Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa
File:                     3139312e362e38302e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          Kh3+Yk4TR4MJtyY4e2S1SEosq0gM5kKnAydUEOFpbdM=
Subject key identifier:   9A:C2:F3:82:45:7A:67:B6:C3:1F:12:FD:09:A8:7D:F7:D7:8A:04:86
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       779BC0AA07C8854C6B02A4135C1E0D45BB06BD97
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     28270
IP address blocks:        191.6.80.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9b:c0:aa:07:c8:85:4c:6b:02:a4:13:5c:1e:0d:45:bb:06:bd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=9AC2F382457A67B6C31F12FD09A87DF7D78A0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:46:2c:3e:66:4d:09:46:15:04:f7:0d:aa:
                    16:1b:61:02:63:81:00:b8:82:25:61:22:e1:2f:07:
                    4d:3d:41:20:2f:e5:78:aa:36:ec:3b:b6:21:4d:1d:
                    16:d0:1b:95:64:9f:36:8e:30:55:1d:e0:29:ce:58:
                    00:82:26:49:d2:26:cf:b4:c8:97:e3:5d:91:91:46:
                    43:ef:e2:d6:c1:a9:a3:15:85:34:6e:8b:3c:da:88:
                    47:fc:4b:e5:77:f5:47:ff:6a:c4:5b:48:b7:3e:57:
                    da:0e:c6:78:47:92:04:7f:ab:3e:ea:ad:05:f7:1c:
                    76:3b:e5:c8:f0:8b:3d:03:f7:cc:da:b4:be:d9:c4:
                    17:7f:3f:5f:3e:79:fd:29:dd:93:9d:8e:da:ee:bd:
                    a1:5e:b5:85:c7:01:c8:f9:fe:6d:02:d0:24:9d:0e:
                    3f:c8:31:e6:f2:76:67:43:48:c4:bc:b7:10:04:e3:
                    9f:23:7e:3a:13:11:d3:43:b5:5e:ed:f9:0d:be:bc:
                    23:1b:98:d5:0f:2f:aa:6e:ac:f0:e2:d8:9d:23:e9:
                    c5:1c:9e:c2:0a:a8:36:09:a1:1d:75:52:45:4e:1d:
                    e1:db:3b:27:a1:50:c7:89:c7:65:9a:b0:79:05:e1:
                    8d:44:7b:eb:f9:71:a6:29:fa:20:29:bd:71:cf:1c:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:F3:82:45:7A:67:B6:C3:1F:12:FD:09:A8:7D:F7:D7:8A:04:86
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:da:6b:f5:06:1e:6d:0b:70:d3:04:fa:c9:52:04:a8:fe:
         18:e1:54:f9:a1:9a:f9:3a:90:f9:1b:60:fe:fa:ce:69:ee:6c:
         6c:c8:d6:10:3f:35:d8:b3:72:12:11:b2:39:08:a7:19:cd:58:
         27:1b:6c:89:97:8e:7c:0b:9d:1c:ef:8e:fb:06:31:49:ec:c3:
         3e:c5:0a:ff:e0:a7:ed:9a:c6:93:57:88:9a:1d:33:cc:81:84:
         3a:06:b6:4f:73:03:d2:f7:85:a3:ec:3f:c5:06:66:e6:f8:f9:
         88:7e:c7:68:fb:86:39:e9:48:b4:5e:6d:8e:2a:65:ae:0f:a3:
         4c:56:4c:a4:05:67:c8:69:42:4e:88:6e:67:9b:e4:e1:c1:3a:
         ad:44:b8:21:fe:96:8c:91:4f:44:49:7b:7b:78:4b:d3:a6:59:
         f2:56:f3:dc:ac:ae:1f:20:07:65:ab:8b:c9:c5:6c:35:89:9c:
         ee:ba:83:89:d3:11:26:bd:c8:c2:eb:4b:e1:20:fd:05:5d:76:
         83:69:70:83:1c:1b:11:57:1c:65:7b:f1:18:5e:c1:a3:87:d1:
         49:ae:d0:68:70:b3:95:b8:a8:21:06:44:b1:f1:fa:ce:4d:d5:
         9d:a6:70:f0:ae:74:38:a4:54:de:22:68:12:ca:ee:e9:35:78:
         2a:46:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org