Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/3138312e3232342e37362e302f32322d3332203d3e20323636323238.roa
File:                     3138312e3232342e37362e302f32322d3332203d3e20323636323238.roa (raw, json)
Hash identifier:          2bDWhP4V7YhUPYV7DKiPlMH+7+fyl29JiWweo7W97dw=
Subject key identifier:   D0:D8:9B:29:F2:3A:1D:3E:4F:D0:29:C6:48:A5:5E:AE:20:C0:37:8E
Certificate issuer:       /CN=7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015
Certificate serial:       2CFAD517D85AF61BECBAE41D7392D031EA98D852
Authority key identifier: 7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/3138312e3232342e37362e302f32322d3332203d3e20323636323238.roa
Signing time:             Sat 02 Nov 2024 19:24:33 +0000
ROA not before:           Sat 02 Nov 2024 19:19:33 +0000
ROA not after:            Sat 01 Nov 2025 19:24:33 +0000
asID:                     266228
IP address blocks:        181.224.76.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fa:d5:17:d8:5a:f6:1b:ec:ba:e4:1d:73:92:d0:31:ea:98:d8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015
        Validity
            Not Before: Nov  2 19:19:33 2024 GMT
            Not After : Nov  1 19:24:33 2025 GMT
        Subject: CN=D0D89B29F23A1D3E4FD029C648A55EAE20C0378E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:d3:98:e1:86:fa:27:6c:17:d6:8a:60:49:
                    0a:52:e5:6d:94:81:f7:c6:ac:c0:68:30:d1:72:14:
                    89:90:ea:84:31:78:e6:f9:b0:2d:9e:61:55:6e:87:
                    26:8e:be:97:68:57:68:47:8a:86:df:9c:bc:68:2f:
                    1b:4d:9c:25:ee:5c:0d:ac:b7:38:32:ed:b1:48:3c:
                    4c:73:60:ae:81:a1:1c:98:ec:41:fb:d3:af:09:9a:
                    3e:c6:3f:16:9a:8a:bc:e1:d0:b2:9f:d0:56:41:97:
                    a3:40:7c:e7:25:c6:04:3d:a5:75:ab:8a:9e:0f:e6:
                    0e:ad:94:ad:6f:ca:4c:95:52:00:da:50:99:b7:12:
                    18:02:24:cf:7c:dd:4e:1c:08:9d:b2:23:b1:98:ae:
                    8d:e0:bc:e1:ed:76:f4:d0:ea:d6:39:72:e1:3c:37:
                    63:df:53:47:95:8f:37:56:a6:b8:8a:97:ae:c5:3c:
                    82:ac:b9:11:cc:1f:ff:1b:7f:68:51:9c:9b:37:f5:
                    63:04:8c:f8:14:de:b2:48:d2:13:1f:61:eb:49:8d:
                    50:be:58:01:d6:20:21:41:92:a6:73:c3:95:8b:0e:
                    ba:6b:e9:ad:d4:46:ff:17:03:17:fe:e4:6c:a8:2d:
                    4d:95:8f:67:1f:6d:a7:72:c3:ec:dd:32:20:03:ef:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D8:9B:29:F2:3A:1D:3E:4F:D0:29:C6:48:A5:5E:AE:20:C0:37:8E
            X509v3 Authority Key Identifier:
                keyid:7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/3138312e3232342e37362e302f32322d3332203d3e20323636323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:c7:7e:58:28:09:df:d7:23:27:15:23:42:9a:2d:69:09:
