Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32342d3234203d3e20323730363038.roa
File:                     3138362e3231392e3233322e302f32342d3234203d3e20323730363038.roa (raw, json)
Hash identifier:          tEqdtiMWy8tj/RvBkKR5BLYUe8RZypT4/TUkkkxRdA8=
Subject key identifier:   13:C5:33:B0:49:C2:09:25:64:09:C2:83:88:4C:41:43:DB:3F:53:88
Certificate issuer:       /CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
Certificate serial:       46B97FEB9527A7F6D94FEAA09B4B0C5DB01A5B0E
Authority key identifier: 7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32342d3234203d3e20323730363038.roa
Signing time:             Tue 20 Aug 2024 14:00:02 +0000
ROA not before:           Tue 20 Aug 2024 13:55:02 +0000
ROA not after:            Tue 19 Aug 2025 14:00:02 +0000
asID:                     270608
IP address blocks:        186.219.232.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:7f:eb:95:27:a7:f6:d9:4f:ea:a0:9b:4b:0c:5d:b0:1a:5b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
        Validity
            Not Before: Aug 20 13:55:02 2024 GMT
            Not After : Aug 19 14:00:02 2025 GMT
        Subject: CN=13C533B049C209256409C283884C4143DB3F5388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:23:c2:d6:2f:58:bb:fc:6f:8b:d3:4e:25:
                    f4:8d:a3:a0:5b:4e:69:ee:15:38:72:24:86:7a:0b:
                    20:ae:19:84:28:26:6b:e2:03:16:05:6b:86:82:c3:
                    2f:0a:5d:95:d7:f2:b6:f3:10:6e:b0:67:dd:f8:07:
                    33:2d:18:00:3d:cd:65:7b:84:cd:0c:02:36:ff:25:
                    4c:4b:7b:39:3f:62:02:8f:78:75:0c:b1:95:f1:47:
                    9c:a4:7c:9b:ad:c5:13:75:5a:28:0e:64:92:a9:90:
                    03:e7:e2:0d:47:6a:21:d3:3a:a2:2a:59:05:de:a1:
                    a6:b0:b3:15:0e:ad:23:ae:47:14:d0:a1:c3:96:79:
                    cf:f4:f5:58:cb:e9:1a:a7:db:4b:8b:e4:1c:d7:ae:
                    8c:bf:3b:4b:bd:08:1a:fd:4b:34:20:d1:d4:d5:e4:
                    49:6c:6c:64:5e:3f:70:cd:67:67:43:67:d4:c9:e0:
                    5b:00:97:7f:23:53:c4:82:e4:77:84:70:93:21:e1:
                    c1:04:1d:f9:99:fd:2d:26:cf:e9:18:be:8a:b7:4f:
                    99:bf:4d:90:82:95:67:81:7f:d6:35:bb:b6:7c:81:
                    2e:0b:d7:c5:c2:c3:81:aa:0c:b4:60:0a:38:fb:a4:
                    da:10:1d:e5:75:74:8d:10:e7:a5:6e:f8:ff:e7:eb:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C5:33:B0:49:C2:09:25:64:09:C2:83:88:4C:41:43:DB:3F:53:88
            X509v3 Authority Key Identifier:
                keyid:7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32342d3234203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:62:a8:1b:05:6a:e7:47:67:23:e2:07:2d:f9:92:0d:b5:99:
         ff:02:a2:91:fd:00:2f:d1:f4:07:29:00:3e:de:56:44:6d:5e:
         72:29:08:96:71:96:ea:20:94:4e:cf:7d:01:0e:e0:0a:ff:5b:
         74:61:85:63:eb:6f:2a:59:7f:86:1c:e7:e4:6f:00:f8:2b:c5:
         3a:63:44:57:4f:34:2f:b4:8e:b3:c0:bb:ee:85:e1:c9:b8:d7:
         40:26:61:8b:32:25:c5:50:4e:9e:d7:92:cd:78:b4:67:54:02:
         50:41:15:d4:76:c8:98:ce:0a:53:59:79:c1:24:80:d3:97:ad:
         0b:34:6a:05:d8:7b:7b:6a:a9:a1:c0:fb:5b:7d:fb:63:3b:42:
         93:45:b2:be:ec:d8:4a:49:bd:a1:14:1d:ec:e1:8d:aa:c9:b0:
         94:61:06:f6:3b:2a:43:36:9c:fa:c9:20:8a:f5:0d:d7:c4:0f:
         86:c8:b2:6d:f5:1b:84:33:2e:e8:33:a3:68:ef:72:13:ea:f9:
         db:e3:2b:ba:57:c5:27:1c:ef:0b:d4:9d:5b:a4:96:50:2a:6d:
         50:86:ac:9c:1c:8d:09:75:ef:8c:e8:9a:3c:4b:11:3b:98:66:
         cf:69:05:1a:32:4a:ae:c6:f0:62:4e:7d:12:8b:5d:0b:b9:8e:
         b9:e2:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org