Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          2cTOlA6JHa7O1gE4ZmKJU5oaTfUxOQ9vL9cE805V9vc=
Subject key identifier:   EF:E5:3A:11:2E:39:41:DC:A4:CE:CE:0B:E2:D4:43:37:31:EB:57:A1
Certificate issuer:       /CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
Certificate serial:       64248446A3AE9D4C17A01ED40DD9D97488D0D99B
Authority key identifier: A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa
Signing time:             Sat 29 Jun 2024 13:10:12 +0000
ROA not before:           Sat 29 Jun 2024 13:05:12 +0000
ROA not after:            Sat 28 Jun 2025 13:10:12 +0000
asID:                     271390
IP address blocks:        181.189.106.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:84:46:a3:ae:9d:4c:17:a0:1e:d4:0d:d9:d9:74:88:d0:d9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A302BABB2EFB467142775FFB8C45477B6C1C318D
        Validity
            Not Before: Jun 29 13:05:12 2024 GMT
            Not After : Jun 28 13:10:12 2025 GMT
        Subject: CN=EFE53A112E3941DCA4CECE0BE2D4433731EB57A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:80:dd:52:cf:b2:1c:7d:3f:ad:b2:ac:1d:45:
                    03:65:d4:16:76:0c:e2:94:84:1a:61:b7:5f:3c:9b:
                    91:29:19:31:d8:97:41:04:b8:a5:be:f3:94:2c:52:
                    11:a3:75:d6:79:9b:94:91:a0:5e:4a:e2:95:a8:7e:
                    34:c2:7d:0d:42:0a:96:df:f1:fe:e5:90:85:c5:45:
                    4c:49:08:ea:e0:6e:14:d4:8d:f9:25:50:24:78:1a:
                    5a:75:92:70:e9:aa:94:04:69:a0:0a:1a:bb:f4:73:
                    71:22:64:f1:d2:18:71:f7:0c:1e:0b:a2:d1:f1:62:
                    0c:a6:10:f8:28:ee:0c:2b:6d:bf:41:f6:cd:96:a2:
                    c7:f9:33:6d:8d:8f:a0:92:62:f3:47:fa:eb:32:46:
                    52:32:ae:da:51:90:c8:b0:d2:68:bd:7a:b3:16:75:
                    1c:20:78:aa:ac:42:dd:7b:88:5b:50:a5:8d:ea:9f:
                    10:8b:0a:52:3d:4a:e1:14:26:a6:09:e3:ff:da:b4:
                    fa:7f:b0:00:f0:e6:34:e9:6e:e9:05:fa:4a:3d:65:
                    a9:d4:1d:a6:47:65:eb:7f:db:02:c9:0e:b5:bb:60:
                    84:d8:2a:37:54:73:16:3d:57:89:23:12:fa:82:03:
                    23:16:ec:be:53:a0:65:2a:d8:06:2e:da:0f:1b:1a:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:3A:11:2E:39:41:DC:A4:CE:CE:0B:E2:D4:43:37:31:EB:57:A1
            X509v3 Authority Key Identifier:
                keyid:A3:02:BA:BB:2E:FB:46:71:42:77:5F:FB:8C:45:47:7B:6C:1C:31:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/A302BABB2EFB467142775FFB8C45477B6C1C318D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A302BABB2EFB467142775FFB8C45477B6C1C318D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b0:37:ee:47:b6:f7:a9:c2:f0:07:35:90:0f:21:b3:48:15:
         fa:14:01:c7:f9:83:44:19:dd:27:46:3d:df:9d:67:26:61:df:
         c2:cc:c4:31:62:b7:db:2e:dd:99:02:60:d1:f7:32:ec:9f:80:
         c7:40:db:79:56:88:62:50:8d:f4:ba:c6:90:53:be:28:3a:64:
         e6:f5:b8:7f:89:92:da:ff:dc:6d:43:3b:fe:b3:42:96:6f:fa:
         50:18:8b:e8:15:c9:79:37:db:71:e8:bb:2d:f6:00:06:2d:19:
         61:e0:c6:ec:c0:c8:70:0d:e0:00:d7:b3:b0:07:81:48:13:53:
         e5:56:af:4e:4a:87:39:9d:33:c8:ab:f7:68:27:54:f8:06:86:
         ee:21:cb:94:41:dc:8a:a1:d4:77:ce:3e:6c:b6:ae:99:36:bd:
         70:8b:8b:dd:41:4c:52:0f:05:95:e4:d3:98:04:73:fa:60:95:
         43:c6:b6:cb:33:ba:79:be:5a:f3:ca:5e:2d:22:ea:c3:ff:24:
         ed:e9:27:b8:e7:e5:05:39:3a:20:b4:b9:ac:f1:28:70:80:f2:
         f4:d2:39:33:3e:c6:a6:f2:b3:1c:55:34:94:c1:e8:a7:90:b0:
         29:af:47:e0:6b:99:71:45:5f:f4:fc:8a:7c:e4:37:a0:df:2b:
         1e:1f:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 19:22:44 2024 by rpki-client on console-fra.rpki-client.org