Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/3139302e38392e3232382e302f32322d3234203d3e20323730343132.roa
File:                     3139302e38392e3232382e302f32322d3234203d3e20323730343132.roa (raw, json)
Hash identifier:          6GcD/rgvOnGlhKS5KifSGlGzPlg9F645ATk+Qgqq7pE=
Subject key identifier:   4D:70:1B:DD:BC:B9:22:97:A7:41:EC:89:63:99:5D:5B:80:5A:60:07
Certificate issuer:       /CN=8D7F98E3C24BD49979D9F15D3DF945D2CC327065
Certificate serial:       7FF187CA623F27C40E6DED972A3799AF7454EC80
Authority key identifier: 8D:7F:98:E3:C2:4B:D4:99:79:D9:F1:5D:3D:F9:45:D2:CC:32:70:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/3139302e38392e3232382e302f32322d3234203d3e20323730343132.roa
Signing time:             Tue 27 Aug 2024 20:15:39 +0000
ROA not before:           Tue 27 Aug 2024 20:10:39 +0000
ROA not after:            Tue 26 Aug 2025 20:15:39 +0000
asID:                     270412
IP address blocks:        190.89.228.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f1:87:ca:62:3f:27:c4:0e:6d:ed:97:2a:37:99:af:74:54:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D7F98E3C24BD49979D9F15D3DF945D2CC327065
        Validity
            Not Before: Aug 27 20:10:39 2024 GMT
            Not After : Aug 26 20:15:39 2025 GMT
        Subject: CN=4D701BDDBCB92297A741EC8963995D5B805A6007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:63:ed:86:6b:88:0b:96:a4:d2:57:81:bc:
                    e4:a7:6f:74:64:8f:6a:c2:05:ea:c1:d2:21:ef:a6:
                    a4:6f:19:00:36:3c:e1:8a:c7:8c:3d:2d:b1:ce:e1:
                    03:0d:65:55:ff:f9:78:52:08:d6:99:5b:2b:c6:6e:
                    19:12:3e:2e:61:fd:e5:1f:aa:ec:35:db:8b:83:ff:
                    8a:d3:ed:76:44:a8:84:84:9c:bf:fe:25:ba:91:b1:
                    f5:d5:04:43:6f:a2:c8:b7:e7:7e:b1:74:6a:e3:cb:
                    8d:f1:8f:7e:bc:05:68:9e:82:f7:8d:ea:47:d4:2d:
                    f2:cd:90:68:d0:09:56:05:be:64:51:96:fc:d4:bb:
                    b0:35:60:08:8b:14:47:14:0a:f7:e6:b2:49:8f:27:
                    ba:3c:fa:26:96:81:57:fd:81:85:72:59:59:b5:ed:
                    82:cd:1e:e0:b1:e7:78:9b:0c:f7:41:1d:28:c4:28:
                    71:b5:2d:15:cd:6c:4e:e5:6d:94:63:9a:a3:bf:96:
                    07:da:35:9d:3f:41:82:77:ce:d6:24:ad:de:f2:aa:
                    7d:b3:cc:92:9b:15:ad:af:d8:5b:02:d3:77:1f:18:
                    00:5a:ae:a1:88:9c:6b:82:32:a7:74:a8:45:c1:18:
                    ce:93:e8:ec:47:6b:2c:30:f9:13:09:5b:44:63:68:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:70:1B:DD:BC:B9:22:97:A7:41:EC:89:63:99:5D:5B:80:5A:60:07
            X509v3 Authority Key Identifier:
                keyid:8D:7F:98:E3:C2:4B:D4:99:79:D9:F1:5D:3D:F9:45:D2:CC:32:70:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/3139302e38392e3232382e302f32322d3234203d3e20323730343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:0c:71:10:30:8b:8c:b5:e6:56:40:0e:71:1b:8a:eb:23:61:
         d5:0c:58:20:93:6d:6f:48:5e:c7:a9:1b:b4:3d:da:7c:90:cf:
         60:86:26:c6:88:81:6c:00:67:9e:fa:31:34:53:b1:0d:14:39:
         ee:7e:aa:df:35:08:ab:d0:d8:b9:d0:cf:17:8a:22:32:31:8c:
         c5:84:5b:1a:72:ea:96:cd:a6:40:3d:d7:a3:8f:be:58:b7:77:
         60:4e:6f:c5:38:0a:bd:d0:0f:84:c0:90:2d:9f:e4:60:a9:50:
         4a:21:e4:6e:51:a1:5e:73:84:0e:b3:31:51:a6:6c:a2:ca:75:
         35:51:6d:77:e3:df:d1:32:eb:76:a9:b7:bf:bb:7a:62:9a:14:
         78:95:4d:6f:34:16:c7:a7:e3:c7:45:2d:25:16:c0:00:a7:ec:
         00:04:c7:0f:d7:93:a9:d1:b0:78:e2:13:7e:54:58:54:cf:97:
         1b:d3:84:c1:18:6a:f6:77:5a:3c:cd:5f:de:3f:a3:41:76:43:
         ce:b3:70:21:bf:3b:c8:1b:05:03:23:a4:0f:8d:f0:49:d4:6d:
         78:c9:e8:45:39:f1:a0:99:47:5f:aa:17:fb:d1:0d:02:80:e6:
         48:48:f3:6e:0a:3f:a1:17:2f:ec:eb:56:39:38:0d:bc:a7:98:
         30:99:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:23:17 2024 by rpki-client on console-fra.rpki-client.org