Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137322e302f32322d3232203d3e20323730393839.roa
File:                     3138372e38362e3137322e302f32322d3232203d3e20323730393839.roa (raw, json)
Hash identifier:          0S2FpG6WMt8nbDZhvYD4OvcnShhrWsHs0b1IEbfWwDs=
Subject key identifier:   70:E0:5E:DA:23:33:11:F8:13:7D:00:CE:45:22:87:A0:39:8C:5F:2D
Certificate issuer:       /CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
Certificate serial:       385DCAA4845AD805B518B4AA33A06AD32CE6B3B7
Authority key identifier: BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137322e302f32322d3232203d3e20323730393839.roa
Signing time:             Fri 05 Apr 2024 03:46:43 +0000
ROA not before:           Fri 05 Apr 2024 03:41:43 +0000
ROA not after:            Fri 04 Apr 2025 03:46:43 +0000
asID:                     270989
IP address blocks:        187.86.172.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5d:ca:a4:84:5a:d8:05:b5:18:b4:aa:33:a0:6a:d3:2c:e6:b3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
        Validity
            Not Before: Apr  5 03:41:43 2024 GMT
            Not After : Apr  4 03:46:43 2025 GMT
        Subject: CN=70E05EDA233311F8137D00CE452287A0398C5F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:73:04:9a:25:bb:ad:51:e4:c6:45:d4:f5:
                    7e:07:b5:c6:46:e6:22:01:c8:e5:59:05:1a:16:d8:
                    4a:12:f0:96:66:fc:5d:68:36:b0:35:e3:61:8d:5c:
                    7d:23:ef:f7:7d:64:d9:00:84:8d:b6:8c:f2:8a:3b:
                    95:fa:a9:ab:f0:16:0f:ba:bc:45:76:29:94:ad:62:
                    f7:b1:8f:47:b5:c7:e8:bd:bd:7e:17:fe:6c:c8:48:
                    e2:08:7e:e2:43:c1:af:8f:d6:b1:65:0f:67:5d:c5:
                    17:d1:24:ab:fe:ed:d2:db:33:24:b6:55:45:74:64:
                    8b:58:25:e5:30:70:f6:a3:b0:66:c4:2e:53:72:9a:
                    5c:e5:1c:9c:ed:8a:3d:42:c6:e6:2f:5d:fe:18:c3:
                    67:9d:50:cf:b7:5a:2b:4a:51:38:52:63:5f:cc:31:
                    62:33:8a:33:d6:e4:2b:4c:4c:5e:3a:46:68:1b:fb:
                    e2:2a:3d:8c:cb:ee:67:70:5f:35:f1:09:dc:a1:94:
                    d9:68:af:e2:cf:c4:6d:78:80:44:bf:3b:b1:4c:77:
                    b0:e3:52:39:5c:51:52:45:fe:45:ad:d0:a0:20:d1:
                    aa:0d:00:8e:c4:d8:00:e7:d8:6d:51:7d:26:41:d4:
                    0c:51:e7:a1:06:94:f4:aa:d9:d6:eb:7f:62:e4:19:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:5E:DA:23:33:11:F8:13:7D:00:CE:45:22:87:A0:39:8C:5F:2D
            X509v3 Authority Key Identifier:
                keyid:BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137322e302f32322d3232203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:42:07:da:9d:2c:ed:63:82:b8:10:1f:11:97:2d:c3:1d:
         44:a4:ae:cf:7d:cb:b5:47:44:21:b3:95:44:22:58:5c:a1:34:
         f3:e9:ea:c1:18:f8:69:4e:09:80:6e:79:62:9f:41:15:df:e7:
         fe:3b:bc:76:30:14:c8:05:71:e5:b5:20:e4:aa:56:d8:92:9b:
         58:c5:a3:64:c0:da:66:7f:4b:bd:53:1e:61:e1:51:66:11:dc:
         31:02:d4:ea:af:5b:49:85:ff:b3:27:a0:e9:dc:7b:7a:1d:da:
         63:b9:a4:57:b6:e4:09:10:77:a7:11:f3:0b:14:76:43:2f:41:
         09:99:55:b3:6e:3e:20:5c:15:d8:61:aa:04:b3:0f:be:c1:02:
         09:40:4f:ba:ef:e1:e0:7e:07:85:94:68:d2:0d:f9:8e:e9:c7:
         ea:c1:7a:57:c2:d3:17:fc:39:d9:36:d0:8c:8c:d9:f1:94:1f:
         79:07:d3:da:2e:ae:c7:ea:78:81:03:9a:68:db:b6:2b:22:b3:
         cf:63:bb:be:80:68:3d:27:cf:6b:50:c4:1e:9e:fc:35:af:f7:
         b7:ca:05:f3:c4:4d:ad:26:c9:7a:01:f0:57:52:e7:10:10:a5:
         5f:dc:ac:d1:c5:92:52:73:5d:72:88:43:7b:b7:50:19:3b:95:
         96:05:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 23:10:28 2024 by rpki-client on console-fra.rpki-client.org