Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e372e302f32342d3234203d3e20323730343934.roa
File:                     32342e3135322e372e302f32342d3234203d3e20323730343934.roa (raw, json)
Hash identifier:          HLReVOZ5MbgWCbWhzKpcQzSLp2C9BSYSYLQxvJwiKok=
Subject key identifier:   79:D0:7D:FE:8F:D5:01:02:58:E7:6E:0C:08:7D:C9:5F:BB:BB:44:F1
Certificate issuer:       /CN=92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686
Certificate serial:       653A8CB8CB0EB1874513B086D7F7CDEDF4D8AE91
Authority key identifier: 92:C2:7D:71:FD:C3:A0:3B:05:0E:2F:DD:3E:DC:FA:11:F1:7B:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e372e302f32342d3234203d3e20323730343934.roa
Signing time:             Tue 27 Aug 2024 18:18:33 +0000
ROA not before:           Tue 27 Aug 2024 18:13:33 +0000
ROA not after:            Tue 26 Aug 2025 18:18:33 +0000
asID:                     270494
IP address blocks:        24.152.7.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3a:8c:b8:cb:0e:b1:87:45:13:b0:86:d7:f7:cd:ed:f4:d8:ae:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686
        Validity
            Not Before: Aug 27 18:13:33 2024 GMT
            Not After : Aug 26 18:18:33 2025 GMT
        Subject: CN=79D07DFE8FD5010258E76E0C087DC95FBBBB44F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f6:be:e5:9c:18:e4:94:e5:bd:6b:41:11:a0:
                    95:2a:26:d2:2b:19:c9:d7:ab:84:ca:1a:c1:b1:8b:
                    3c:69:f4:d6:c0:c2:30:84:92:4e:1d:96:ab:19:ec:
                    e4:a2:32:78:ca:e8:b5:46:17:f2:34:70:e2:7c:42:
                    27:79:2f:e5:1f:53:d6:25:73:23:cf:a8:5b:e9:f2:
                    26:e3:35:c2:78:00:6b:43:e0:f8:da:dc:a2:4d:54:
                    a8:b6:b3:b8:50:a3:ef:02:b8:06:a7:27:c0:fb:d8:
                    34:ed:0e:b2:8d:19:c1:dc:1b:5e:d2:d6:55:76:c9:
                    1c:31:63:be:8b:72:49:bd:1b:b3:e1:c6:fc:1b:c1:
                    db:de:da:eb:82:c7:df:3b:e5:7e:f8:34:a2:86:cc:
                    b5:ce:a8:ca:bd:4f:ef:69:82:11:18:e8:2f:50:74:
                    6a:1a:68:df:72:2c:af:e5:88:c5:c1:85:6d:14:c0:
                    3c:b3:99:f0:02:5f:4c:7d:75:22:4d:28:45:62:e7:
                    a3:85:97:1c:81:f6:23:c5:03:b7:9d:38:a0:78:85:
                    18:75:33:f4:90:76:3e:a0:85:b8:56:90:4d:1a:71:
                    71:7d:9f:82:ff:b0:e4:b0:16:a9:a4:e0:6f:51:73:
                    d6:16:89:0b:79:b8:fd:3a:ca:32:14:69:8f:75:83:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D0:7D:FE:8F:D5:01:02:58:E7:6E:0C:08:7D:C9:5F:BB:BB:44:F1
            X509v3 Authority Key Identifier:
                keyid:92:C2:7D:71:FD:C3:A0:3B:05:0E:2F:DD:3E:DC:FA:11:F1:7B:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e372e302f32342d3234203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:58:87:17:6c:07:b5:cb:8e:d4:ca:99:cd:c4:2d:da:a5:
         2a:25:e0:32:27:6f:85:32:61:20:1b:c2:47:06:70:ef:5d:09:
         a7:98:cc:e2:00:76:e7:81:cd:f3:c6:9c:02:46:ab:c0:f9:59:
         8e:8a:f3:c0:06:68:8c:bc:66:e2:91:d6:8a:c4:1a:c2:65:9b:
         ac:b4:5b:88:ed:be:1a:43:12:eb:0f:66:b0:17:4e:cb:b1:63:
         0b:2c:f4:e4:09:08:9b:4b:46:ac:cd:ff:d9:2a:90:18:72:7c:
         29:1d:5b:dd:91:a7:ce:bc:86:ae:73:b2:d4:3a:8b:3e:9b:53:
         d1:39:4f:55:c5:97:18:e4:47:ef:5c:bd:88:b7:37:54:00:3b:
         80:fb:07:52:9f:a8:c8:45:a4:da:f3:09:59:34:79:5c:37:22:
         a0:cf:78:ec:49:3b:15:af:8b:2f:d2:36:21:34:f3:d5:c6:1e:
         a4:28:96:e1:3a:98:34:17:c4:59:39:ad:02:10:04:04:57:76:
         29:d2:c6:0c:f1:23:71:40:95:f8:db:63:da:15:9c:b1:a5:f0:
         b7:30:64:da:eb:3d:d7:69:b5:a5:01:75:e7:7e:9a:ce:2b:7e:
         f4:ac:86:1e:b0:30:78:7e:80:68:78:83:98:98:38:f8:fa:08:
         db:22:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:46:23 2024 by rpki-client on console-ams.rpki-client.org