Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e362e302f32342d3234203d3e20323730343934.roa
File:                     32342e3135322e362e302f32342d3234203d3e20323730343934.roa (raw, json)
Hash identifier:          GOJQwr4AkBmSSuHenubfLsZGinMC1P9bn9T87nH24no=
Subject key identifier:   68:BA:83:0A:53:5A:14:EC:E3:8C:87:28:D2:8B:BA:D5:0B:9A:FF:0F
Certificate issuer:       /CN=92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686
Certificate serial:       05A221DE421B2633701E981A5C45D9B45CCF3E53
Authority key identifier: 92:C2:7D:71:FD:C3:A0:3B:05:0E:2F:DD:3E:DC:FA:11:F1:7B:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e362e302f32342d3234203d3e20323730343934.roa
Signing time:             Tue 27 Aug 2024 18:18:33 +0000
ROA not before:           Tue 27 Aug 2024 18:13:33 +0000
ROA not after:            Tue 26 Aug 2025 18:18:33 +0000
asID:                     270494
IP address blocks:        24.152.6.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a2:21:de:42:1b:26:33:70:1e:98:1a:5c:45:d9:b4:5c:cf:3e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686
        Validity
            Not Before: Aug 27 18:13:33 2024 GMT
            Not After : Aug 26 18:18:33 2025 GMT
        Subject: CN=68BA830A535A14ECE38C8728D28BBAD50B9AFF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:95:d5:9f:f5:fc:7d:fe:48:26:97:10:98:d0:
                    2d:ef:90:49:bb:e3:8f:ef:ed:33:b3:2a:93:84:c0:
                    0b:95:36:18:e2:16:f7:fa:db:4e:4c:39:44:81:47:
                    aa:6d:bc:16:08:c2:74:28:a5:19:40:fb:c3:d9:86:
                    f2:32:87:a5:d1:85:90:78:41:98:a5:84:d3:6c:17:
                    6d:84:cd:46:db:94:59:c4:a1:b9:c4:dd:73:b0:22:
                    35:b6:5b:d7:fb:cd:31:be:d5:88:26:2c:77:3d:88:
                    9b:e5:3f:19:a2:1c:6c:13:99:1c:5c:a0:fa:23:8a:
                    2b:41:ea:1a:6e:a0:ce:28:91:4f:9c:bc:62:d3:c4:
                    f7:6d:f5:88:b7:d7:f1:c5:9c:97:5f:d4:45:a9:99:
                    cd:2d:94:2f:13:bb:c8:a8:28:d1:3c:9c:19:4d:f4:
                    a5:9c:fe:7d:33:e9:28:5d:22:16:6d:45:5d:62:20:
                    8c:f3:56:52:01:51:b3:c1:e9:19:de:37:54:59:aa:
                    dc:99:b9:d6:8a:c2:6d:50:84:99:a1:f7:9e:03:b7:
                    49:a4:52:6e:bb:26:20:44:10:32:ce:77:49:20:66:
                    8a:1f:f8:54:a1:f7:d9:c7:25:c0:39:75:75:33:ce:
                    2d:65:8d:5c:40:26:b0:90:1c:af:0f:96:35:be:5d:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BA:83:0A:53:5A:14:EC:E3:8C:87:28:D2:8B:BA:D5:0B:9A:FF:0F
            X509v3 Authority Key Identifier:
                keyid:92:C2:7D:71:FD:C3:A0:3B:05:0E:2F:DD:3E:DC:FA:11:F1:7B:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e362e302f32342d3234203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:2b:4c:38:cb:6d:28:d9:19:d0:26:fc:22:e6:68:b5:f1:
         4d:a9:8e:35:b8:14:05:bd:33:bd:8f:2f:ab:5a:0e:c6:d0:6a:
         1b:3c:4a:e0:90:ee:99:ba:46:17:e2:e7:ea:7b:87:25:db:2a:
         81:11:d1:0f:e2:f0:13:17:d9:80:be:65:8c:fb:ef:b6:b5:c2:
         f9:69:03:54:0b:fc:04:b0:d8:e6:e2:c2:d2:15:ff:51:e3:4f:
         4b:7f:fc:36:42:c7:c9:04:67:90:16:6f:8a:34:9e:0d:5f:d2:
         25:86:74:ff:fa:8b:b2:20:9e:2c:88:cc:e4:f5:09:6f:c2:3e:
         42:f3:46:24:77:82:92:c0:43:4d:90:db:11:12:b9:75:da:a5:
         c0:02:30:89:7b:c5:20:c8:ba:0b:59:c7:ef:b8:ad:90:47:60:
         2e:7c:b0:e7:6b:1f:be:7c:9d:3a:5c:79:81:35:f5:e4:b0:32:
         7b:23:7e:a0:b2:1e:ab:ed:89:ab:8f:d5:3a:5b:37:97:06:c3:
         3a:93:9b:8c:41:12:0f:78:71:55:68:45:6a:7b:92:7b:4b:63:
         12:3d:3f:21:a9:8c:53:a2:db:f6:b9:e7:df:af:63:70:8c:82:
         ec:01:a3:bd:64:7a:a2:17:dc:ed:62:65:c4:d1:e4:e0:06:4a:
         f5:fc:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:07:56 2024 by rpki-client on console-fra.rpki-client.org