Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          r1Hdx0bxesZ4YIGMTbUEb7CpgfQSTLGdirMyBtxzkOk=
Subject key identifier:   BA:42:15:94:97:E8:6F:FB:13:56:9C:40:3A:C9:C0:D7:2B:CB:82:67
Certificate issuer:       /CN=41780D761AAB6860C84344D2502C54C1F09D6825
Certificate serial:       64D69DA29C5C81AA2EFD976D947B479879C35648
Authority key identifier: 41:78:0D:76:1A:AB:68:60:C8:43:44:D2:50:2C:54:C1:F0:9D:68:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41780D761AAB6860C84344D2502C54C1F09D6825.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
Signing time:             Thu 04 Apr 2024 01:11:11 +0000
ROA not before:           Thu 04 Apr 2024 01:06:11 +0000
ROA not after:            Thu 03 Apr 2025 01:11:11 +0000
asID:                     270579
IP address blocks:        189.126.84.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d6:9d:a2:9c:5c:81:aa:2e:fd:97:6d:94:7b:47:98:79:c3:56:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41780D761AAB6860C84344D2502C54C1F09D6825
        Validity
            Not Before: Apr  4 01:06:11 2024 GMT
            Not After : Apr  3 01:11:11 2025 GMT
        Subject: CN=BA42159497E86FFB13569C403AC9C0D72BCB8267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:48:be:36:69:7a:67:9e:18:9e:78:be:11:
                    d8:62:ce:e3:4a:e6:80:96:25:5f:02:ef:c9:39:3c:
                    d6:7a:ba:b8:45:4c:d7:ee:a5:5d:54:92:b8:29:57:
                    86:8e:d2:14:52:15:1a:05:8f:22:19:08:25:cd:2b:
                    40:79:d2:a8:a9:a7:f4:a6:c0:90:38:97:79:48:24:
                    2f:5a:1f:c2:56:47:b2:03:f9:09:3f:b4:5e:d5:0b:
                    e8:95:f6:c3:5b:ab:bf:74:03:36:6a:67:40:07:5f:
                    6d:c7:2f:3d:fa:7b:d7:a9:72:d3:af:66:64:9e:27:
                    30:9e:65:dd:e6:65:02:10:e9:e9:2b:d3:ee:4a:1b:
                    37:71:eb:50:13:db:2a:f0:7e:37:fe:72:81:f3:c9:
                    5d:7a:2e:12:20:7b:4e:bb:13:48:00:2e:93:c5:f2:
                    19:f3:68:96:aa:48:cb:db:e7:15:36:a8:1b:67:1e:
                    a1:ad:75:a1:32:4a:70:aa:c4:5c:02:d6:19:e2:65:
                    b7:0a:6c:6f:75:ef:2c:57:b3:c7:44:d5:74:04:5f:
                    54:7d:b2:59:45:3e:7e:5b:51:39:c8:40:70:ae:7f:
                    93:a5:9c:4d:58:60:81:95:ee:c8:c9:7f:5f:a0:ac:
                    49:6a:f2:e4:65:b7:2b:04:a7:89:c5:9c:5e:a3:f1:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:42:15:94:97:E8:6F:FB:13:56:9C:40:3A:C9:C0:D7:2B:CB:82:67
            X509v3 Authority Key Identifier:
                keyid:41:78:0D:76:1A:AB:68:60:C8:43:44:D2:50:2C:54:C1:F0:9D:68:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/41780D761AAB6860C84344D2502C54C1F09D6825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41780D761AAB6860C84344D2502C54C1F09D6825.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:f4:6f:e2:bf:fb:d9:52:7b:da:a0:d1:e7:f8:3b:4d:40:
