Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3138392e392e302e302f31362d3234203d3e203130393534.roa
File:                     3138392e392e302e302f31362d3234203d3e203130393534.roa (raw, json)
Hash identifier:          uB5+c/rFJ5q9IMJGJ7g19GviC+yZ9NXgfGXuPCdmOyM=
Subject key identifier:   69:40:0E:19:86:98:58:DA:2A:4A:D6:99:EC:9B:0C:3A:01:97:46:1F
Certificate issuer:       /CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
Certificate serial:       0CBC30B9D07A1587A6BA08F142D6DB59B9E2AB44
Authority key identifier: A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3138392e392e302e302f31362d3234203d3e203130393534.roa
Signing time:             Thu 04 Apr 2024 13:51:10 +0000
ROA not before:           Thu 04 Apr 2024 13:46:10 +0000
ROA not after:            Thu 03 Apr 2025 13:51:10 +0000
asID:                     10954
IP address blocks:        189.9.0.0/16 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bc:30:b9:d0:7a:15:87:a6:ba:08:f1:42:d6:db:59:b9:e2:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
        Validity
            Not Before: Apr  4 13:46:10 2024 GMT
            Not After : Apr  3 13:51:10 2025 GMT
        Subject: CN=69400E19869858DA2A4AD699EC9B0C3A0197461F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:56:e0:66:2e:4b:a5:76:bb:44:2b:b0:09:
                    5b:e7:93:d6:38:80:ed:01:0b:2d:1d:6a:f6:45:34:
                    c0:7a:0b:db:50:ec:40:77:d2:67:62:73:86:9c:b6:
                    09:b3:be:6d:34:b2:54:ce:2c:50:54:6e:5a:14:81:
                    b2:84:ef:7f:54:a3:80:61:14:01:4b:64:3c:94:21:
                    49:2f:7d:4b:94:cc:70:d7:3b:f4:35:e3:f7:6a:b8:
                    8d:2f:cc:d9:5d:21:1c:2a:1e:1c:91:1b:1b:d6:dc:
                    0c:73:ac:75:8c:f4:57:e9:20:8d:0c:0b:b4:f2:76:
                    28:6a:ba:c7:3c:d9:0d:8b:c6:66:6f:7d:af:ac:d2:
                    48:e6:f8:7c:09:d2:a6:44:71:59:f2:5c:2d:fa:3c:
                    e0:dd:e2:3f:df:be:24:8e:b8:b1:9e:98:6c:a0:72:
                    ab:22:09:b5:d7:76:d0:c2:b0:70:22:29:d4:df:5b:
                    94:66:9d:03:87:ca:b7:4e:9e:77:ad:9b:2a:b7:e3:
                    89:06:18:a9:47:63:f3:bd:9c:17:01:2b:4c:f5:6a:
                    19:c5:02:c0:23:d4:65:73:02:2d:30:b7:69:2c:65:
                    be:fa:0e:6d:87:0d:25:2c:90:04:c2:ba:31:e0:47:
                    0f:0c:77:c4:04:27:6a:1a:4e:33:3f:9f:79:af:32:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:40:0E:19:86:98:58:DA:2A:4A:D6:99:EC:9B:0C:3A:01:97:46:1F
            X509v3 Authority Key Identifier:
                keyid:A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3138392e392e302e302f31362d3234203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.9.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:a9:a0:96:5e:1a:9f:97:22:a6:54:3b:bb:c0:2a:75:b0:
         8a:f8:93:b8:ba:e1:91:d7:9b:ba:63:0e:f8:d8:e2:bd:ef:52:
         ca:60:6c:11:4a:22:37:ba:8a:bf:28:59:0e:a5:36:c5:dc:9e:
         d9:c9:4c:a9:a8:77:dd:6e:86:94:33:26:ff:3b:b1:c0:44:0a:
         07:0f:63:78:d7:ce:79:10:66:cc:fa:03:1e:af:73:93:c8:77:
         64:a4:69:a7:44:19:e9:47:2e:75:8c:1b:ae:38:54:21:a0:ca:
         76:6a:4c:6d:a7:6e:68:7e:28:de:0d:8c:f0:80:71:d5:65:43:
         1a:96:61:0f:0a:d1:e9:cb:da:a4:3d:68:3f:b2:a7:64:4d:50:
         fe:78:2d:68:f8:0f:66:59:a7:ed:6e:69:84:99:a9:84:3a:a0:
         1a:7f:ed:8d:8a:ea:3d:35:e5:60:2d:b5:b0:05:55:42:d2:a8:
         d4:bd:38:47:38:fe:d9:57:b4:4b:d1:97:b2:00:ca:30:dc:47:
         99:01:c5:95:d7:b8:c7:72:5e:fc:27:2d:bb:51:8b:c7:36:d6:
         62:e1:79:db:1b:94:10:33:cd:be:39:ae:42:c0:50:48:5e:64:
         ba:5c:09:48:ad:d8:71:66:3d:17:84:04:3a:f4:27:d3:f9:0e:
         56:94:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 19:30:28 2024 by rpki-client on console-fra.rpki-client.org