Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139342e3137362e302f32302d3234203d3e203533303830.roa
File:                     3138362e3139342e3137362e302f32302d3234203d3e203533303830.roa (raw, json)
Hash identifier:          jdkY2r4rMK9B4wNgmAiHIU37SCFlUcMNBA919Aiiv9c=
Subject key identifier:   19:C0:58:5D:FB:3E:D8:BF:AB:A7:34:9B:AA:F0:F4:F4:D2:79:66:66
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       532213506EF9E5377346E58FFF911A642A565DBB
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139342e3137362e302f32302d3234203d3e203533303830.roa
Signing time:             Thu 31 Oct 2024 17:05:19 +0000
ROA not before:           Thu 31 Oct 2024 17:00:19 +0000
ROA not after:            Thu 30 Oct 2025 17:05:19 +0000
asID:                     53080
IP address blocks:        186.194.176.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:22:13:50:6e:f9:e5:37:73:46:e5:8f:ff:91:1a:64:2a:56:5d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:00:19 2024 GMT
            Not After : Oct 30 17:05:19 2025 GMT
        Subject: CN=19C0585DFB3ED8BFABA7349BAAF0F4F4D2796666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:cb:ab:06:f2:64:6b:3d:02:b5:bf:34:d3:
                    7d:e0:c3:cc:0d:52:7a:a3:e0:f1:f2:8d:8d:2c:54:
                    75:3c:fc:5b:a3:e3:88:c2:a6:66:cb:37:96:3e:c5:
                    32:58:50:ad:57:10:8c:2f:cf:33:17:55:55:05:38:
                    02:65:8b:5f:fd:cb:ae:91:f2:74:71:ad:b0:ed:d9:
                    39:27:1d:a8:49:4a:3f:6a:0e:e8:ef:f0:46:3d:a7:
                    b0:88:14:09:12:0c:37:a6:56:2f:9e:3d:8e:b3:25:
                    54:c7:32:f2:3c:45:5a:59:55:05:86:67:3c:52:09:
                    b4:7f:13:b3:8d:7b:9e:3b:05:86:76:34:e8:09:01:
                    b6:62:ee:e4:99:a9:37:3e:78:9c:b1:02:e5:43:45:
                    2f:a2:61:28:25:cf:66:2f:16:1c:6d:30:c8:65:26:
                    8d:0c:d6:f9:31:9b:67:b4:e3:7b:74:bb:bf:96:94:
                    2a:5c:3f:50:89:91:0f:c6:18:03:91:82:f5:08:0e:
                    b2:a6:43:40:c3:a1:3c:10:21:31:1e:f5:48:d6:ef:
                    e4:5c:32:e2:e6:9e:71:b1:ff:f4:5d:0c:b5:a6:44:
                    b1:cd:4b:fe:f6:25:c6:67:47:1a:3d:9e:a3:c1:00:
                    cd:99:a4:bb:f8:50:54:65:f4:ca:d0:05:67:91:27:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:58:5D:FB:3E:D8:BF:AB:A7:34:9B:AA:F0:F4:F4:D2:79:66:66
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139342e3137362e302f32302d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:2a:f7:f2:89:16:9a:cd:13:d2:db:45:9d:70:94:1c:73:
         49:6e:91:41:e1:c7:61:63:c6:34:d6:6e:4d:70:4a:97:7a:23:
         73:b5:03:5d:4d:4c:84:66:66:26:45:3a:f4:e4:50:e8:70:fd:
         8b:e0:c6:11:77:9c:9f:f9:8b:69:15:29:37:21:c9:5d:3c:be:
         09:71:12:89:d9:9f:8f:20:e0:d4:69:fb:65:b7:b5:f3:fd:be:
         99:40:b9:a5:af:2a:b1:5c:a9:99:40:a9:22:a6:92:d4:2a:7d:
         42:71:a3:5f:3e:43:e6:6b:0b:c3:bd:e2:94:d7:e9:a3:42:80:
         b7:33:b0:3b:4a:9f:25:88:4a:f0:60:84:6d:d6:d5:ae:ec:fb:
         5c:f3:8b:92:65:06:f7:01:4e:18:ba:50:ca:62:de:e7:97:c9:
         c8:04:94:c4:71:62:1f:a4:1b:e1:ea:73:31:c4:26:32:42:3d:
         20:0c:9b:3d:7e:c6:a4:14:6b:8e:40:b5:f1:56:3f:79:9d:2b:
         90:b8:70:8b:03:9a:87:b1:5a:36:af:b4:20:25:62:d1:37:87:
         27:d5:9d:d6:b3:77:a1:7c:07:41:9b:81:33:3a:5b:f5:b9:e1:
         15:e7:51:e0:80:d0:fb:b8:8e:b7:c0:7a:f8:6e:84:db:ea:d5:
         1e:fe:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org