:78:4D:2D:65:92:2E:80:CD:69:63:D4:AE:D2:BA:71:FD:82
            X509v3 Authority Key Identifier:
                keyid:A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/A302BABB2EFB467142775FFB8C45477B6C1C318D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4d:2e:30:49:3a:2b:2c:82:f9:50:7e:6e:d8:a3:57:f7:51:
         5f:9e:dd:0d:1d:8d:2b:ce:a5:c7:26:7b:da:30:fe:df:e0:35:
         14:cc:c0:c8:e7:85:b4:4e:60:a9:cf:ca:a4:af:5d:9c:9e:b0:
         39:57:72:9c:6d:39:82:6c:66:a4:c5:00:4b:37:5a:00:48:a7:
         75:3e:44:0b:14:19:59:8b:7d:cf:93:12:06:ab:88:a1:b8:ba:
         c6:57:64:bd:31:3a:0b:a8:87:5b:73:b2:f5:f2:f5:ee:75:7f:
         4d:1d:d8:9c:e2:95:94:6d:75:38:a7:1b:bc:de:aa:e4:fd:8b:
         47:3d:77:c0:fe:a9:67:e5:e7:6d:6e:ed:8a:2d:6e:12:6c:20:
         82:8f:ca:d7:21:3e:6a:3c:0c:a7:fc:7c:c3:b3:50:aa:5d:48:
         dc:fc:bb:d5:ca:da:74:dc:eb:b2:c2:a5:42:77:bc:07:8e:2e:
         a7:32:2b:07:ed:63:f6:de:4f:14:9b:5d:d0:e6:93:6e:36:00:
         68:ac:15:0e:5c:99:7d:70:be:0a:e3:5d:59:45:e5:24:24:80:
         cb:03:88:2b:81:9d:45:3e:73:1e:a3:9f:e0:5a:03:03:94:30:
         ee:06:8c:b7:35:a1:12:aa:5e:67:e9:d8:af:3a:ea:3c:55:18:
         22:54:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 19:22:44 2024 by rpki-client on console-fra.rpki-client.org