Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233342e302f32342d3234203d3e20323730373238.roa
File:                     3138372e3130322e3233342e302f32342d3234203d3e20323730373238.roa (raw, json)
Hash identifier:          L3XbY5OgUoufHI9M198WwZSBXK2f2YQEAPB6IWSFObw=
Subject key identifier:   74:81:C2:C1:69:88:95:E7:38:CF:3C:D1:36:BC:6F:4C:7B:F4:47:D2
Certificate issuer:       /CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
Certificate serial:       34738A40DB2618638B1586A052ABF96293F71E79
Authority key identifier: EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233342e302f32342d3234203d3e20323730373238.roa
Signing time:             Sun 01 Sep 2024 20:40:55 +0000
ROA not before:           Sun 01 Sep 2024 20:35:55 +0000
ROA not after:            Sun 31 Aug 2025 20:40:55 +0000
asID:                     270728
IP address blocks:        187.102.234.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:73:8a:40:db:26:18:63:8b:15:86:a0:52:ab:f9:62:93:f7:1e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
        Validity
            Not Before: Sep  1 20:35:55 2024 GMT
            Not After : Aug 31 20:40:55 2025 GMT
        Subject: CN=7481C2C1698895E738CF3CD136BC6F4C7BF447D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:e2:a5:f2:ea:24:94:72:52:8a:ed:34:1d:
                    67:42:dc:ea:e0:8e:57:6d:f8:cb:65:f1:87:41:ba:
                    b0:2c:3c:66:4f:24:14:e9:6a:9f:d7:56:e3:6b:2a:
                    11:0a:ec:fe:6e:92:3a:5f:91:77:f2:f7:8f:fe:d3:
                    b9:75:2a:72:28:49:7e:84:aa:7c:25:ce:6f:99:44:
                    d9:fb:4e:a0:0d:6f:7f:22:6a:a9:a6:71:8c:11:e4:
                    4b:9d:cf:71:49:04:1c:7a:79:67:1c:26:24:81:28:
                    3f:10:d8:f9:9a:f7:cc:66:8d:7f:bb:8d:04:2e:85:
                    82:ae:9f:b7:1a:40:d3:f9:a6:0b:8b:ee:d1:53:2d:
                    f7:83:cf:fc:40:75:84:d6:af:fb:53:5a:4e:8d:24:
                    28:c7:85:92:4b:38:72:d7:6f:cb:78:84:a4:c8:1c:
                    4c:59:4c:9d:f3:37:7d:00:97:93:f1:bb:25:0a:26:
                    e5:ae:46:8e:34:e6:6a:9a:8b:13:f2:01:7d:dd:8e:
                    a4:e4:fb:0f:2f:42:bb:6f:d8:0a:82:4c:af:e4:f2:
                    1c:e4:40:38:97:61:5a:55:05:d6:d4:02:94:28:e2:
                    4f:b7:f0:5d:56:9f:4b:46:7d:5a:fe:aa:5c:dd:27:
                    b1:cc:ce:a2:3b:f4:52:06:32:c9:51:ed:2e:6e:de:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:81:C2:C1:69:88:95:E7:38:CF:3C:D1:36:BC:6F:4C:7B:F4:47:D2
            X509v3 Authority Key Identifier:
                keyid:EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233342e302f32342d3234203d3e20323730373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:83:c1:21:b0:c3:f1:15:80:0a:82:4b:14:e3:f5:df:eb:4c:
         92:7b:70:43:fb:ec:19:84:7a:62:5c:4c:65:84:cc:0c:55:9d:
         82:06:78:a3:21:47:a1:1a:5f:50:a1:3c:12:fb:00:a1:ad:f2:
         d7:c3:e5:e5:9b:c4:53:8f:17:03:6e:ab:92:81:72:2b:23:a2:
         77:bd:10:cd:62:1f:39:15:e6:1c:3b:ff:5b:f8:f5:59:47:63:
         82:9b:fc:87:a2:74:62:6e:93:77:0f:1d:49:fc:ab:15:ac:ae:
         53:7b:59:34:13:33:62:81:9d:4f:23:40:d2:6f:c0:a6:50:4e:
         3f:e6:91:d4:b4:bc:f5:15:ed:13:ac:43:39:ae:73:bc:7e:35:
         11:ae:d2:58:ae:19:15:f2:7e:64:9a:7a:f2:cf:7d:9d:8e:1b:
         ec:26:a6:30:aa:19:f5:cd:ca:cb:4b:7d:7a:3c:21:5c:c6:40:
         d5:40:c3:ec:0f:be:dd:3b:18:ec:73:91:b8:f1:ea:db:d8:8c:
         fa:03:12:0d:94:37:46:f4:10:0d:4a:d1:e8:3a:9b:0e:6d:67:
         2a:1a:5d:93:2a:af:42:ee:c6:80:aa:f8:bc:5a:3c:3c:62:f5:
         eb:b5:58:d5:cf:a5:be:5e:ab:07:b1:57:a8:4d:1f:dd:0d:90:
         df:c5:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:04:15 2024 by rpki-client on console-ams.rpki-client.org