Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132302e302f32332d3233203d3e20323730343938.roa
File:                     32342e3135322e3132302e302f32332d3233203d3e20323730343938.roa (raw, json)
Hash identifier:          ubbf7I2DtIxFx6a/ulEqWvYDSSAWugy1g0Wy+xXgJIY=
Subject key identifier:   74:3A:D2:1B:6F:4C:65:2A:72:75:75:FA:41:13:1C:4A:8E:42:43:97
Certificate issuer:       /CN=829064A66351CAD7B748DA917A6753A6722F5F37
Certificate serial:       3EEE120F56536214CDBA64DC7B51B2C561D0CA2C
Authority key identifier: 82:90:64:A6:63:51:CA:D7:B7:48:DA:91:7A:67:53:A6:72:2F:5F:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829064A66351CAD7B748DA917A6753A6722F5F37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132302e302f32332d3233203d3e20323730343938.roa
Signing time:             Tue 20 Aug 2024 14:00:05 +0000
ROA not before:           Tue 20 Aug 2024 13:55:05 +0000
ROA not after:            Tue 19 Aug 2025 14:00:05 +0000
asID:                     270498
IP address blocks:        24.152.120.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ee:12:0f:56:53:62:14:cd:ba:64:dc:7b:51:b2:c5:61:d0:ca:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829064A66351CAD7B748DA917A6753A6722F5F37
        Validity
            Not Before: Aug 20 13:55:05 2024 GMT
            Not After : Aug 19 14:00:05 2025 GMT
        Subject: CN=743AD21B6F4C652A727575FA41131C4A8E424397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:05:3b:b7:c9:d1:a9:65:1b:89:08:e1:68:
                    85:60:91:87:8e:5c:9f:60:83:73:c5:2d:87:36:93:
                    f8:72:fa:32:92:5f:ab:06:04:7a:13:ff:5a:84:71:
                    7e:1e:2b:e8:97:fd:5a:cd:d7:da:8e:28:49:e2:00:
                    db:bb:cb:ca:73:c9:48:23:54:e9:9c:c7:70:3c:bf:
                    fb:5c:23:cc:77:d7:43:55:6a:3b:55:ee:3f:93:2c:
                    c9:03:b8:9a:5a:2f:75:14:a5:cd:1b:f2:e6:15:1b:
                    0e:11:3f:98:26:38:db:8c:b5:73:1d:7e:ad:c4:33:
                    f2:bd:d7:a0:42:86:a0:ee:df:b5:6e:e7:cb:24:b1:
                    82:ca:fe:05:34:28:d8:bd:48:88:e7:d5:3f:27:ea:
                    76:89:75:a4:3f:41:b4:16:94:b6:82:76:65:e1:b6:
                    77:da:a9:79:12:07:7a:1f:7a:35:c3:79:19:da:5e:
                    1d:8d:cb:d1:40:a9:78:5f:f9:d1:79:b1:73:f0:15:
                    5a:7c:3b:06:8b:f7:d8:f4:78:13:ed:37:08:5c:42:
                    a1:36:12:fe:8a:78:78:25:17:44:21:30:c5:24:d3:
                    fb:86:76:c6:39:3c:d5:30:38:28:dc:12:6a:ba:2a:
                    ef:24:f5:5b:1b:a5:ca:8d:d8:a0:8e:8b:15:e3:7f:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3A:D2:1B:6F:4C:65:2A:72:75:75:FA:41:13:1C:4A:8E:42:43:97
            X509v3 Authority Key Identifier:
                keyid:82:90:64:A6:63:51:CA:D7:B7:48:DA:91:7A:67:53:A6:72:2F:5F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/829064A66351CAD7B748DA917A6753A6722F5F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829064A66351CAD7B748DA917A6753A6722F5F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132302e302f32332d3233203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:c6:d5:f3:97:a4:bf:2f:a0:c5:dd:6f:d0:ba:17:9c:d7:
         a4:09:ed:93:47:74:0f:3e:27:df:27:32:4d:d5:98:ba:6f:16:
         ba:be:a1:c8:2d:4d:80:6e:29:09:93:dd:26:e7:18:46:95:ad:
         4d:7d:1c:ac:05:87:9a:26:be:29:a6:9c:4f:5d:ed:22:b5:fa:
         a1:f2:f1:14:f7:ce:a8:69:35:4b:d6:75:5d:45:3d:e0:9b:65:
         05:da:5b:5f:a4:4a:dd:6e:bf:9b:ce:64:4d:e6:ba:f0:b5:b3:
         77:36:8b:5c:be:64:86:67:54:db:f6:77:11:eb:3d:8f:e2:f3:
         7b:16:0f:df:54:67:b6:47:4d:7e:e8:3b:8c:06:40:f7:2e:04:
         fa:87:49:f9:e8:e2:36:35:02:b9:31:6c:c0:7d:30:b6:9a:25:
         0f:7f:a8:fb:73:9c:c5:8f:67:36:34:3c:7b:e9:bc:52:b1:f6:
         55:f1:4c:71:4d:1a:cd:0f:75:b5:a8:bc:94:99:25:11:ce:2a:
         00:80:43:f2:e5:59:f6:58:7d:4d:0d:01:6b:97:76:a7:5c:24:
         12:20:eb:51:5c:0e:88:ec:a0:71:7b:1e:ab:10:48:f9:15:fd:
         fa:56:27:86:39:88:46:92:c2:42:1a:5b:c9:f0:ee:2f:b8:bd:
         fb:3e:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 01:02:11 2024 by rpki-client on console-ams.rpki-client.org