Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa
File:                     3138372e33332e34382e302f32312d3234203d3e20323633303830.roa (raw, json)
Hash identifier:          5j6mHj43fzSzaW5j4ZjstPGHlY1pDxteUYDlGi3hW08=
Subject key identifier:   31:45:2E:F6:78:6F:D1:62:0E:7A:C9:AB:FC:79:C5:C5:EA:DD:4A:30
Certificate issuer:       /CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED
Certificate serial:       307B691F2CA0755373078C74C01974915759F90B
Authority key identifier: 0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa
Signing time:             Fri 12 Apr 2024 13:27:13 +0000
ROA not before:           Fri 12 Apr 2024 13:22:13 +0000
ROA not after:            Sat 12 Apr 2025 13:27:13 +0000
asID:                     263080
IP address blocks:        187.33.48.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7b:69:1f:2c:a0:75:53:73:07:8c:74:c0:19:74:91:57:59:f9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED
        Validity
            Not Before: Apr 12 13:22:13 2024 GMT
            Not After : Apr 12 13:27:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:ff:da:66:89:d9:cb:d0:d9:7c:46:97:fc:
                    dd:f2:ec:d3:50:7e:26:76:57:e6:31:26:63:79:f8:
                    b9:d3:a6:67:e9:99:80:52:3d:f4:f3:b3:fc:12:52:
                    b1:ac:68:3b:e2:42:e3:47:ba:a4:0c:dc:7e:20:35:
                    ab:8a:4d:9d:33:b6:4a:a3:81:60:f4:c1:42:89:87:
                    3b:e3:ee:a1:20:d0:d9:07:63:42:56:a9:a9:0d:3e:
                    5e:ae:33:f5:4a:ef:a0:e9:5b:d2:7b:45:dc:15:d2:
                    b5:21:26:83:ed:87:d7:7e:aa:67:08:69:11:a9:cb:
                    31:b7:e1:31:20:51:f7:2b:96:0c:28:57:51:3c:7d:
                    bb:80:77:e5:55:e1:6b:e9:10:9a:cb:3b:7d:68:0e:
                    3f:0f:d5:ed:30:63:ed:96:2c:8a:a3:0b:2c:b1:61:
                    8b:d3:f0:3b:66:a3:ff:85:7e:ad:8b:7f:33:a4:fd:
                    65:36:d6:fe:9e:8a:91:e4:90:88:9b:91:1a:d1:c5:
                    da:87:ff:85:2f:01:3b:8b:51:9d:eb:d6:b1:54:a7:
                    01:4a:ff:f9:e5:5a:09:04:68:1f:71:18:b2:d6:55:
                    4d:6b:63:11:7c:f7:4c:90:df:fe:d5:16:b5:58:97:
                    fe:d4:b3:c2:6f:7d:71:22:b0:2d:45:99:da:8c:2a:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:2E:F6:78:6F:D1:62:0E:7A:C9:AB:FC:79:C5:C5:EA:DD:4A:30
            X509v3 Authority Key Identifier:
                keyid:0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:fb:da:55:39:76:bc:14:7f:98:6b:10:d0:98:b8:df:12:
         4b:af:c0:cf:aa:34:6f:2d:77:d5:5b:77:86:37:7c:f2:ef:b3:
         97:2b:82:48:b4:79:66:df:48:2f:a1:5a:a0:8a:34:a1:3e:d1:
         04:21:ba:9c:65:97:e5:d9:79:c2:06:9b:0f:aa:2a:6c:d8:fa:
         3a:93:e8:ba:79:5f:46:1d:2e:ec:b1:b3:d9:27:f1:aa:35:35:
         50:f9:05:56:bb:4c:f9:22:6b:e4:2e:c5:dd:f7:a9:ce:72:d6:
         db:41:28:01:f0:8f:7e:d6:ad:5c:a1:85:78:5e:59:7b:7e:0f:
         87:c1:ff:c9:56:0e:6d:6f:4a:90:03:d4:14:4f:08:e1:80:c0:
         43:2d:21:bf:a9:27:00:b1:c6:df:61:aa:d6:98:c4:46:8a:18:
         3e:35:e1:fe:e7:62:15:5b:b5:14:15:3d:5b:93:9e:9f:87:5f:
         a9:06:f5:65:12:6f:1c:88:09:1e:c7:5e:ed:4e:8d:b2:c7:b4:
         6e:06:71:94:2c:41:48:35:81:af:6c:96:07:d9:31:63:41:64:
         9a:79:40:a0:38:15:ff:eb:c3:49:d4:34:d2:4b:cb:a3:e7:43:
         37:10:6a:3a:85:8d:31:80:18:f5:e4:de:ec:48:0b:aa:55:f0:
         be:0e:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 05:52:53 2024 by rpki-client on console-ams.rpki-client.org