Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32322d3232203d3e20323730363038.roa
File:                     3138362e3231392e3233322e302f32322d3232203d3e20323730363038.roa (raw, json)
Hash identifier:          OrYPbcv2Rd5+CmvlthY+ss1R5KbUShUj37TYNqJ1s64=
Subject key identifier:   6A:EC:A4:18:52:B9:C2:E5:64:82:B4:20:AC:43:00:62:12:D6:8A:E5
Certificate issuer:       /CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
Certificate serial:       4889AC7CC5EB76375A3EA0030ED2B8CAFEB11428
Authority key identifier: 7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32322d3232203d3e20323730363038.roa
Signing time:             Tue 20 Aug 2024 14:00:02 +0000
ROA not before:           Tue 20 Aug 2024 13:55:02 +0000
ROA not after:            Tue 19 Aug 2025 14:00:02 +0000
asID:                     270608
IP address blocks:        186.219.232.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:89:ac:7c:c5:eb:76:37:5a:3e:a0:03:0e:d2:b8:ca:fe:b1:14:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
        Validity
            Not Before: Aug 20 13:55:02 2024 GMT
            Not After : Aug 19 14:00:02 2025 GMT
        Subject: CN=6AECA41852B9C2E56482B420AC43006212D68AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:c8:c3:1a:8a:a5:d5:ea:38:f3:ec:80:38:
                    d9:53:3d:a5:04:76:2f:1f:20:ac:dd:c0:37:22:d5:
                    a0:2b:ed:84:7b:c0:a2:1b:65:ff:a5:87:30:64:44:
                    00:24:18:ec:de:3d:e3:58:c9:95:ea:29:9a:80:6b:
                    35:41:f3:41:e3:23:89:12:f3:e6:02:16:9b:52:c9:
                    9e:8a:e4:5a:b6:37:f4:71:19:e8:a8:4c:fa:92:34:
                    6f:18:16:22:d3:70:bd:aa:bb:bf:f4:26:a9:94:d6:
                    a9:c5:df:03:b1:4d:c7:60:04:52:bc:c9:85:2b:e7:
                    d9:e8:37:9e:24:a1:b1:bd:63:a4:60:53:8f:54:50:
                    f0:92:d7:23:07:a5:68:bf:9f:13:64:3f:df:03:0f:
                    c5:2d:24:dc:7a:3e:b8:89:31:99:43:d9:09:c2:0e:
                    11:d4:6f:ba:f7:4a:6f:2f:c5:ae:5d:28:69:e7:fe:
                    9a:bf:35:34:0f:de:ce:9d:cb:01:49:a5:94:6d:7a:
                    7b:a3:c1:92:71:13:31:90:79:85:ed:94:dd:9f:1d:
                    8f:a9:11:00:8e:87:43:2b:a7:4f:48:37:23:34:c6:
                    aa:ca:25:49:5d:b6:af:58:0a:89:3d:52:11:9e:74:
                    e2:e8:a4:cd:1e:38:7a:65:db:45:d1:38:dd:a3:88:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EC:A4:18:52:B9:C2:E5:64:82:B4:20:AC:43:00:62:12:D6:8A:E5
            X509v3 Authority Key Identifier:
                keyid:7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32322d3232203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:36:36:6e:0c:ec:19:ea:62:89:ae:c4:50:83:0f:bd:8d:1e:
         0c:60:78:65:8c:6c:51:d5:23:40:16:4d:39:c4:69:df:c4:96:
         d5:2e:84:95:57:fc:9c:49:7b:18:f7:cb:92:54:bf:d0:99:e0:
         44:aa:16:11:3a:5a:ba:3e:f1:47:9b:b6:e6:c7:30:32:ff:7a:
         48:e2:cb:e3:7c:51:98:20:59:dd:8d:ea:72:67:5a:9b:4e:ad:
         0c:f3:e8:47:d3:da:18:e3:4a:fd:bb:23:97:2e:f6:5d:7b:fd:
         2c:c8:85:85:cb:fb:75:57:8f:5f:68:6f:2f:99:72:9d:8e:17:
         81:50:b9:7e:a6:a8:6d:a7:cd:fa:26:89:94:50:38:12:94:c3:
         ad:8b:87:a1:67:60:37:ee:da:45:fc:f1:ff:a7:75:f6:93:c8:
         b3:9a:dd:27:d1:4e:8b:5a:29:8a:38:bd:f6:dc:e3:6e:ed:a2:
         fe:cf:15:bd:ff:b6:f3:3e:0a:e3:18:13:43:e3:1a:15:ae:b3:
         11:67:7a:23:5c:70:9b:af:a6:f0:62:91:e9:96:4c:ec:2d:b1:
         b3:17:f2:97:52:a7:c8:af:19:d6:57:5d:31:5a:72:26:bf:82:
         d0:ea:f5:7c:34:76:ee:8e:55:29:21:02:08:0f:a3:f5:ae:04:
         ff:52:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:00:42 2024 by rpki-client on console-ams.rpki-client.org