Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          RqVFeA4MPk+aH57nvgEUEEob8jN0Gzmxddn6/XCu1t4=
Subject key identifier:   CD:26:A8:E6:22:B8:E6:9B:E7:84:B2:AD:6B:6D:E6:82:71:68:83:40
Certificate issuer:       /CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
Certificate serial:       6BDC94D4D4874C151AB8CE7A87F511E324A2E3F6
Authority key identifier: A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa
Signing time:             Sat 29 Jun 2024 13:10:13 +0000
ROA not before:           Sat 29 Jun 2024 13:05:13 +0000
ROA not after:            Sat 28 Jun 2025 13:10:13 +0000
asID:                     271390
IP address blocks:        181.189.105.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dc:94:d4:d4:87:4c:15:1a:b8:ce:7a:87:f5:11:e3:24:a2:e3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
        Validity
            Not Before: Jun 29 13:05:13 2024 GMT
            Not After : Jun 28 13:10:13 2025 GMT
        Subject: CN=CD26A8E622B8E69BE784B2AD6B6DE68271688340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:a2:9b:25:08:0a:fd:83:c1:d3:69:bc:90:
                    ca:b0:aa:5a:ab:c3:76:a1:79:6d:1c:63:f6:c3:24:
                    43:11:c6:23:6d:fe:e0:a9:8d:a5:87:86:3e:31:a4:
                    96:75:7f:1a:cb:63:9f:a0:d0:93:8c:1c:e7:d3:6e:
                    5c:59:25:21:08:39:17:d1:40:da:8d:7b:42:72:29:
                    8f:5e:f5:f0:d8:1c:48:68:19:32:87:23:bb:b9:12:
                    81:97:1c:da:f8:13:84:5d:44:46:d7:bd:79:8e:2f:
                    37:40:13:96:ae:6f:4c:41:24:5b:ec:c3:d6:4a:90:
                    9a:4d:3b:f5:cb:03:c8:96:da:07:9c:12:71:92:e2:
                    b7:4f:9f:02:57:d1:83:3a:01:02:35:29:2f:11:9f:
                    83:c7:7d:c0:0c:46:57:3c:94:39:a9:75:83:2b:73:
                    3f:ac:1d:f2:c6:53:97:59:7b:a2:39:fc:d8:a0:4c:
                    ca:a5:23:ad:b1:44:00:b2:9e:ba:90:bf:98:a5:cb:
                    81:ab:22:56:89:05:67:e4:50:30:fd:83:17:fe:2f:
                    45:13:50:1f:30:0f:b1:d5:3d:47:0c:fb:71:b6:a8:
                    66:50:31:c5:e2:44:3a:8c:2b:1d:4e:8b:27:9f:87:
                    39:3d:62:08:b2:f1:d4:98:23:9b:74:46:8a:5a:59:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:26:A8:E6:22:B8:E6:9B:E7:84:B2:AD:6B:6D:E6:82:71:68:83:40
            X509v3 Authority Key Identifier:
                keyid:A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/A302BABB2EFB467142775FFB8C45477B6C1C318D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:ae:a6:52:8d:c7:4c:9b:82:aa:45:7b:48:fb:15:54:31:
         a5:a6:b6:d1:08:08:10:88:2a:0c:cf:4e:40:4a:3a:73:bd:a1:
         a9:32:57:f4:ac:dc:e9:a7:65:80:bf:bd:49:24:dc:f7:bf:78:
         c8:0c:3d:8f:49:51:37:19:c4:79:b3:67:12:a8:b4:e5:81:bb:
         d0:38:3a:7f:f4:f0:be:d5:dc:16:ff:31:bb:b0:53:92:d4:de:
         82:45:c0:02:24:41:30:29:14:67:e1:e2:45:62:2c:8d:8c:d6:
         c3:8e:b5:b6:3e:82:a5:90:47:2f:df:22:e0:49:c3:91:7b:81:
         bb:af:0a:44:be:64:13:99:dd:95:7f:04:b3:4a:95:01:f3:98:
         ee:ed:52:70:d5:3e:3a:3f:97:97:1a:d8:b8:5a:97:00:01:68:
         36:6c:51:ab:dc:52:d7:0d:da:28:d8:d1:fd:fd:dd:5a:f1:3e:
         f4:69:66:a3:d3:42:e8:a7:03:8b:11:a4:c6:f9:9a:d0:66:35:
         5c:c3:e9:8f:f2:ec:97:53:af:bb:00:da:cf:95:54:93:09:d4:
         ed:88:01:2b:11:2a:04:3f:43:cb:d3:17:22:a3:1f:9c:c7:0c:
         9e:5d:2e:59:c7:92:b2:13:75:ac:db:41:ce:a1:0d:52:fb:7a:
         11:71:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 19:53:01 2024 by rpki-client on console-ams.rpki-client.org