Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32342d3234203d3e20323730343938.roa
File:                     32342e3135322e3132322e302f32342d3234203d3e20323730343938.roa (raw, json)
Hash identifier:          JGQb+1VKHz5zYh7fycs2UzykYBvKP+g3xIB+3ixidRA=
Subject key identifier:   FA:19:DF:91:83:76:10:7B:92:74:41:42:E3:EB:7C:22:D6:FA:7B:7B
Certificate issuer:       /CN=829064A66351CAD7B748DA917A6753A6722F5F37
Certificate serial:       09A62E7DF4E33FDE5BD99CB0A7747D83407EC11C
Authority key identifier: 82:90:64:A6:63:51:CA:D7:B7:48:DA:91:7A:67:53:A6:72:2F:5F:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829064A66351CAD7B748DA917A6753A6722F5F37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32342d3234203d3e20323730343938.roa
Signing time:             Tue 20 Aug 2024 14:00:16 +0000
ROA not before:           Tue 20 Aug 2024 13:55:16 +0000
ROA not after:            Tue 19 Aug 2025 14:00:16 +0000
asID:                     270498
IP address blocks:        24.152.122.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:2e:7d:f4:e3:3f:de:5b:d9:9c:b0:a7:74:7d:83:40:7e:c1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829064A66351CAD7B748DA917A6753A6722F5F37
        Validity
            Not Before: Aug 20 13:55:16 2024 GMT
            Not After : Aug 19 14:00:16 2025 GMT
        Subject: CN=FA19DF918376107B92744142E3EB7C22D6FA7B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:c8:78:fa:2e:bc:8a:05:af:9d:38:f0:79:
                    d0:8f:aa:57:52:e2:15:1e:89:0c:0d:22:9d:2b:e8:
                    a7:c5:ee:52:3b:6e:7f:7f:42:21:47:97:b3:8c:12:
                    7a:a1:d6:c1:2e:55:da:b9:a4:20:52:a9:b2:0b:dc:
                    2f:f2:a9:da:e5:45:1e:18:98:94:8c:dd:2c:69:08:
                    92:f0:40:df:f9:33:1a:56:57:9d:66:1d:fd:e1:a0:
                    40:a0:bb:65:8a:15:c1:e6:31:5d:2e:65:7f:7b:4a:
                    80:de:2f:ba:b5:b3:ba:5e:99:f5:5f:c4:d3:05:c5:
                    bd:45:47:07:0f:3c:95:5f:e5:70:d2:ef:3e:cd:12:
                    b4:86:f7:e9:72:98:00:9e:d0:22:95:e2:1e:5b:23:
                    d6:72:02:4c:9c:f9:77:d7:d8:6b:3e:11:25:01:43:
                    6a:2d:e8:08:73:d5:a1:ee:11:aa:8f:ed:ec:ce:28:
                    cf:ce:44:1c:91:4e:05:99:98:85:ed:d7:fb:96:e0:
                    77:9c:bb:bc:24:dc:08:27:0a:c7:6e:2a:48:e9:10:
                    0c:cc:8b:7c:b7:2c:b3:de:c7:af:70:11:25:d9:a4:
                    48:95:38:d1:93:52:1f:82:13:e3:8b:74:59:a9:5f:
                    83:5d:fc:0b:e1:03:37:2b:2d:e8:94:4d:19:a9:c0:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:DF:91:83:76:10:7B:92:74:41:42:E3:EB:7C:22:D6:FA:7B:7B
            X509v3 Authority Key Identifier:
                keyid:82:90:64:A6:63:51:CA:D7:B7:48:DA:91:7A:67:53:A6:72:2F:5F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/829064A66351CAD7B748DA917A6753A6722F5F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829064A66351CAD7B748DA917A6753A6722F5F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32342d3234203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:be:60:da:4a:55:c9:f5:ea:80:bd:17:0c:28:1a:cd:1b:
         e2:22:0e:76:61:4f:22:55:e5:92:36:6f:12:a1:cf:5b:25:b8:
         43:01:ed:f8:98:26:8f:9f:4e:15:42:73:dc:c1:64:b4:21:30:
         40:4c:8e:94:11:0f:02:16:e4:73:fd:e0:19:4b:d4:8d:30:ba:
         b1:c7:72:93:1f:63:fa:73:38:c1:43:02:b9:c8:b3:b2:c5:6f:
         81:7e:6e:6c:c9:a0:3d:8b:71:8e:6a:3e:c2:e3:80:17:8e:13:
         e2:dd:a9:15:0e:ed:4e:02:bb:7a:bd:e6:c5:62:e7:79:61:bb:
         da:31:54:b9:f2:33:64:54:22:9e:d0:f7:bc:78:6e:34:7c:f3:
         50:33:a3:08:09:a5:13:53:79:50:78:5e:08:00:22:62:3c:e1:
         bc:c5:f1:77:2a:d9:bd:ad:b0:99:89:2d:ce:1e:08:30:ca:70:
         18:89:43:52:00:2b:9c:16:70:61:02:05:bc:67:07:be:10:f7:
         ba:33:5a:21:92:6d:3c:94:58:60:e7:7c:93:87:6c:11:05:7d:
         21:b9:94:20:90:eb:54:19:a2:70:cb:a7:0b:bb:90:2a:25:5b:
         4a:15:15:aa:d6:c1:92:b2:8f:c8:38:fe:ad:c9:2d:5f:84:ce:
         25:f2:35:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:13 2024 by rpki-client on console.sobornost.net