Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138392e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3138392e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          hYz5Gn5wnvnd1YA/OdC91uBftfRRPL06FW2Oxie7Nns=
Subject key identifier:   4A:76:F5:EE:A5:0F:BD:D6:03:A4:CD:C5:4C:C1:22:B7:B4:46:FD:0D
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       435D2535B5C5424517352CF4585BDB48A63DDF01
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138392e302f32342d3234203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:55 +0000
ROA not before:           Tue 24 Sep 2024 21:39:55 +0000
ROA not after:            Tue 23 Sep 2025 21:44:55 +0000
asID:                     270716
IP address blocks:        189.127.189.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5d:25:35:b5:c5:42:45:17:35:2c:f4:58:5b:db:48:a6:3d:df:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:55 2024 GMT
            Not After : Sep 23 21:44:55 2025 GMT
        Subject: CN=4A76F5EEA50FBDD603A4CDC54CC122B7B446FD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:6c:44:83:32:4c:f9:74:a5:d9:5d:6e:3e:
                    88:d0:08:f0:92:d1:d4:09:5f:c4:63:0e:72:b9:0c:
                    74:22:ef:30:57:71:e8:d7:ac:27:8b:77:e4:8a:58:
                    fc:9d:4c:76:04:f7:d3:a8:7c:fe:9c:f3:ee:87:17:
                    2d:18:71:df:52:eb:56:69:72:15:33:fa:a8:22:ea:
                    bd:17:7e:54:ad:24:15:fb:68:c7:77:dd:c4:78:e5:
                    ca:b6:01:d2:d3:ad:81:96:52:7e:92:cf:da:30:a3:
                    1f:91:e9:4b:e2:c2:38:56:74:b1:af:26:55:2e:1d:
                    08:5a:b4:c1:91:08:92:11:e3:6e:55:41:f6:d9:c8:
                    f2:3b:47:05:c9:a5:ad:5f:d0:39:5d:8f:43:bd:33:
                    91:54:fa:85:48:ea:49:cd:cb:9f:7e:3c:81:0d:55:
                    58:b9:3d:05:f9:41:05:51:2d:18:6f:f2:03:fd:5d:
                    6a:2b:11:60:e7:46:fe:8c:ae:5d:75:ad:11:a9:57:
                    92:18:9b:fb:ae:f0:38:cb:c8:8d:1b:08:19:98:d5:
                    62:ca:a7:bf:71:03:d9:a3:4a:62:f6:d5:a5:cd:70:
                    26:11:4c:01:25:5d:d6:78:bc:10:70:52:74:26:e0:
                    5b:85:b8:01:3d:5c:78:c7:d0:99:92:81:69:1e:8d:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:F5:EE:A5:0F:BD:D6:03:A4:CD:C5:4C:C1:22:B7:B4:46:FD:0D
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138392e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:9b:5d:4d:49:b0:1a:10:8a:8d:ee:c2:38:5a:b7:fa:24:35:
         49:b9:9b:8c:b3:a6:86:5e:ab:61:a5:02:d5:ee:4e:14:c8:95:
         e6:69:fb:ed:e7:d2:7d:ff:11:60:fa:2a:93:84:2b:15:d0:7f:
         58:5e:cb:d2:d9:c3:81:fe:3e:33:8a:74:90:be:2f:9e:66:07:
         5e:0f:73:cb:b1:1f:1c:93:14:e0:d9:f9:cf:d3:2d:a9:81:ba:
         98:d4:02:ef:ee:ab:34:ad:fe:16:cf:19:85:b6:e5:0e:28:8f:
         be:ef:5e:4b:c7:9c:a1:fd:a9:d1:87:ac:fb:a6:2c:c2:cf:31:
         7d:1c:31:21:52:41:a8:c6:2a:37:1e:05:83:cb:a7:aa:29:33:
         96:1d:8f:ae:56:99:24:a5:f1:71:20:e1:05:50:8c:5e:b5:19:
         dd:d3:55:4b:c9:c0:87:00:9a:02:de:8f:bb:e9:22:95:4d:e7:
         12:eb:c1:68:10:40:73:5f:fb:bc:09:de:3d:db:e7:d4:2d:f5:
         f6:f5:bc:b2:de:17:bc:13:3c:4e:d8:51:04:90:05:b5:8a:12:
         51:28:d5:f2:ea:0e:91:a0:9a:58:a0:89:43:19:3c:cf:69:73:
         1a:93:e0:1e:70:a8:ce:00:f5:89:e8:e8:84:1c:f6:a5:56:32:
         2d:01:de:bb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQ10lNbXFQkUXNSz0WFvbSKY93wEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhDNkE4NDdFNDEyRjM4OUVDNEY5RTlDQjNBM0Y1RTM4
NEFDQkE2MDAeFw0yNDA5MjQyMTM5NTVaFw0yNTA5MjMyMTQ0NTVaMDMxMTAvBgNV
BAMTKDRBNzZGNUVFQTUwRkJERDYwM0E0Q0RDNTRDQzEyMkI3QjQ0NkZEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnGxEgzJM+XSl2V1uPojQCPCS
0dQJX8RjDnK5DHQi7zBXcejXrCeLd+SKWPydTHYE99OofP6c8+6HFy0Ycd9S61Zp
chUz+qgi6r0XflStJBX7aMd33cR45cq2AdLTrYGWUn6Sz9owox+R6UviwjhWdLGv
JlUuHQhatMGRCJIR425VQfbZyPI7RwXJpa1f0Dldj0O9M5FU+oVI6knNy59+PIEN
VVi5PQX5QQVRLRhv8gP9XWorEWDnRv6Mrl11rRGpV5IYm/uu8DjLyI0bCBmY1WLK
p79xA9mjSmL21aXNcCYRTAElXdZ4vBBwUnQm4FuFuAE9XHjH0JmSgWkejSI5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSnb17qUPvdYDpM3FTMEit7RG/Q0wHwYDVR0j
BBgwFoAUiMaoR+QS84nsT56cs6P144SsumAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YWHZ0NDFhUjJCSFRCZFFLZWtCUDFoaHpCSzQ3azRIV3Z2NzhVNUM0eWJV
LzAvODhDNkE4NDdFNDEyRjM4OUVDNEY5RTlDQjNBM0Y1RTM4NEFDQkE2MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OEM2QTg0N0U0MTJGMzg5RUM0
RjlFOUNCM0EzRjVFMzg0QUNCQTYwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
WHZ0NDFhUjJCSFRCZFFLZWtCUDFoaHpCSzQ3azRIV3Z2NzhVNUM0eWJVLzAvMzEz
ODM5MmUzMTMyMzcyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzcz
MDM3MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAL1/vTANBgkqhkiG9w0BAQsFAAOCAQEAp5tdTUmw
GhCKje7COFq3+iQ1SbmbjLOmhl6rYaUC1e5OFMiV5mn77efSff8RYPoqk4QrFdB/
WF7L0tnDgf4+M4p0kL4vnmYHXg9zy7EfHJMU4Nn5z9MtqYG6mNQC7+6rNK3+Fs8Z
hbblDiiPvu9eS8ecof2p0Yes+6Ysws8xfRwxIVJBqMYqNx4Fg8unqikzlh2PrlaZ
JKXxcSDhBVCMXrUZ3dNVS8nAhwCaAt6Pu+kilU3nEuvBaBBAc1/7vAnePdvn1C31
9vW8st4XvBM8TthRBJAFtYoSUSjV8uoOkaCaWKCJQxk8z2lzGpPgHnCozgD1iejo
hBz2pVYyLQHeuw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:59:28 2024 by rpki-client on console-ams.rpki-client.org