Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa
File:                     3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa (raw, json)
Hash identifier:          g6k8OJtb3Bqo2PRxHYnTRfG/V52vnqJJOTFfBFGrifw=
Subject key identifier:   09:5D:88:0C:B2:B2:44:1E:75:60:50:44:71:2A:51:90:A7:9B:BA:D3
Certificate issuer:       /CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
Certificate serial:       29D355FE7C4353A2396BF05D10E86FCCCBBA4ED3
Authority key identifier: A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa
Signing time:             Sat 29 Jun 2024 13:10:12 +0000
ROA not before:           Sat 29 Jun 2024 13:05:12 +0000
ROA not after:            Sat 28 Jun 2025 13:10:12 +0000
asID:                     271390
IP address blocks:        181.189.106.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d3:55:fe:7c:43:53:a2:39:6b:f0:5d:10:e8:6f:cc:cb:ba:4e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
        Validity
            Not Before: Jun 29 13:05:12 2024 GMT
            Not After : Jun 28 13:10:12 2025 GMT
        Subject: CN=095D880CB2B2441E75605044712A5190A79BBAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:d5:d0:ec:85:aa:82:50:03:a0:c4:e9:f4:
                    d8:0a:17:aa:72:33:65:48:94:7a:d4:d7:ad:f5:c5:
                    a7:a0:0c:8b:88:fb:3a:54:5d:9a:74:9b:b7:ad:a8:
                    3b:39:81:40:80:81:e3:d1:ca:5a:72:d0:ba:d1:ba:
                    55:01:8c:81:2a:0b:85:d4:f8:bb:7d:00:de:bd:4f:
                    df:4b:fd:ab:a2:94:d0:56:df:75:33:f8:de:00:35:
                    bd:dc:84:8e:c2:a2:d8:6c:34:fb:25:ed:1d:b6:bf:
                    55:99:1a:70:a8:5f:21:5d:2e:28:af:7f:29:cb:37:
                    c5:2c:16:b0:a5:94:f7:47:f1:2d:24:17:1f:8e:a3:
                    e5:7b:75:f3:b2:0d:69:35:44:21:51:f1:26:3a:09:
                    18:13:51:fc:83:5a:dd:65:34:f4:e5:e4:ea:e5:0f:
                    e5:55:54:34:65:1e:05:51:49:89:63:2c:27:2d:ee:
                    c6:e3:ad:22:06:62:22:6d:d6:e1:df:90:c6:a8:4a:
                    ea:8f:5b:8b:75:90:43:f9:c0:fc:6b:92:ee:a4:c8:
                    42:48:bd:7e:3d:12:14:df:e9:72:ff:b8:25:06:54:
                    c4:0c:44:89:9c:30:00:25:57:73:51:cf:ba:16:75:
                    b1:71:87:82:8f:72:7e:96:8f:db:f1:2a:0f:62:f1:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5D:88:0C:B2:B2:44:1E:75:60:50:44:71:2A:51:90:A7:9B:BA:D3
            X509v3 Authority Key Identifier:
                keyid:A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/A302BABB2EFB467142775FFB8C45477B6C1C318D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:38:6e:de:c1:93:1c:40:1f:c8:30:e6:09:47:f2:07:4a:
         3f:bb:b2:09:5f:78:7f:f0:ab:d4:55:ee:25:17:37:81:f0:86:
         77:73:c3:93:36:a5:a3:ee:32:a4:f8:dd:78:ee:4d:a7:3d:68:
         0e:c3:e2:6f:bd:2e:bb:22:dd:33:8b:a8:34:ea:03:bb:99:61:
         ba:b2:91:67:6c:19:3c:e2:3d:8a:a9:cf:09:fa:30:78:0e:80:
         76:48:c9:38:06:b5:b1:de:1b:04:81:6f:f4:3a:09:bf:2f:90:
         65:f6:db:3d:7b:cc:0a:ee:e8:dc:64:f6:c7:38:f4:7c:7c:29:
         ee:05:ca:0c:34:c7:b9:a0:c3:ef:8c:7c:76:3b:d1:d9:0e:85:
         bb:86:7e:50:e6:2b:1b:e9:c8:76:da:3f:cc:c2:0d:6a:8f:9c:
         e1:89:5c:e7:6b:b5:aa:66:c6:f9:9f:d6:53:80:40:58:40:3c:
         bb:f7:9e:b9:de:da:e1:57:f5:ba:16:c8:22:f1:76:d3:70:e2:
         ca:bd:78:9d:4b:9d:77:07:fc:2f:1c:a6:18:44:d6:28:03:24:
         28:2c:57:a7:31:08:5d:a6:50:73:b5:7c:58:9f:e0:11:82:79:
         af:57:25:d2:24:d9:2e:42:cf:78:bb:d5:ac:04:4c:31:2b:3b:
         6d:47:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 19:53:01 2024 by rpki-client on console-ams.rpki-client.org