Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135302e302f32342d3234203d3e203238323730.roa
File:                     3138362e3231392e3135302e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          xdisokW5wD1r6ed0CCC6ivDF8TpDy7jU9+SyZIVeDlI=
Subject key identifier:   93:12:CB:F3:2F:C8:38:17:FE:F1:58:E8:C5:B5:7A:30:A3:58:D0:13
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       362BA664E685C140D5E3FD4917EA3BBB15F79C58
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135302e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:54 +0000
ROA not before:           Mon 14 Oct 2024 01:47:54 +0000
ROA not after:            Mon 13 Oct 2025 01:52:54 +0000
asID:                     28270
IP address blocks:        186.219.150.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2b:a6:64:e6:85:c1:40:d5:e3:fd:49:17:ea:3b:bb:15:f7:9c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:54 2024 GMT
            Not After : Oct 13 01:52:54 2025 GMT
        Subject: CN=9312CBF32FC83817FEF158E8C5B57A30A358D013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:25:c1:73:53:9e:13:35:ef:66:ad:7d:a0:f8:
                    38:72:0e:45:dc:fa:a9:82:e4:2b:08:35:51:2c:e6:
                    6a:a0:6a:8b:b8:da:0b:42:af:c3:67:d6:95:ba:81:
                    4b:ab:4a:ad:74:39:3d:6c:be:97:4a:92:d7:8b:e3:
                    43:b9:00:a5:38:01:48:1e:92:ca:2a:d4:e0:ba:d4:
                    07:1d:2a:74:44:f9:cd:b9:da:9e:57:fe:e8:17:27:
                    b5:6f:48:31:74:64:8d:cb:ae:f4:4e:69:64:a7:e0:
                    e6:40:43:42:44:dc:8c:db:03:aa:8f:ff:9c:9f:0b:
                    14:eb:02:ec:6a:35:6b:c5:7f:7f:38:a6:89:c2:f6:
                    dc:fa:9c:d8:19:e6:a9:59:df:ff:01:44:ec:4b:41:
                    c9:40:c7:09:c7:16:85:ef:49:e6:a6:99:ff:2f:b6:
                    ce:66:c1:fd:99:f8:fa:96:18:b5:69:02:0d:77:f5:
                    5a:b2:a1:8a:67:c6:61:7e:68:da:9d:1c:97:90:37:
                    b2:11:81:b0:c9:96:51:d0:d7:8a:4c:97:3e:35:d1:
                    b6:6d:84:24:37:5b:e3:12:0f:c9:1c:0f:08:25:93:
                    f6:ca:b3:21:ea:06:9d:92:71:49:19:d3:b4:2b:e5:
                    da:b7:8c:81:9d:68:2f:55:50:ac:c1:fb:5d:59:7c:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:CB:F3:2F:C8:38:17:FE:F1:58:E8:C5:B5:7A:30:A3:58:D0:13
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135302e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ed:2a:19:8e:ce:ae:47:7d:13:5b:b5:6a:57:d7:88:94:37:
         c0:1d:4b:a5:b4:54:01:09:be:33:ac:91:ed:76:64:bf:90:f2:
         6f:47:a3:39:7c:b4:03:6e:d5:3b:85:1f:ee:41:8a:ca:8e:71:
         21:bc:c5:1e:95:60:54:12:95:c3:f7:7e:b8:d5:c9:3e:c0:4b:
         da:9b:fe:7a:8b:01:5e:3f:55:62:ce:6f:9b:72:9c:02:21:0d:
         52:ec:9f:84:8d:57:b8:3a:80:2e:b4:e1:19:56:97:85:27:f2:
         33:ce:15:8d:b5:a4:76:b1:86:c6:db:bb:ab:2f:5a:fd:54:db:
         05:34:1b:7e:fd:32:68:2e:73:08:7d:40:94:d6:f2:2d:2b:23:
         74:db:3f:07:c9:a6:2f:ba:31:51:c4:a1:37:03:d6:45:30:16:
         ad:1b:8a:2c:73:63:7d:d3:c9:83:90:f9:4d:2f:80:de:42:60:
         62:b2:80:e2:74:45:a2:e1:32:fd:21:ed:aa:d7:f9:60:4e:92:
         15:9e:2e:42:ef:29:3f:04:db:ea:89:71:2a:3f:c8:f2:e5:28:
         89:5b:86:9f:02:78:36:28:08:f8:c1:d7:e6:c5:e6:12:30:f2:
         22:5f:36:43:6b:5e:b8:3a:af:9f:70:99:bb:47:b4:b8:b3:12:
         05:a8:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org