         05:b1:cd:9e:bd:fa:f7:30:d5:79:37:1e:68:17:94:72:0c:2f:
         a3:32:e1:eb:f2:ad:70:2d:a0:8a:cf:df:99:0b:da:43:aa:13:
         95:86:68:d6:89:41:a8:f7:8e:4c:b2:4d:52:04:00:1c:27:b1:
         ec:02:47:87:a7:c0:f0:12:88:22:1b:31:1d:8c:5e:bd:3f:80:
         86:df:40:4c:48:49:8c:7b:c7:06:ef:cd:3a:8c:0e:36:0e:b5:
         1a:b6:70:02:cb:2d:d3:e0:3e:57:ab:9b:12:e4:da:af:f4:25:
         d7:26:92:eb:31:da:77:51:78:70:50:aa:5f:51:02:a5:dd:d7:
         a1:4e:4b:46:df:7d:65:60:80:07:4a:8b:4e:27:9b:dd:89:da:
         d6:64:cc:37:5c:8f:47:07:3f:e7:95:ec:c6:c3:d6:e4:b0:db:
         8e:ce:08:ae:e2:48:e2:d8:a9:5d:18:c3:f1:67:29:51:6d:c3:
         45:38:a8:1a:5f:52:a9:dd:cf:63:66:23:7b:ad:d7:92:64:0d:
         35:6a:44:1d:26:a0:0a:38:66:31:20:4a:b7:26:89:84:03:82:
         91:42:37:a9:c7:41:af:e6:6a:a5:46:50:0c:4f:16:73:5b:66:
         1f:a4:bd:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULPrVF9ha9hvsuuQdc5LQMeqY2FIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EzQkMyRURCMTE0Q0VEQkQyMDMxRkUwQ0Q3NTcxN0Yz
MUZGMDAxNTAeFw0yNDExMDIxOTE5MzNaFw0yNTExMDExOTI0MzNaMDMxMTAvBgNV
BAMTKEQwRDg5QjI5RjIzQTFEM0U0RkQwMjlDNjQ4QTU1RUFFMjBDMDM3OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHNNOY4Yb6J2wX1opgSQpS5W2U
gffGrMBoMNFyFImQ6oQxeOb5sC2eYVVuhyaOvpdoV2hHiobfnLxoLxtNnCXuXA2s
tzgy7bFIPExzYK6BoRyY7EH7068Jmj7GPxaairzh0LKf0FZBl6NAfOclxgQ9pXWr
ip4P5g6tlK1vykyVUgDaUJm3EhgCJM983U4cCJ2yI7GYro3gvOHtdvTQ6tY5cuE8
N2PfU0eVjzdWpriKl67FPIKsuRHMH/8bf2hRnJs39WMEjPgU3rJI0hMfYetJjVC+
WAHWICFBkqZzw5WLDrpr6a3URv8XAxf+5GyoLU2Vj2cfbadyw+zdMiAD7ywJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0NibKfI6HT5P0CnGSKVeriDAN44wHwYDVR0j
BBgwFoAUejvC7bEUztvSAx/gzXVxfzH/ABUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ244dTVuU1JtNm9TdVZObmtKZ2hZQmNyWURac0JnYktDNENSWHNTU28y
dzkvMC83QTNCQzJFREIxMTRDRURCRDIwMzFGRTBDRDc1NzE3RjMxRkYwMDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBM0JDMkVEQjExNENFREJE
MjAzMUZFMENENzU3MTdGMzFGRjAwMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NuOHU1blNSbTZvU3VWTm5rSmdoWUJjcllEWnNCZ2JLQzRDUlhzU1NvMnc5LzAv
MzEzODMxMmUzMjMyMzQyZTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMjMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK14EwwDQYJKoZIhvcNAQELBQADggEBAF2ox35Y
KAnf1yMnFSNCmi1pCQWxzZ69+vcw1Xk3HmgXlHIML6My4evyrXAtoIrP35kL2kOq
E5WGaNaJQaj3jkyyTVIEABwnsewCR4enwPASiCIbMR2MXr0/gIbfQExISYx7xwbv
zTqMDjYOtRq2cALLLdPgPlermxLk2q/0Jdcmkusx2ndReHBQql9RAqXd16FOS0bf
fWVggAdKi04nm92J2tZkzDdcj0cHP+eV7MbD1uSw247OCK7iSOLYqV0Yw/FnKVFt
w0U4qBpfUqndz2NmI3ut15JkDTVqRB0moAo4ZjEgSrcmiYQDgpFCN6nHQa/maqVG
UAxPFnNbZh+kvVo=
-----END CERTIFICATE-----
Generated at Sun Nov 3 22:07:16 2024 by rpki-client on console-ams.rpki-client.org