Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3138372e312e3137362e302f32302d3230203d3e203231353734.roa
File:                     3138372e312e3137362e302f32302d3230203d3e203231353734.roa (raw, json)
Hash identifier:          BsqglCAYsWQRHpV1y+KjNKeAylr0d37N+7oH+DHRsFY=
Subject key identifier:   D9:60:5E:34:66:84:D5:85:E9:B7:28:2C:3D:1A:BD:E2:58:61:1E:8C
Certificate issuer:       /CN=BD88CE604EA701BD2303A3A26D97C728956C0781
Certificate serial:       141D0DD5ABF241B0714E87CE7644843B3A04D393
Authority key identifier: BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3138372e312e3137362e302f32302d3230203d3e203231353734.roa
Signing time:             Tue 07 May 2024 18:17:26 +0000
ROA not before:           Tue 07 May 2024 18:12:26 +0000
ROA not after:            Tue 06 May 2025 18:17:26 +0000
asID:                     21574
IP address blocks:        187.1.176.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1d:0d:d5:ab:f2:41:b0:71:4e:87:ce:76:44:84:3b:3a:04:d3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD88CE604EA701BD2303A3A26D97C728956C0781
        Validity
            Not Before: May  7 18:12:26 2024 GMT
            Not After : May  6 18:17:26 2025 GMT
        Subject: CN=D9605E346684D585E9B7282C3D1ABDE258611E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:5d:3c:51:01:4d:52:8c:8f:07:43:9c:c1:
                    5e:6c:f5:e4:43:58:b7:83:a9:fd:5e:ac:d3:4d:51:
                    d5:ee:0e:a6:ae:61:08:32:68:1c:25:a8:c3:fd:98:
                    27:51:05:ff:da:1e:45:59:90:ab:c5:de:9a:c1:6c:
                    28:3f:91:41:22:b7:f2:dc:6f:37:ac:a8:62:0b:e8:
                    6d:e8:71:6d:0f:f7:58:82:46:07:49:12:1e:b2:6d:
                    33:27:8f:16:e9:28:77:1d:86:f7:fd:57:30:b5:7e:
                    bc:18:b5:33:43:ef:c0:5a:4a:81:35:ce:30:11:40:
                    cb:90:12:40:05:de:e6:11:e3:64:2c:7a:3c:b8:82:
                    cd:61:4b:e6:49:1a:f4:4b:ac:c4:71:1e:f9:f6:88:
                    91:0f:ba:3d:9d:92:01:7d:c0:19:94:ab:9d:90:6c:
                    f4:5e:cb:c1:5a:65:88:ef:d7:da:f4:c7:c6:74:c2:
                    1d:df:01:01:c4:08:19:aa:f8:6a:48:40:4a:92:44:
                    5e:b3:3a:b9:3c:9f:cd:55:fa:14:98:6e:89:f9:7e:
                    00:d7:bc:19:09:aa:8c:88:57:e6:76:f5:2a:09:7a:
                    f6:51:0b:c6:ad:b1:e1:b7:30:73:01:30:42:c8:0d:
                    6c:25:fe:0e:84:8a:55:f8:d7:f3:e6:0c:a8:d2:82:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:60:5E:34:66:84:D5:85:E9:B7:28:2C:3D:1A:BD:E2:58:61:1E:8C
            X509v3 Authority Key Identifier:
                keyid:BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/BD88CE604EA701BD2303A3A26D97C728956C0781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3138372e312e3137362e302f32302d3230203d3e203231353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:af:f3:1a:fd:88:48:ba:ea:39:b0:ce:1f:a3:ab:88:30:
         90:34:76:8d:87:7d:a3:65:77:62:8c:07:fe:c0:a3:68:17:5f:
         45:fa:00:bf:51:4c:d7:d4:c8:41:29:d6:b0:0a:7a:9b:de:35:
         71:24:4a:6f:c9:8b:51:de:98:83:40:36:15:99:d0:9b:df:be:
         c8:ab:fd:2c:a6:e8:fd:f2:81:e1:13:c8:ce:49:d1:ed:d7:bb:
         9e:06:5c:d6:04:26:47:61:0f:b6:d8:7f:0e:6a:4b:d9:8d:7a:
         ab:5b:45:41:37:33:48:92:ad:ed:42:82:34:2a:73:1b:63:1e:
         86:4a:ba:36:c8:e3:81:3b:dd:d4:37:36:24:c9:c7:23:75:5c:
         c8:96:22:cf:28:ca:59:72:47:a0:eb:26:6c:93:ea:a0:40:23:
         aa:d7:e9:58:6b:2d:c7:57:c4:7a:97:63:10:24:ed:dd:84:9d:
         0f:2c:f7:63:cd:7d:c4:ac:0e:34:72:c1:b7:d2:a2:be:8b:95:
         0d:2b:c9:28:82:0b:79:d4:e1:bd:2e:76:ea:b2:45:55:68:aa:
         f9:07:c5:57:07:cb:57:32:8f:b1:3f:a8:7e:1f:07:9c:71:f5:
         4e:eb:ff:78:87:54:49:8c:95:4d:b7:68:21:3f:ce:cb:f5:89:
         c2:aa:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 08:38:14 2024 by rpki-client on console-ams.rpki-client.org