Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138392e32382e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          i34IuvJs55L2EOPyEA7M/2LoRYX7W7h2SxvXDZ1ULWc=
Subject key identifier:   99:60:99:E8:B9:AF:A3:5A:28:22:D0:1A:25:04:9B:FF:A0:C3:77:AE
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       11901B6B904883714747A04CA698A73AC25E7AA0
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:47 +0000
ROA not before:           Tue 23 Jul 2024 11:33:47 +0000
ROA not after:            Tue 22 Jul 2025 11:38:47 +0000
asID:                     28669
IP address blocks:        189.28.144.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:90:1b:6b:90:48:83:71:47:47:a0:4c:a6:98:a7:3a:c2:5e:7a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:47 2024 GMT
            Not After : Jul 22 11:38:47 2025 GMT
        Subject: CN=996099E8B9AFA35A2822D01A25049BFFA0C377AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:0f:fb:d0:98:69:c9:11:69:c2:25:86:83:
                    aa:53:67:3c:83:63:f8:39:1a:66:b2:5c:1d:7b:84:
                    38:09:80:8e:1f:60:f5:2d:7d:36:ca:71:da:dd:f1:
                    b0:73:8c:67:66:55:d2:f5:a1:ce:fa:d0:e4:ba:65:
                    0f:8b:17:8e:9f:56:19:03:1a:ea:66:8e:82:34:31:
                    2b:cf:b9:60:9e:46:e0:25:b7:cf:dc:76:e0:f8:75:
                    8d:2d:83:cc:dd:dc:5c:6d:d8:6b:6d:52:da:3c:fb:
                    ba:56:6c:3c:0e:05:76:cc:0f:2b:c3:75:00:92:c7:
                    ba:83:59:77:69:b5:d3:bd:6d:55:93:e9:01:ad:bf:
                    7a:86:17:21:b9:89:35:2e:49:94:5f:18:60:50:fa:
                    76:ae:cd:f7:d1:50:ae:4b:e2:51:ed:5a:7d:56:f5:
                    ea:d6:e6:28:c3:f2:14:78:25:ed:8e:6b:1e:86:81:
                    7c:2b:33:32:d7:1c:ce:26:4d:6c:0c:d4:3c:c8:63:
                    62:a1:2b:8b:d1:60:b2:04:fc:68:3b:8e:75:63:53:
                    10:1d:8c:a8:c5:4b:cf:db:70:9f:0d:b1:3b:08:cc:
                    9f:b0:3c:46:16:ab:e4:0e:0d:0e:af:c0:43:bf:62:
                    83:6c:1f:09:24:ba:3d:68:33:95:e2:aa:33:ae:da:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:60:99:E8:B9:AF:A3:5A:28:22:D0:1A:25:04:9B:FF:A0:C3:77:AE
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:35:2f:99:99:6d:34:c2:7b:1f:2c:26:27:92:83:33:cf:13:
         d1:32:05:d7:d9:7c:b3:53:85:00:53:cf:ab:b1:94:dc:f9:4f:
         20:40:e5:68:49:c6:2f:83:a2:79:0c:5d:86:f0:03:04:ad:0a:
         30:7b:55:35:fa:e2:48:fc:88:70:7f:02:3a:7d:87:ed:22:86:
         52:f7:ef:4b:9f:14:bc:c3:d1:00:08:9f:2d:e3:8d:c7:58:14:
         49:d7:ce:d3:16:b6:9d:f2:a7:59:af:b1:bb:76:e0:bb:63:31:
         19:b9:82:bc:af:61:07:7b:bb:65:bc:6e:72:20:d5:19:c0:1d:
         80:70:a7:6f:77:3b:bc:c2:ea:37:de:66:bc:f4:2e:4f:ee:ca:
         9a:dc:c8:c0:d7:39:65:49:72:b8:ef:a5:8a:6c:f6:8f:30:a8:
         00:d6:76:b4:df:56:f0:aa:a8:cc:20:2b:e6:13:d8:92:9e:67:
         0d:9a:d0:cd:83:64:61:4b:91:90:ad:d9:07:d6:9b:b2:9f:e1:
         bd:5c:f3:7c:26:79:56:16:4e:7f:ce:11:83:35:ae:c3:7d:77:
         cb:6e:3b:51:63:5e:58:58:c7:e9:f2:97:c7:fb:6f:9a:a5:4c:
         7b:a8:13:23:27:6a:43:20:28:6c:65:ea:00:8c:7d:7d:e4:f2:
         99:bd:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org