Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/3138392e3132372e3135322e302f32322d3332203d3e20323730373036.roa
File:                     3138392e3132372e3135322e302f32322d3332203d3e20323730373036.roa (raw, json)
Hash identifier:          qdmseH626w22NWfdH/4+fk9ed+gPtoPCnwBnNJ7alWA=
Subject key identifier:   29:19:EA:DC:F6:70:49:5D:11:EF:78:67:13:30:8B:CD:46:A8:18:97
Certificate issuer:       /CN=693F6FE5908AC83D8E07CCD94B49D5502D3FE383
Certificate serial:       13EF6EF232BBD61D6B72196F63BA413D84BDCB13
Authority key identifier: 69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/3138392e3132372e3135322e302f32322d3332203d3e20323730373036.roa
Signing time:             Mon 05 Aug 2024 02:03:03 +0000
ROA not before:           Mon 05 Aug 2024 01:58:03 +0000
ROA not after:            Mon 04 Aug 2025 02:03:03 +0000
asID:                     270706
IP address blocks:        189.127.152.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ef:6e:f2:32:bb:d6:1d:6b:72:19:6f:63:ba:41:3d:84:bd:cb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693F6FE5908AC83D8E07CCD94B49D5502D3FE383
        Validity
            Not Before: Aug  5 01:58:03 2024 GMT
            Not After : Aug  4 02:03:03 2025 GMT
        Subject: CN=2919EADCF670495D11EF786713308BCD46A81897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:86:28:4f:f7:00:00:cd:c9:0f:ed:c3:32:
                    aa:fa:78:e6:8e:c7:c4:f1:40:e2:37:84:ba:de:58:
                    70:f8:57:c9:8d:34:18:25:ba:c1:e4:32:76:08:b9:
                    6c:52:7f:ab:42:d2:0d:22:2b:22:92:1e:8b:0c:81:
                    fe:c7:28:0c:57:3d:bb:68:2b:71:c8:50:0c:8e:d0:
                    b4:22:bc:ee:ad:e3:0a:10:3c:9c:88:63:20:38:22:
                    cb:2b:aa:2d:37:84:24:8e:75:47:99:c9:72:72:e9:
                    ea:29:b0:63:44:04:dc:94:b8:5c:ea:5a:85:0e:65:
                    62:78:8e:d4:29:ac:d2:e0:81:3a:47:3a:e0:40:b2:
                    f0:39:58:76:76:c0:12:f8:47:5a:74:e2:c8:38:2c:
                    46:d4:13:4e:f0:f0:7e:ba:e0:4d:fe:7d:c3:8c:a9:
                    cd:db:8e:b4:a7:6d:f8:e0:f2:6d:b0:b7:9a:15:0f:
                    4f:4e:46:19:de:a2:02:6b:6e:a2:20:11:5a:17:1e:
                    ef:05:cc:0e:dd:fa:d3:c0:04:1d:8f:01:07:67:4a:
                    04:5e:9a:9b:05:ea:95:93:4c:22:be:24:9d:2a:8e:
                    93:f7:88:1c:e1:21:27:0b:45:d4:01:8d:99:d7:e3:
                    3a:89:4e:9b:c4:ab:b6:9c:6b:98:5e:84:dd:9f:e7:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:19:EA:DC:F6:70:49:5D:11:EF:78:67:13:30:8B:CD:46:A8:18:97
            X509v3 Authority Key Identifier:
                keyid:69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/3138392e3132372e3135322e302f32322d3332203d3e20323730373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:57:33:b5:c1:dd:b6:1d:54:63:a0:42:c8:3d:d2:8b:f1:b0:
         87:b2:2b:d3:d0:6b:f6:79:62:9b:92:43:e8:40:e6:36:3a:80:
         42:0c:09:3f:60:f2:64:d6:fa:ee:31:19:26:4d:df:38:09:03:
         5f:4b:8f:a3:4d:12:45:b8:a6:ba:6d:2a:37:85:02:bc:36:da:
         68:5c:c4:80:13:f7:4d:1d:e1:2d:12:68:39:28:2d:72:61:ff:
         21:43:d8:e9:47:c1:8a:ac:4d:95:f9:a3:8a:ca:d6:0e:8c:00:
         59:50:ab:7d:62:f0:26:64:c0:6a:3a:62:b0:c8:2f:07:bc:17:
         b2:b9:f2:ad:9b:37:c1:85:04:cf:32:51:4e:c2:02:3f:00:cd:
         be:5f:e4:5d:c7:9d:b1:0c:48:28:bc:79:84:34:09:b0:88:a6:
         24:5a:4c:bb:89:36:9d:c8:c1:db:18:0a:5c:d7:7b:93:24:d2:
         81:96:1e:cd:d4:82:af:4d:af:32:48:9e:3c:3b:06:60:72:f8:
         32:38:3c:0c:ea:7f:94:3b:1d:35:8e:9f:92:be:9f:b8:98:58:
         e8:fb:6c:1a:a6:83:bf:67:9f:50:1c:22:34:e8:78:d0:28:72:
         38:e2:0f:65:6d:4c:f0:d0:f0:cc:9c:04:15:4d:e0:d1:ab:14:
         73:ae:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 17:39:36 2024 by rpki-client on console-ams.rpki-client.org