Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa
File:                     3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa (raw, json)
Hash identifier:          24csj9PZLDk/Gv73WiQU53YI0yPY/rw7T1tURmmRKno=
Subject key identifier:   26:EB:6A:DA:6C:E0:11:22:21:37:C5:FA:0A:E0:D2:B9:AF:00:E3:AB
Certificate issuer:       /CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
Certificate serial:       4B04DC45F0075304FF1D7E9F731E0EFEFE27CA39
Authority key identifier: 7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa
Signing time:             Tue 20 Aug 2024 14:00:02 +0000
ROA not before:           Tue 20 Aug 2024 13:55:02 +0000
ROA not after:            Tue 19 Aug 2025 14:00:02 +0000
asID:                     270608
IP address blocks:        186.219.234.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:04:dc:45:f0:07:53:04:ff:1d:7e:9f:73:1e:0e:fe:fe:27:ca:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
        Validity
            Not Before: Aug 20 13:55:02 2024 GMT
            Not After : Aug 19 14:00:02 2025 GMT
        Subject: CN=26EB6ADA6CE011222137C5FA0AE0D2B9AF00E3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:f9:9c:51:e2:b5:d8:ae:70:9a:6c:02:68:
                    c0:ba:b9:6a:16:8f:7a:58:83:52:76:dc:5a:99:11:
                    30:35:92:f2:63:0a:f2:11:fc:a0:60:ab:c1:77:69:
                    fc:25:fa:4d:ef:db:f8:6b:4b:05:b9:df:c5:ed:af:
                    8c:2e:a7:c7:9d:fc:a2:59:fc:f6:de:7a:d6:d1:5e:
                    e4:ae:f5:b6:5c:e6:9c:61:00:e0:16:02:ee:00:b8:
                    1e:a7:94:08:1e:f4:95:34:10:2c:2e:fb:e6:d6:33:
                    21:b3:23:24:08:f8:75:27:ae:56:c9:1d:e8:dd:02:
                    96:6c:39:59:c9:de:75:bf:cd:38:3f:25:bf:b2:52:
                    a7:b6:57:bd:3c:0b:e1:25:a3:6e:35:ab:b7:8d:ab:
                    6a:bc:ad:0e:80:22:df:62:1a:ad:78:15:01:fb:91:
                    9b:26:67:a3:33:18:79:55:9e:11:5d:fd:fc:ee:b2:
                    24:1f:d6:18:55:46:4e:85:e6:11:2b:47:7c:17:1b:
                    2c:67:4d:a8:77:e2:d2:fe:f5:5c:1b:03:cc:8d:8b:
                    1b:2e:88:a2:5f:c2:f1:50:ce:5c:08:19:c0:48:67:
                    a4:9b:e8:ea:d5:af:14:12:73:3c:d5:5e:e5:df:4f:
                    95:54:91:3d:bd:e7:8a:98:81:ca:24:94:7f:5c:f7:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EB:6A:DA:6C:E0:11:22:21:37:C5:FA:0A:E0:D2:B9:AF:00:E3:AB
            X509v3 Authority Key Identifier:
                keyid:7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:6e:75:0a:6d:50:ee:2a:cf:c8:20:22:8b:82:f8:08:8e:
         88:b8:37:61:1c:21:f8:5a:cf:4a:7e:05:8e:48:55:52:1d:18:
         52:db:3c:32:a2:c6:96:d5:91:3e:9b:6c:72:61:cb:69:58:bc:
         16:e6:6a:8c:ae:26:57:d1:22:7c:c8:a3:9f:46:93:9f:d6:a6:
         3f:36:4b:f6:7c:4c:ad:3d:8a:f8:2d:41:3d:f2:2b:bc:22:9a:
         f5:00:8a:27:98:0f:5d:af:a2:82:b7:4b:39:78:12:64:90:c1:
         d8:74:83:c5:e5:85:02:f9:1b:11:da:67:74:36:4a:6c:b4:bf:
         0b:65:fe:0f:77:fe:15:1a:17:df:d2:5e:69:16:01:67:69:20:
         75:8a:4a:94:1a:62:63:1a:99:bc:a1:99:d1:50:1a:3d:18:85:
         38:d1:4f:18:ef:f4:65:8a:60:d5:56:d8:3b:19:5c:e1:55:6c:
         95:e4:41:48:af:cd:6f:67:ac:b1:82:09:03:15:5d:9d:3a:5b:
         be:2d:72:7b:2f:a8:4b:6d:07:b3:44:7b:51:08:b9:e8:ce:2b:
         76:ae:28:1a:51:bd:4e:d2:b7:ed:08:e0:7c:12:a5:9c:19:c6:
         db:f8:8b:ab:12:3b:74:0a:48:ba:6a:97:ff:0d:d8:e5:99:c7:
         69:e8:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:00:42 2024 by rpki-client on console-ams.rpki-client.org