Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          L08PX+vqLSBMV79Kl4zSUPWup0wrYzzF06qo+K3QdJg=
Subject key identifier:   13:2F:88:66:1D:4B:4F:20:E8:95:F6:11:D9:9B:0F:CC:AB:04:BE:07
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       6D3759FA3549D5010A133EB17E1969830529891B
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     262992
IP address blocks:        186.219.146.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:37:59:fa:35:49:d5:01:0a:13:3e:b1:7e:19:69:83:05:29:89:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=132F88661D4B4F20E895F611D99B0FCCAB04BE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:0f:b7:89:25:8a:f6:cc:30:b9:1a:dd:44:
                    d1:72:c4:f7:59:ec:af:c6:12:6e:f3:cb:8e:59:92:
                    63:20:bd:60:5a:a1:15:2a:e6:df:47:a4:03:d6:20:
                    73:34:63:05:2c:06:47:60:a8:c2:5f:af:4c:7e:04:
                    b7:a6:ec:5c:9f:fa:3a:d1:bb:7d:da:3b:24:ac:0a:
                    b7:b1:ff:bb:25:05:e2:e7:03:bc:93:b0:6f:94:c6:
                    53:7f:a7:c9:77:f8:60:a4:3e:77:e7:f6:d3:00:39:
                    94:d4:e9:72:02:8e:65:2a:f6:d2:14:88:a9:f1:67:
                    79:f5:b5:07:20:9c:01:da:de:75:fa:cc:ba:a8:3c:
                    a5:f4:2c:8d:d6:91:d8:55:ac:b0:4c:da:d2:3a:5f:
                    47:0a:8f:6d:d4:1a:6b:40:38:67:fe:e5:15:e7:b9:
                    5b:dc:1f:24:55:37:1d:4a:d9:54:d8:2b:3f:5a:b3:
                    30:2b:71:9b:ef:36:c8:fc:1f:e0:5b:3b:48:84:af:
                    c0:a1:e7:87:bc:63:38:dc:f7:14:65:65:07:20:dc:
                    6e:a8:36:1b:23:36:e7:ef:3b:1e:f1:16:26:cb:ba:
                    41:82:57:69:89:e1:12:83:3a:3d:80:70:4a:60:77:
                    eb:9b:6f:67:c7:3f:e5:c1:e6:f9:15:01:22:20:b8:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:88:66:1D:4B:4F:20:E8:95:F6:11:D9:9B:0F:CC:AB:04:BE:07
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:c9:e8:1e:23:10:a7:7d:23:e7:82:86:0f:11:67:27:e2:10:
         0b:b3:4e:42:83:9b:72:f9:50:04:38:85:00:5e:87:1d:ee:91:
         00:3d:b7:2a:f4:e0:a0:1c:b5:19:47:6c:28:7a:8f:26:62:bf:
         bb:15:b5:9a:9a:4d:38:bb:b5:ae:ea:d8:91:05:74:c7:05:ea:
         33:88:50:68:eb:c3:05:b3:88:d1:45:eb:f2:dc:12:d2:0a:d5:
         90:a3:2e:30:a2:b2:01:48:49:04:7e:ec:f6:38:7c:a5:f8:af:
         c2:29:b6:1b:ae:59:02:62:13:e7:c6:e1:0a:44:22:b3:ff:ff:
         f8:fa:a7:b0:27:65:8a:35:db:fe:ce:3c:eb:d9:0d:c4:d6:2e:
         76:16:09:1a:32:bd:34:86:e7:d1:4a:6c:c7:e7:5a:32:05:b9:
         56:a9:06:bd:ff:77:32:dc:67:b7:01:92:a2:39:c6:f0:56:05:
         48:1a:53:71:b3:11:9a:77:b9:4e:e7:6d:ac:51:99:b6:83:93:
         2f:d9:29:19:ea:f6:33:5a:64:c0:30:45:1e:65:57:e5:ff:0b:
         62:eb:e8:90:b2:f8:c2:ea:dc:c4:46:70:b5:33:d4:c7:55:b0:
         52:4f:1a:c8:f8:0a:70:c0:fe:0a:81:c5:f2:b6:6d:b6:d1:d1:
         d8:53:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org