Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa (raw, json)
Hash identifier:          BDNdaA+oU0mK1q8BWex6gCLOgUxs5sfNKM+YHJIR3FE=
Subject key identifier:   D3:85:24:E0:C6:87:D6:A6:30:63:09:4B:DA:53:05:F0:EC:A5:C0:4F
Certificate issuer:       /CN=41780D761AAB6860C84344D2502C54C1F09D6825
Certificate serial:       6B629F343DCB7CC9CC6D0C20BB6CDAAFDAF52827
Authority key identifier: 41:78:0D:76:1A:AB:68:60:C8:43:44:D2:50:2C:54:C1:F0:9D:68:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41780D761AAB6860C84344D2502C54C1F09D6825.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
Signing time:             Thu 04 Apr 2024 01:11:11 +0000
ROA not before:           Thu 04 Apr 2024 01:06:11 +0000
ROA not after:            Thu 03 Apr 2025 01:11:11 +0000
asID:                     270579
IP address blocks:        189.126.84.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:62:9f:34:3d:cb:7c:c9:cc:6d:0c:20:bb:6c:da:af:da:f5:28:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41780D761AAB6860C84344D2502C54C1F09D6825
        Validity
            Not Before: Apr  4 01:06:11 2024 GMT
            Not After : Apr  3 01:11:11 2025 GMT
        Subject: CN=D38524E0C687D6A63063094BDA5305F0ECA5C04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:77:2e:df:58:e0:0b:44:6f:8e:07:02:8d:aa:
                    32:8c:75:c4:21:95:e5:8f:4f:a5:ba:56:a2:5a:f1:
                    16:21:c5:e8:6e:b5:59:c2:15:7c:df:26:23:0c:05:
                    95:e4:c4:4a:b8:15:55:1d:a9:d7:e2:60:a1:bc:0f:
                    32:a2:34:2b:9f:6c:aa:a2:b5:00:a2:7f:d6:90:c5:
                    f1:58:e3:a5:60:bf:c8:0e:59:f6:45:ec:86:d1:0a:
                    d3:87:65:6c:db:fe:86:bf:16:02:eb:01:07:7a:9b:
                    83:bf:24:4b:93:03:0a:f1:da:5e:13:34:35:49:02:
                    cc:66:17:c7:d7:bb:b9:88:75:87:ce:15:e9:dd:bc:
                    c1:4b:eb:0e:1a:2f:33:66:86:d6:ee:76:96:b4:55:
                    71:0a:fc:4d:f3:80:32:ad:93:01:e7:8e:01:c4:e5:
                    ee:eb:be:2f:30:46:0b:7f:d0:80:0e:96:1e:2f:08:
                    a4:60:19:6f:25:5d:c2:98:28:83:da:db:0a:be:aa:
                    b1:2e:21:03:11:f6:3a:dd:cb:86:03:a6:e9:56:23:
                    a4:3d:8d:08:f7:1c:1b:96:09:d8:f6:62:a7:90:92:
                    8f:37:4a:a7:95:cc:4f:c7:66:75:aa:e7:fa:af:ac:
                    1e:de:e6:2a:96:ea:30:86:0a:7c:d0:91:62:83:1f:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:85:24:E0:C6:87:D6:A6:30:63:09:4B:DA:53:05:F0:EC:A5:C0:4F
            X509v3 Authority Key Identifier:
                keyid:41:78:0D:76:1A:AB:68:60:C8:43:44:D2:50:2C:54:C1:F0:9D:68:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/41780D761AAB6860C84344D2502C54C1F09D6825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41780D761AAB6860C84344D2502C54C1F09D6825.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/3/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:6c:88:64:d4:45:64:00:f9:70:59:2d:df:40:6e:a3:4f:
         1b:71:a2:4e:24:7d:76:a9:29:a0:dd:41:63:c9:48:4c:c3:f9:
         41:4c:bd:d1:11:3a:4c:09:7e:cc:2d:d6:5f:b7:be:0f:51:dc:
         bf:a8:42:31:f1:25:b6:61:08:80:1e:a4:1d:b4:0f:16:3f:e2:
         a0:72:0d:de:f4:f8:53:c0:0c:46:4e:ef:02:ad:fb:f2:87:7f:
         59:01:1c:fa:fb:e2:54:fc:0e:a7:d8:80:c5:c5:20:1f:9d:26:
         f9:53:e2:d6:ba:1c:f8:11:dd:71:a7:da:23:0a:f2:ab:a5:33:
         cc:6f:54:b6:9a:bb:87:c7:d7:b8:e9:24:32:fd:7e:c2:f5:c5:
         16:67:6d:e8:cd:ac:11:39:ec:47:3f:68:64:b2:90:01:95:e6:
         7b:75:9c:56:75:ce:fd:20:9d:e0:01:33:3a:6f:f8:98:d8:6d:
         f3:72:7c:aa:ab:0e:c2:15:04:6c:fc:ed:1a:54:1d:91:4f:8b:
         4e:f7:8f:33:b6:ab:17:bb:11:7f:1d:b7:e0:bd:38:e1:9d:90:
         c8:5d:a2:2e:e3:37:bd:1e:a0:c9:a3:10:64:84:36:df:3e:6c:
         24:70:f5:b4:2c:8d:e9:8c:d1:04:c3:f6:b2:2c:71:19:4c:88:
         75:40:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 04:02:50 2024 by rpki-client on console-ams.rpki-client.org