Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3332203d3e203533303438.roa
File:                     3138372e37332e39362e302f32302d3332203d3e203533303438.roa (raw, json)
Hash identifier:          jhSn2DKQIifSKp3M3V4eX1jaTJzM0VA5TfYBm9YRIGo=
Subject key identifier:   13:75:9C:11:3B:BB:D7:53:68:77:B6:FF:15:80:F6:4E:65:79:1A:D8
Certificate issuer:       /CN=61A0D46B3E5BD8CD2D919613341FE3851FFAA888
Certificate serial:       4CAD244FDAC9C5733C1DDFAE11A2E2DB99240FF0
Authority key identifier: 61:A0:D4:6B:3E:5B:D8:CD:2D:91:96:13:34:1F:E3:85:1F:FA:A8:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3332203d3e203533303438.roa
Signing time:             Mon 07 Oct 2024 17:28:58 +0000
ROA not before:           Mon 07 Oct 2024 17:23:58 +0000
ROA not after:            Mon 06 Oct 2025 17:28:58 +0000
asID:                     53048
IP address blocks:        187.73.96.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:24:4f:da:c9:c5:73:3c:1d:df:ae:11:a2:e2:db:99:24:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61A0D46B3E5BD8CD2D919613341FE3851FFAA888
        Validity
            Not Before: Oct  7 17:23:58 2024 GMT
            Not After : Oct  6 17:28:58 2025 GMT
        Subject: CN=13759C113BBBD7536877B6FF1580F64E65791AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:e3:d4:76:06:a3:2f:19:6d:dd:85:f2:cd:
                    dc:66:f3:f2:0f:94:9f:00:82:87:e1:9a:0b:99:c8:
                    b4:f4:ed:66:3d:af:24:f3:7a:b0:cd:20:22:22:16:
                    d4:ca:06:29:4b:82:fc:cf:3a:db:bb:8d:95:27:45:
                    81:be:35:18:d9:51:f2:e3:c7:fe:6b:c1:a9:b0:17:
                    2d:61:8b:3f:d8:bc:75:12:09:fa:26:c5:86:f0:66:
                    2a:c1:d5:40:d4:b6:cd:24:f4:e5:3d:5f:db:17:ff:
                    59:93:2b:fa:24:e9:ee:ea:fb:75:b5:bd:6e:e6:15:
                    a4:1c:a2:73:9c:38:c2:eb:b0:ff:94:93:ac:bd:12:
                    21:9c:96:b9:2b:6c:2f:db:d5:f6:74:02:95:8f:65:
                    33:35:92:06:78:03:8b:6b:48:35:36:c1:1e:1e:ae:
                    1a:94:09:b7:cc:65:13:b5:e3:4f:37:3c:66:a9:9c:
                    ac:f1:57:97:df:7d:2b:02:5d:4f:9d:ec:c5:4e:2e:
                    0d:fe:0a:b0:63:cf:56:25:bd:55:11:4d:d1:8b:e3:
                    a8:3f:2a:4f:28:85:74:d0:1f:dd:5e:55:11:26:a4:
                    d7:27:33:ff:4f:75:2e:a9:07:0c:3b:23:44:0b:04:
                    13:60:15:a3:ee:b3:32:8c:0c:87:66:f1:78:00:61:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:9C:11:3B:BB:D7:53:68:77:B6:FF:15:80:F6:4E:65:79:1A:D8
            X509v3 Authority Key Identifier:
                keyid:61:A0:D4:6B:3E:5B:D8:CD:2D:91:96:13:34:1F:E3:85:1F:FA:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3332203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:66:95:e4:01:fe:f0:53:0b:b9:86:6f:34:4a:d6:77:88:
         ca:51:5e:9a:7f:d2:c9:aa:07:3d:42:c8:72:76:3c:fb:8c:db:
         1a:5b:bd:f2:40:67:68:ae:3e:54:f2:66:ee:7c:6d:f3:0f:58:
         b8:f2:d2:5b:53:78:60:c9:0c:a2:e9:94:e8:d3:2a:25:34:c1:
         6b:ff:8a:4b:aa:f3:ea:86:f5:58:46:8f:27:07:ec:92:de:0a:
         95:56:87:83:d7:71:39:9f:43:75:67:11:63:ad:34:ed:56:90:
         45:ab:9a:c7:a6:27:60:52:34:76:ca:20:b5:70:6a:83:2a:28:
         34:ea:9f:8d:07:7f:cb:89:2f:6a:7c:41:83:65:52:47:8c:07:
         8f:d2:a4:a9:0a:16:c4:f1:49:45:74:6c:d2:b6:8e:e1:d0:f7:
         97:5a:82:ea:f0:83:15:c5:38:1c:71:b8:9d:4f:0b:c2:e3:1e:
         c2:e1:24:55:92:32:d3:b3:b1:3b:6d:1b:64:ad:4e:30:f8:2c:
         f4:31:1a:4c:69:5b:95:b4:1c:2d:2d:5c:5e:cc:2b:4b:13:fb:
         c3:69:e6:d6:00:e6:bb:f8:02:12:c6:25:ef:48:0f:7d:23:ac:
         8a:28:ce:ac:06:24:c5:b8:8f:bf:fe:46:3d:33:27:14:10:36:
         35:4f:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----