Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e322e302f32342d3234203d3e20323730333135.roa
File:                     3138392e3132362e322e302f32342d3234203d3e20323730333135.roa (raw, json)
Hash identifier:          SVAOXSSZ3Boypp/kshi+6qS6C0C/U2hwxsLy564o/fk=
Subject key identifier:   0D:5F:CB:A9:9C:F5:37:7A:E6:54:8C:F9:F0:EF:29:F5:C8:34:05:EB
Certificate issuer:       /CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Certificate serial:       391F8401EF351ECF0EC0FCD4EC3DEAE81413F1B6
Authority key identifier: E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e322e302f32342d3234203d3e20323730333135.roa
Signing time:             Wed 25 Sep 2024 15:13:12 +0000
ROA not before:           Wed 25 Sep 2024 15:08:12 +0000
ROA not after:            Wed 24 Sep 2025 15:13:12 +0000
asID:                     270315
IP address blocks:        189.126.2.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1f:84:01:ef:35:1e:cf:0e:c0:fc:d4:ec:3d:ea:e8:14:13:f1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
        Validity
            Not Before: Sep 25 15:08:12 2024 GMT
            Not After : Sep 24 15:13:12 2025 GMT
        Subject: CN=0D5FCBA99CF5377AE6548CF9F0EF29F5C83405EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:bb:ac:2f:0c:4a:56:3b:17:54:08:c4:a4:
                    dc:ae:6e:f0:60:7a:fd:f1:f8:2b:86:40:b4:47:f5:
                    26:b4:ef:65:5c:7b:2d:96:2e:37:a6:23:16:3d:d1:
                    5e:c3:eb:de:52:78:f1:56:99:94:a0:a2:11:65:5d:
                    24:62:08:b8:c6:69:f5:1c:7b:31:16:c0:7d:fa:d8:
                    f5:f5:1b:19:3d:1f:cc:cc:d8:af:f9:29:1c:10:7c:
                    4b:46:e5:07:4c:63:3a:8d:af:44:c6:32:91:fb:8a:
                    65:10:27:a2:b9:e4:10:ee:01:87:23:3a:1c:0e:25:
                    9c:e0:cd:df:73:02:e0:a7:4d:80:32:ba:da:2e:e6:
                    ef:c3:f3:28:2b:22:76:0e:5b:42:11:71:5f:f0:80:
                    83:ee:65:8e:17:b1:29:44:4e:75:0c:49:e3:97:fe:
                    5e:0b:03:bd:6d:d0:75:a0:6e:a2:2b:7a:fe:9b:62:
                    f6:0b:60:2d:2d:dc:6f:d3:ab:3f:0d:e1:fb:86:7f:
                    43:44:03:49:80:92:c0:57:68:b3:e1:bd:7d:55:e6:
                    d0:63:b7:c3:76:34:ae:ee:7f:75:3d:1a:db:aa:8a:
                    cb:7a:6e:8f:c8:f7:13:31:85:52:cb:4a:4f:31:e1:
                    15:3e:9e:67:e5:f0:e9:0d:61:7d:4a:55:df:1d:9a:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:CB:A9:9C:F5:37:7A:E6:54:8C:F9:F0:EF:29:F5:C8:34:05:EB
            X509v3 Authority Key Identifier:
                keyid:E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e322e302f32342d3234203d3e20323730333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:5e:35:b4:0d:67:06:f5:e7:23:de:59:45:17:89:66:aa:
