Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e38352e302e302f31392d3234203d3e20323632363539.roa
File:                     3138372e38352e302e302f31392d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          I3J+1/F2I9MC/zI1sD+IYC+kU63b47qd7jgMyLvsW8c=
Subject key identifier:   44:81:98:BD:B2:D9:3A:00:CB:B1:87:9F:A2:38:8F:B0:92:C1:BD:8F
Certificate issuer:       /CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
Certificate serial:       04C08EA5B4CB593FB7AD3BA510A2BED13EEA5028
Authority key identifier: EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e38352e302e302f31392d3234203d3e20323632363539.roa
Signing time:             Fri 03 May 2024 20:01:06 +0000
ROA not before:           Fri 03 May 2024 19:56:06 +0000
ROA not after:            Fri 02 May 2025 20:01:06 +0000
asID:                     262659
IP address blocks:        187.85.0.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c0:8e:a5:b4:cb:59:3f:b7:ad:3b:a5:10:a2:be:d1:3e:ea:50:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
        Validity
            Not Before: May  3 19:56:06 2024 GMT
            Not After : May  2 20:01:06 2025 GMT
        Subject: CN=448198BDB2D93A00CBB1879FA2388FB092C1BD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:12:43:55:b7:94:0a:30:19:5c:cb:f5:35:
                    b8:eb:a3:a8:33:93:52:31:0b:ac:45:4c:ca:ef:34:
                    8a:41:65:af:a7:9b:2f:0c:40:35:cb:7a:1f:e3:03:
                    22:97:0f:cd:09:20:cc:df:4b:2e:53:71:35:69:34:
                    b8:4a:80:94:41:9d:54:49:6f:61:6d:5b:ee:57:58:
                    f8:71:35:00:af:74:39:55:e2:b1:58:24:90:55:37:
                    56:c0:5a:db:12:48:00:0c:35:e0:4d:a7:23:98:d3:
                    2c:6c:33:15:68:27:4b:4c:ff:81:75:5a:1c:48:1e:
                    3f:81:17:16:6e:f0:86:d1:e5:60:14:df:52:ae:54:
                    db:9b:58:96:aa:58:d8:6c:af:c1:96:16:64:88:b7:
                    20:8b:49:cd:e9:8f:b7:2b:20:e5:55:3b:ff:1b:62:
                    0c:44:d2:b9:a9:ba:43:29:46:2b:ef:0f:ba:2d:18:
                    eb:41:90:eb:b2:55:1c:cd:b7:5b:7c:2d:3f:42:30:
                    4e:73:8b:b4:33:13:01:3b:6f:4a:86:2c:20:13:25:
                    49:5a:e6:53:e3:0d:6d:2b:45:d8:ca:93:85:25:4c:
                    7f:a1:94:76:99:98:0b:bd:c5:8c:f1:ec:2a:08:25:
                    c5:00:df:76:9c:0e:ff:00:ac:a6:89:14:bf:e3:8b:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:98:BD:B2:D9:3A:00:CB:B1:87:9F:A2:38:8F:B0:92:C1:BD:8F
            X509v3 Authority Key Identifier:
                keyid:EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e38352e302e302f31392d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:a0:62:bf:9c:6a:7c:51:e9:85:35:1b:0f:3a:22:aa:47:85:
         c0:25:09:29:64:ec:51:f9:09:25:87:ad:c0:d3:22:d6:02:33:
         0d:e8:d0:39:05:ce:b1:db:86:88:c1:72:66:bf:ec:f2:e7:36:
         0d:72:2a:46:00:5f:78:57:e3:a1:1e:d8:dd:6a:8b:3b:5d:50:
         1f:4d:1a:be:38:e5:7a:f3:08:21:85:d1:de:f3:4b:12:f9:7e:
         a1:82:8c:fe:ba:e6:9c:0f:16:ab:3d:95:22:b7:19:56:45:ae:
         41:46:33:aa:6f:aa:6d:03:f8:26:e5:ec:1f:5d:0b:63:5d:d9:
         7d:6b:20:82:aa:af:76:8b:eb:2c:a4:5a:e0:36:b8:89:bf:ad:
         fb:bf:f9:4f:4e:d9:06:12:67:89:f0:aa:79:0d:2d:bc:ff:5c:
         31:a2:ef:b5:8b:07:97:4a:ee:6b:6a:ff:e1:b8:3d:8b:c8:85:
         49:a1:5f:3b:f4:0c:ba:9e:7b:76:7a:2f:5c:73:8a:51:19:8c:
         1e:02:95:96:92:49:d7:7c:ab:3a:96:61:ab:48:88:d8:e4:b3:
         9f:cb:cc:a1:88:65:95:14:37:88:07:08:4e:78:9e:8b:d3:3e:
         90:07:ef:0f:2a:40:36:01:d5:6c:57:c6:77:59:c2:96:32:51:
         7c:53:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:33:19 2024 by rpki-client on console-ams.rpki-client.org