         57:a9:79:55:42:16:c1:f6:6f:1d:9d:e9:db:0d:d0:c4:0e:fb:
         3f:13:9d:68:29:68:fa:f3:e0:d2:7a:be:7d:ca:25:b0:0e:ca:
         67:f2:9b:9a:f2:ee:c4:6c:ec:a6:2f:00:0c:71:48:72:a9:76:
         2f:f8:1b:03:b8:0b:9b:c3:97:62:4e:2d:f8:53:66:29:47:a7:
         72:27:2e:13:a9:0d:7b:79:dc:9d:52:aa:6b:e1:16:21:b6:62:
         96:db:14:bf:37:1e:c4:c9:c5:15:79:67:0c:d7:e4:ad:87:03:
         5c:4e:ae:0a:e8:aa:3b:73:44:e3:ed:bb:24:cb:74:2e:6d:f3:
         d1:55:a2:c5:29:fd:e0:51:81:e8:da:7b:e0:e2:a6:2b:0f:8b:
         97:e4:bc:4b:89:db:c8:c2:0a:82:b4:f1:ae:5b:0b:3c:94:7a:
         ae:83:27:5e:0d:d6:b1:89:e2:d6:35:3c:0c:26:00:ef:d4:4f:
         cd:a3:8d:a3:53:be:fa:17:e2:33:cd:f6:7d:48:67:bf:b9:ee:
         ab:0d:fd:b9:0d:c6:76:04:81:41:ed:b3:d0:8b:03:b7:2c:72:
         42:3d:e9:b9:3e:a7:66:a6:29:31:4d:77:d9:e4:8a:70:5d:f8:
         45:83:8b:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZNadopxcgaou/ZdtlHtHmHnDVkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE3ODBENzYxQUFCNjg2MEM4NDM0NEQyNTAyQzU0QzFG
MDlENjgyNTAeFw0yNDA0MDQwMTA2MTFaFw0yNTA0MDMwMTExMTFaMDMxMTAvBgNV
BAMTKEJBNDIxNTk0OTdFODZGRkIxMzU2OUM0MDNBQzlDMEQ3MkJDQjgyNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqr0i+Nml6Z54Ynni+EdhizuNK
5oCWJV8C78k5PNZ6urhFTNfupV1UkrgpV4aO0hRSFRoFjyIZCCXNK0B50qipp/Sm
wJA4l3lIJC9aH8JWR7ID+Qk/tF7VC+iV9sNbq790AzZqZ0AHX23HLz36e9epctOv
ZmSeJzCeZd3mZQIQ6ekr0+5KGzdx61AT2yrwfjf+coHzyV16LhIge067E0gALpPF
8hnzaJaqSMvb5xU2qBtnHqGtdaEySnCqxFwC1hniZbcKbG917yxXs8dE1XQEX1R9
sllFPn5bUTnIQHCuf5OlnE1YYIGV7sjJf1+grElq8uRltysEp4nFnF6j8eEHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUukIVlJfob/sTVpxAOsnA1yvLgmcwHwYDVR0j
BBgwFoAUQXgNdhqraGDIQ0TSUCxUwfCdaCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0t5aFN0RFVFTG1nbWVFZGZMOTdudjNkaWt1UXhmQzhwTUFNNXY0a1Zm
VkEvMy80MTc4MEQ3NjFBQUI2ODYwQzg0MzQ0RDI1MDJDNTRDMUYwOUQ2ODI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNzgwRDc2MUFBQjY4NjBD
ODQzNDREMjUwMkM1NEMxRjA5RDY4MjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLeWhTdERVRUxtZ21lRWRmTDk3bnYzZGlrdVF4ZkM4cE1BTTV2NGtWZlZBLzMv
MzEzODM5MmUzMTMyMzYyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9flQwDQYJKoZIhvcNAQELBQADggEBADPS9G/i
v/vZUnvaoNHn+DtNQFepeVVCFsH2bx2d6dsN0MQO+z8TnWgpaPrz4NJ6vn3KJbAO
ymfym5ry7sRs7KYvAAxxSHKpdi/4GwO4C5vDl2JOLfhTZilHp3InLhOpDXt53J1S
qmvhFiG2YpbbFL83HsTJxRV5ZwzX5K2HA1xOrgroqjtzROPtuyTLdC5t89FVosUp
/eBRgejae+DipisPi5fkvEuJ28jCCoK08a5bCzyUeq6DJ14N1rGJ4tY1PAwmAO/U
T82jjaNTvvoX4jPN9n1IZ7+57qsN/bkNxnYEgUHts9CLA7csckI96bk+p2amKTFN
d9nkinBd+EWDi+k=
-----END CERTIFICATE-----
Generated at Sat Oct 5 04:02:50 2024 by rpki-client on console-ams.rpki-client.org