Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
File:                     3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (raw, json)
Hash identifier:          E8602xprY91Hlj6rDqWEUTXVjSKw9ELTTzGkNvsTIpk=
Subject key identifier:   F3:5B:75:89:CD:CF:C7:08:B4:62:6F:F0:D7:58:61:31:ED:22:2E:75
Certificate issuer:       /CN=FC2678D5CED0EF11DFC762E339166B56C1FB68A5
Certificate serial:       0D5452CB61D57CB128A7281827A9F10EEFEEB73B
Authority key identifier: FC:26:78:D5:CE:D0:EF:11:DF:C7:62:E3:39:16:6B:56:C1:FB:68:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
Signing time:             Thu 04 Apr 2024 05:49:26 +0000
ROA not before:           Thu 04 Apr 2024 05:44:26 +0000
ROA not after:            Thu 03 Apr 2025 05:49:26 +0000
asID:                     263252
IP address blocks:        189.201.232.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:54:52:cb:61:d5:7c:b1:28:a7:28:18:27:a9:f1:0e:ef:ee:b7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2678D5CED0EF11DFC762E339166B56C1FB68A5
        Validity
            Not Before: Apr  4 05:44:26 2024 GMT
            Not After : Apr  3 05:49:26 2025 GMT
        Subject: CN=F35B7589CDCFC708B4626FF0D7586131ED222E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:09:41:37:10:78:53:2c:2c:17:4c:16:0a:
                    fc:88:22:ed:85:d6:da:50:85:a2:8b:f6:98:32:07:
                    2c:8b:90:b7:45:cf:b3:64:88:11:de:85:43:93:9c:
                    ba:ce:27:09:e0:91:04:4c:c3:ed:88:6c:ef:d9:5a:
                    6f:a6:0e:5e:33:e8:a6:49:de:d3:04:d7:d1:ee:61:
                    0e:93:b1:a2:85:79:b8:ab:76:c3:78:1a:e9:9f:58:
                    e7:5a:f2:08:81:a9:c4:d5:8a:1b:19:b2:00:f4:9b:
                    8f:65:25:77:ca:c1:d6:13:7d:7a:4c:d7:22:d8:e3:
                    02:92:11:2b:99:91:34:ee:a3:60:3f:75:77:33:9b:
                    c3:68:0b:97:06:cf:c7:a2:c2:c4:78:68:15:7d:f1:
                    37:3d:ca:8c:fc:ad:47:e5:91:ff:41:ca:bb:4c:16:
                    ef:56:b9:4e:5a:58:78:15:52:b6:dd:cf:d8:9e:ab:
                    f4:ce:67:22:b5:38:17:82:34:dd:ab:51:02:86:1a:
                    e0:2c:25:df:b0:a2:42:cf:ad:d4:eb:03:6b:82:a7:
                    ba:26:c3:69:69:21:a2:19:c8:5c:0c:a4:36:98:48:
                    d7:de:8a:ad:1c:aa:eb:a0:5a:24:a0:eb:c7:82:3e:
                    a3:4a:39:f5:78:79:12:7c:c1:ce:bb:f3:3a:4f:f8:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:75:89:CD:CF:C7:08:B4:62:6F:F0:D7:58:61:31:ED:22:2E:75
            X509v3 Authority Key Identifier:
                keyid:FC:26:78:D5:CE:D0:EF:11:DF:C7:62:E3:39:16:6B:56:C1:FB:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:de:83:ea:67:a9:06:93:8f:38:61:9e:c1:87:db:4f:7c:f0:
         b6:a4:ef:fc:95:be:2e:d8:af:85:c5:dd:0e:38:1a:c2:3f:e7:
         75:7f:db:fd:60:9c:2c:38:37:bc:c0:03:76:e1:05:a9:68:49:
         78:68:52:4d:4a:5e:8a:76:9e:50:a6:a0:ae:02:84:9d:46:87:
         f4:d6:c2:af:06:c5:d6:2b:33:c1:e1:5c:28:4a:b0:8e:b6:1c:
         eb:92:99:07:53:61:8a:fb:f3:17:88:40:f5:0d:36:7c:ff:70:
         fa:4b:66:90:69:59:3d:d5:82:75:fc:03:20:e2:b5:1a:0a:3c:
         90:05:9f:94:a5:73:6f:61:e1:ba:3f:b0:5d:74:63:f1:89:92:
         b9:96:c9:6d:66:80:fd:c8:0c:5c:4c:3b:11:a7:81:3d:48:f1:
         c2:93:9a:0c:5d:11:9c:8f:9f:19:c6:c1:c7:a9:82:44:0e:c6:
         c6:18:b5:24:19:c9:86:d5:b2:22:06:4a:86:ab:be:47:ee:9b:
         a0:ea:c9:df:54:db:26:51:f1:21:7f:26:55:b0:bd:2a:fc:31:
         d5:e4:8b:b0:61:78:ca:ef:c8:b3:3a:2d:13:39:17:8b:d1:74:
         cc:ec:3f:0d:f4:28:5c:7b:85:d0:55:ab:da:e7:3a:eb:80:6f:
         72:a1:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:50 2024 by rpki-client on console-fra.rpki-client.org