Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa
File:                     3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa (raw, json)
Hash identifier:          jaWvdkMKyjHZwyo/yr0pyBdbf5ocBSZcDTPBSnrY2c0=
Subject key identifier:   48:65:5C:EA:C8:BC:44:00:C7:1D:36:7E:C3:39:BD:02:F6:9F:7F:30
Certificate issuer:       /CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
Certificate serial:       3C3F8C6B6FD634D0CD5914B56C0EDABDF4FC06A9
Authority key identifier: 15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa
Signing time:             Tue 11 Jul 2023 14:54:02 +0000
ROA not before:           Tue 11 Jul 2023 14:49:02 +0000
ROA not after:            Tue 09 Jul 2024 14:54:02 +0000
asID:                     270553
IP address blocks:        189.85.108.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3f:8c:6b:6f:d6:34:d0:cd:59:14:b5:6c:0e:da:bd:f4:fc:06:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
        Validity
            Not Before: Jul 11 14:49:02 2023 GMT
            Not After : Jul  9 14:54:02 2024 GMT
        Subject: CN=48655CEAC8BC4400C71D367EC339BD02F69F7F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:80:e4:48:b4:d4:98:04:83:8b:1d:3f:20:
                    05:7c:71:5f:db:4f:d9:b4:82:b3:84:61:0a:08:18:
                    e2:ac:a3:42:9e:1c:51:53:1b:a8:e9:77:58:e4:a1:
                    92:ad:76:9f:1c:9b:64:88:b1:ce:04:97:c9:39:a5:
                    aa:79:51:b0:fc:10:e2:aa:9d:f6:9b:ee:e5:40:67:
                    12:d7:cf:92:de:3f:c4:f1:21:c9:7f:61:3e:e6:de:
                    61:b4:71:8e:21:38:1f:62:51:04:8b:24:33:81:fc:
                    98:b5:57:ed:f9:4c:63:4e:f1:9c:e7:82:b4:ab:9d:
                    c0:e7:2c:41:7e:4e:45:ac:ea:e2:b9:fb:31:8c:5c:
                    6e:ce:61:58:3b:4f:ce:0a:16:ac:57:ff:73:79:63:
                    f6:2e:9c:ee:19:47:6e:89:6a:79:78:37:44:5c:bd:
                    40:cf:9b:67:24:44:a8:1f:b7:e2:b9:51:01:85:52:
                    7d:b5:0e:88:15:c7:52:95:34:1f:46:8d:66:c9:5e:
                    be:3c:61:46:fd:22:d3:03:64:a0:99:24:e1:c8:df:
                    1a:ae:c3:41:0b:88:33:41:eb:dc:6a:c8:7a:9f:da:
                    1a:a7:81:1d:af:08:9d:40:44:09:9d:80:b4:6e:0e:
                    c7:6b:3a:0f:03:27:05:94:3a:5b:fd:d0:f9:fc:fe:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:65:5C:EA:C8:BC:44:00:C7:1D:36:7E:C3:39:BD:02:F6:9F:7F:30
            X509v3 Authority Key Identifier:
                keyid:15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32322d3232203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:fb:f7:ce:32:85:f2:83:6d:3d:a8:db:fe:5a:67:17:6d:45:
         3a:67:7f:6a:00:36:20:1a:b3:2b:18:67:56:7f:fc:96:63:08:
         66:b1:c9:5a:12:02:ca:87:7f:16:b1:fe:b0:b0:64:22:c9:65:
         f6:1a:0b:f0:6a:12:c1:5c:5b:6b:eb:e8:53:81:49:a6:c4:34:
         a2:67:f4:68:95:b3:1c:c7:35:da:27:96:3f:35:11:e3:a6:2a:
         86:4b:f1:ef:7f:db:d3:03:fc:ee:3c:f8:b9:1f:3f:7e:e2:61:
         89:aa:29:91:56:f7:e2:86:9a:6b:cc:e5:5c:5f:73:a6:66:26:
         05:fa:6a:4f:1c:cc:4f:21:f5:68:04:82:d5:f8:57:67:14:de:
         71:91:d2:60:69:c8:c5:4f:45:04:24:ef:74:24:ce:28:89:b5:
         d6:f0:79:02:f3:9c:5e:54:aa:60:33:23:59:ae:ec:8f:91:3c:
         07:81:96:cc:73:d1:d3:6a:55:1d:19:99:ca:39:01:11:47:5a:
         e0:fe:01:69:aa:08:d0:9e:98:62:a6:23:43:64:59:1c:24:db:
         ae:e0:03:bb:f8:fc:f7:4f:6e:c1:49:d9:db:bb:bf:96:55:85:
         2c:27:78:f0:1f:df:cc:7c:e1:ee:ed:29:ff:81:d8:3e:cb:5e:
         9e:d4:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 30 11:16:53 2023 by rpki-client on console-fra.rpki-client.org