Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          6SoawT3WagF30e9lf17rXlaAXleg23zWCSK+Le9THWE=
Subject key identifier:   2E:B4:10:10:A6:7E:04:00:97:0C:74:F2:26:52:ED:2B:99:72:78:7C
Certificate issuer:       /CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
Certificate serial:       4C29BB6CBCD6C6022E8759D62AF75541659663A5
Authority key identifier: 7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:58 +0000
ROA not before:           Fri 12 Apr 2024 16:14:58 +0000
ROA not after:            Fri 11 Apr 2025 16:19:58 +0000
asID:                     271390
IP address blocks:        181.189.104.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:29:bb:6c:bc:d6:c6:02:2e:87:59:d6:2a:f7:55:41:65:96:63:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE491F0B2990CDA06DE14C265B0E6968745689B
        Validity
            Not Before: Apr 12 16:14:58 2024 GMT
            Not After : Apr 11 16:19:58 2025 GMT
        Subject: CN=2EB41010A67E0400970C74F22652ED2B9972787C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:c8:65:d2:4b:5a:bb:c8:80:5a:94:95:ae:
                    91:ad:b7:e5:95:2e:11:7b:8c:9b:20:31:e6:b1:3e:
                    68:da:9e:91:2d:c6:0d:e0:db:af:f9:58:03:e1:89:
                    ad:4f:b9:68:2c:b6:d1:ff:44:04:5e:4a:ff:35:cf:
                    aa:78:0a:81:9a:15:c8:b2:d4:41:0d:36:c8:00:32:
                    24:31:12:ee:50:43:8f:61:7a:3c:9e:fd:cc:6f:5d:
                    b8:3e:78:bf:f3:94:ca:3d:41:dc:08:f4:78:90:5c:
                    ec:07:4a:36:6f:19:a5:47:79:22:33:29:28:c2:53:
                    64:38:96:d1:20:a0:91:97:3e:b9:55:05:1b:2d:bc:
                    b7:e9:a7:e9:32:40:46:b3:e0:1f:77:7c:ca:0d:60:
                    aa:35:90:be:35:a6:41:5a:34:a6:d9:24:fd:b7:9c:
                    cd:0e:39:05:34:bd:b4:cf:84:92:df:31:f7:8d:b4:
                    e6:b0:81:bb:cf:80:2d:39:f3:e9:fe:73:b9:82:2e:
                    77:cc:df:cc:3c:94:13:61:9a:49:c2:db:0f:e8:49:
                    93:f4:4f:95:2a:d3:1c:b1:a9:03:60:f2:7c:29:a3:
                    73:98:c5:04:c1:94:54:75:ac:ac:69:98:1b:d3:f6:
                    5d:a0:21:4c:b4:5b:53:93:fd:17:e2:ae:19:cd:c5:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:10:10:A6:7E:04:00:97:0C:74:F2:26:52:ED:2B:99:72:78:7C
            X509v3 Authority Key Identifier:
                keyid:7F:E4:91:F0:B2:99:0C:DA:06:DE:14:C2:65:B0:E6:96:87:45:68:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/7FE491F0B2990CDA06DE14C265B0E6968745689B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE491F0B2990CDA06DE14C265B0E6968745689B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:43:c7:4c:23:b8:eb:55:ce:85:7e:17:1c:81:ce:38:a2:6a:
         a7:8a:b3:ce:39:4e:a4:30:b7:26:3c:82:df:48:0e:59:5b:7b:
         05:f4:79:18:c2:4b:4c:e5:0b:dc:38:ef:77:0c:f2:24:3d:17:
         f2:c9:ad:30:d3:4e:7b:65:bc:01:92:ad:0c:de:a5:ed:9b:f8:
         db:bc:8f:4d:28:65:d7:11:a3:81:65:39:2b:f9:e2:27:e3:9f:
         ae:8d:78:cb:17:15:9a:f1:de:ad:09:f6:e4:63:93:dd:b8:af:
         70:26:13:f4:69:f2:b3:54:61:d6:e2:46:02:f8:a6:85:cc:b5:
         ac:4f:f1:c0:61:74:3d:23:9c:e6:b4:4d:d3:ef:1f:56:3b:71:
         bd:30:cd:22:69:01:d6:de:db:49:3f:9e:a7:2d:b1:9c:b8:2a:
         58:de:29:7a:ff:9c:78:19:71:6d:d0:fa:9e:8d:00:d2:67:20:
         89:91:ef:65:85:b2:d0:cb:d5:66:fa:6b:d2:48:e7:45:20:9f:
         b1:6e:72:8e:03:67:bb:12:26:f8:dd:38:38:1e:ea:47:15:8a:
         e7:f0:20:0d:a9:79:13:2e:4d:63:81:18:69:45:44:d9:2e:94:
         11:86:2d:5b:50:2a:d4:69:fb:de:80:f4:99:67:c1:db:d7:f3:
         e4:ee:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:21:42 2024 by rpki-client on console-ams.rpki-client.org