Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133322e302f32322d3232203d3e20323730333338.roa
File:                     3139302e3131322e3133322e302f32322d3232203d3e20323730333338.roa (raw, json)
Hash identifier:          hx9/ImAxcPtCiemKHDwYFsYlJdqhPWYOFeO0eJc2gVo=
Subject key identifier:   10:83:49:CE:B2:38:0E:B6:D4:59:C9:A0:EE:41:31:F7:B8:A6:54:20
Certificate issuer:       /CN=198A6D21600CF2DD4E43C384F7379E891DD16986
Certificate serial:       0E269590B1237C7E9998FD49EB516FD8582896EF
Authority key identifier: 19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133322e302f32322d3232203d3e20323730333338.roa
Signing time:             Thu 04 Apr 2024 04:18:03 +0000
ROA not before:           Thu 04 Apr 2024 04:13:03 +0000
ROA not after:            Thu 03 Apr 2025 04:18:03 +0000
asID:                     270338
IP address blocks:        190.112.132.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:26:95:90:b1:23:7c:7e:99:98:fd:49:eb:51:6f:d8:58:28:96:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198A6D21600CF2DD4E43C384F7379E891DD16986
        Validity
            Not Before: Apr  4 04:13:03 2024 GMT
            Not After : Apr  3 04:18:03 2025 GMT
        Subject: CN=108349CEB2380EB6D459C9A0EE4131F7B8A65420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:dd:f1:43:4d:cd:8d:90:3e:f6:8e:c0:56:
                    aa:e9:5f:ca:f2:d4:61:05:07:ac:e2:1d:d1:a3:a1:
                    43:e9:80:50:81:50:80:7b:b7:00:18:a4:08:8a:2c:
                    e0:e1:62:0d:9a:d0:7c:94:b6:14:5a:e1:23:fb:79:
                    75:d3:88:4f:25:1d:e1:07:31:97:94:b3:17:8c:d0:
                    d5:f3:aa:fa:8a:49:96:2d:87:9f:fe:0f:fa:a5:c6:
                    45:08:dd:e5:55:4a:e8:1c:67:86:b5:64:3a:0d:56:
                    6f:71:9c:97:fa:28:07:7a:9c:a8:ad:20:6d:49:31:
                    b9:95:1f:e6:17:9f:11:3d:92:ec:af:9f:f8:62:92:
                    67:45:ec:d9:12:c9:4f:2a:76:a8:7f:a4:cd:a9:cf:
                    03:86:8f:e8:60:83:b0:59:0b:85:5a:b3:3d:ac:c9:
                    af:de:50:6b:41:03:f3:50:84:82:b4:0a:80:05:e1:
                    f2:17:75:8c:0c:75:1a:d6:8f:e6:93:39:ae:4d:19:
                    f8:15:02:c1:14:1d:b6:c9:75:62:bc:d0:33:d2:36:
                    70:05:d8:ce:67:4f:7d:dd:8a:42:a4:05:c4:53:be:
                    3d:8a:a9:ba:f7:28:8a:ba:77:f5:83:bf:a9:e2:9c:
                    77:1f:80:ad:f3:8d:a6:7a:09:8c:cd:63:b3:72:f6:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:83:49:CE:B2:38:0E:B6:D4:59:C9:A0:EE:41:31:F7:B8:A6:54:20
            X509v3 Authority Key Identifier:
                keyid:19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/198A6D21600CF2DD4E43C384F7379E891DD16986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/3139302e3131322e3133322e302f32322d3232203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:c2:22:35:03:d9:3d:5a:06:4b:04:43:5d:c9:f9:a3:96:f3:
         a2:08:6b:7d:94:43:e6:8e:ba:ee:13:d3:5c:53:34:7c:b6:c9:
         b2:8f:22:e4:d2:8b:18:55:de:6f:91:2e:1f:bf:eb:17:c3:50:
         2b:d2:f5:48:11:93:3a:33:82:1b:19:a0:65:32:d8:a4:90:b2:
         c8:af:37:c1:bd:69:d5:83:ed:eb:ee:55:1c:bf:e9:e7:f6:46:
         f9:46:b2:63:5f:2b:ad:62:18:dc:44:81:c6:9b:24:cc:54:67:
         1f:fe:6e:77:6b:41:c6:7a:b8:f3:94:b7:76:22:82:3d:78:bc:
         55:a2:4e:98:72:3f:68:5c:de:fa:94:02:04:19:e3:3b:71:c4:
         a9:3e:b3:54:16:87:e0:f9:ed:be:7e:67:d2:76:87:33:8d:4e:
         99:38:0f:3e:ef:19:a1:c5:29:dc:2c:9d:d9:78:ed:8f:13:44:
         bd:7f:d1:db:06:24:81:b7:20:b5:2f:fc:8f:cf:55:07:64:e1:
         5b:b6:d7:ba:40:11:6b:54:ab:a3:ba:c8:93:6d:a6:91:8a:09:
         3f:80:10:c0:e9:b0:3a:7d:9e:1b:5b:e4:06:83:f2:16:36:91:
         98:75:6b:45:ea:1d:85:dd:c1:e2:0f:56:3e:8f:0d:e4:fe:8f:
         09:7e:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 10:00:54 2024 by rpki-client on console-ams.rpki-client.org