         29:c4:b0:b8:72:a9:ec:f1:25:74:f0:10:e1:78:b8:30:17:31:
         6a:f3:88:77:d2:c2:d6:ff:e7:9e:65:45:f9:c0:fd:0a:92:61:
         46:a6:89:cb:6a:37:18:30:1a:50:1f:a6:d3:fa:ec:f0:19:4c:
         56:c8:8c:c7:1c:f3:e4:9b:f9:bb:24:5e:cd:62:30:a3:d9:a0:
         b2:0a:be:99:88:8e:9d:f7:58:33:13:92:41:ba:8e:45:e6:5b:
         8c:86:0c:f1:1f:d0:ef:23:01:d8:b0:3d:a7:ba:bc:97:31:76:
         0d:ef:21:3b:b6:c1:55:1e:a5:df:8c:02:28:e0:2c:45:79:ff:
         28:d0:9e:15:08:ba:df:d7:6d:39:34:90:4d:cd:bb:e3:a5:46:
         fc:16:ef:c0:66:5f:18:46:21:63:47:3e:dd:fa:62:87:3c:a7:
         f7:4d:2b:ae:eb:d8:b1:5d:d9:80:de:8e:94:a6:68:3c:cf:59:
         d2:c2:38:5d:f9:09:36:b3:d6:8f:67:c9:11:58:d5:96:d7:90:
         15:e7:09:b9:66:1e:33:b9:5b:b2:82:c4:8f:e0:3b:4e:a6:98:
         a7:67:40:23:35:f6:18:7f:db:41:24:70:4d:0a:ff:a6:9e:6a:
         f1:8f:3d:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOR+EAe81Hs8OwPzU7D3q6BQT8bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlGRDNDODZBRjNGMEM0QzNEMDk0MUI4Qzc0N0E0ODM1
QjhBNjI2MTAeFw0yNDA5MjUxNTA4MTJaFw0yNTA5MjQxNTEzMTJaMDMxMTAvBgNV
BAMTKDBENUZDQkE5OUNGNTM3N0FFNjU0OENGOUYwRUYyOUY1QzgzNDA1RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPa7usLwxKVjsXVAjEpNyubvBg
ev3x+CuGQLRH9Sa072Vcey2WLjemIxY90V7D695SePFWmZSgohFlXSRiCLjGafUc
ezEWwH362PX1Gxk9H8zM2K/5KRwQfEtG5QdMYzqNr0TGMpH7imUQJ6K55BDuAYcj
OhwOJZzgzd9zAuCnTYAyutou5u/D8ygrInYOW0IRcV/wgIPuZY4XsSlETnUMSeOX
/l4LA71t0HWgbqIrev6bYvYLYC0t3G/Tqz8N4fuGf0NEA0mAksBXaLPhvX1V5tBj
t8N2NK7uf3U9Gtuqist6bo/I9xMxhVLLSk8x4RU+nmfl8OkNYX1KVd8dmgJNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDV/LqZz1N3rmVIz58O8p9cg0BeswHwYDVR0j
BBgwFoAU6f08hq8/DEw9CUG4x0ekg1uKYmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHFGSnZjV01TdGR1WDlxOExHeWRlNUVkUUNXeEF1R2Z6MjJBOFN0cXNO
NTQvMC9FOUZEM0M4NkFGM0YwQzRDM0QwOTQxQjhDNzQ3QTQ4MzVCOEE2MjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5RkQzQzg2QUYzRjBDNEMz
RDA5NDFCOEM3NDdBNDgzNUI4QTYyNjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RxRkp2Y1dNU3RkdVg5cThMR3lkZTVFZFFDV3hBdUdmejIyQThTdHFzTjU0LzAv
MzEzODM5MmUzMTMyMzYyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvX4CMA0GCSqGSIb3DQEBCwUAA4IBAQAenF41tA1n
BvXnI95ZRReJZqopxLC4cqns8SV08BDheLgwFzFq84h30sLW/+eeZUX5wP0KkmFG
ponLajcYMBpQH6bT+uzwGUxWyIzHHPPkm/m7JF7NYjCj2aCyCr6ZiI6d91gzE5JB
uo5F5luMhgzxH9DvIwHYsD2nuryXMXYN7yE7tsFVHqXfjAIo4CxFef8o0J4VCLrf
1205NJBNzbvjpUb8Fu/AZl8YRiFjRz7d+mKHPKf3TSuu69ixXdmA3o6Upmg8z1nS
wjhd+Qk2s9aPZ8kRWNWW15AV5wm5Zh4zuVuygsSP4DtOppinZ0AjNfYYf9tBJHBN
Cv+mnmrxjz1R
-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:30 2024 by rpki-client on console-ams.rpki-client.org