Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137352e302f32342d3234203d3e20323730393839.roa
File:                     3138372e38362e3137352e302f32342d3234203d3e20323730393839.roa (raw, json)
Hash identifier:          Vj9Au//OJVc2U3e8fUVAdA2W+mG3eOezmmsHhg35SNQ=
Subject key identifier:   95:5A:7B:16:10:9F:2D:2D:19:7E:7A:71:BD:D0:DA:A0:C5:65:43:5F
Certificate issuer:       /CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
Certificate serial:       6177354C86720FF2E94BE625A5F38B079908F5C6
Authority key identifier: BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137352e302f32342d3234203d3e20323730393839.roa
Signing time:             Fri 05 Apr 2024 03:46:43 +0000
ROA not before:           Fri 05 Apr 2024 03:41:43 +0000
ROA not after:            Fri 04 Apr 2025 03:46:43 +0000
asID:                     270989
IP address blocks:        187.86.175.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:77:35:4c:86:72:0f:f2:e9:4b:e6:25:a5:f3:8b:07:99:08:f5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
        Validity
            Not Before: Apr  5 03:41:43 2024 GMT
            Not After : Apr  4 03:46:43 2025 GMT
        Subject: CN=955A7B16109F2D2D197E7A71BDD0DAA0C565435F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:7f:c8:6f:d0:0f:ec:28:59:89:a6:6e:aa:
                    ce:8e:c5:28:40:3b:fd:bd:d2:53:36:02:fb:08:1e:
                    ab:23:af:f6:5d:d3:a5:f6:4f:e3:92:bc:32:9e:20:
                    13:2a:a9:83:eb:33:82:d7:3c:18:f3:f4:1a:29:33:
                    88:69:8e:8c:41:b4:fb:32:10:fc:de:e3:4c:a6:6d:
                    24:fb:d5:99:3e:ea:2d:b5:1e:64:a4:f3:ed:5d:b3:
                    12:1e:4f:72:28:1d:7c:87:a7:23:1b:60:0c:ab:b8:
                    7d:fe:4d:53:e8:ef:b5:54:db:7c:a2:28:f4:a2:36:
                    65:d5:cd:41:4a:72:d9:93:54:a2:2b:57:8f:da:79:
                    ed:ff:18:79:e9:9d:2f:81:fc:c8:d9:4b:e9:ae:b0:
                    5b:94:89:70:c7:58:7c:ed:f1:1d:4a:bc:e2:9a:9a:
                    bc:eb:d6:02:6e:56:c6:f4:22:ef:b0:9a:a9:ff:0d:
                    53:42:52:92:cd:44:bb:c9:78:69:3a:f7:52:30:18:
                    0e:56:e0:6c:4b:22:5c:2e:87:ec:2c:46:62:8c:27:
                    e3:ff:24:ab:54:a4:eb:28:05:a3:bb:47:86:1d:7d:
                    51:a8:b7:36:25:48:71:db:5e:66:8c:49:ed:4e:8a:
                    c2:4d:8f:be:59:38:d8:26:97:fa:7c:d3:f9:9e:1a:
                    e3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5A:7B:16:10:9F:2D:2D:19:7E:7A:71:BD:D0:DA:A0:C5:65:43:5F
            X509v3 Authority Key Identifier:
                keyid:BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137352e302f32342d3234203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:5c:8b:d8:cd:bb:b7:bb:79:db:10:a2:37:24:76:9c:1f:
         44:3f:09:a3:ad:d2:8c:e7:b9:0c:fa:7d:20:b1:01:f0:23:4d:
         f3:ce:d6:0f:3f:db:57:97:97:6f:c2:e8:1d:1e:47:00:7e:d0:
         06:4c:28:d6:c2:a1:66:75:9b:29:07:ba:b6:f0:48:e8:3d:3d:
         41:26:60:5e:d0:39:5e:00:ad:63:dc:8c:f9:e6:95:33:4a:ef:
         88:0d:ff:04:49:ba:7f:60:7d:f6:5b:96:90:be:e3:e2:91:0e:
         12:fc:55:f2:09:ba:a4:fa:d3:99:c7:2e:48:d9:61:29:83:80:
         77:78:29:a2:e0:60:31:4f:db:1d:5b:7d:7c:3a:ec:3d:a5:9d:
         58:b9:9d:77:2a:2f:fc:2e:ee:c7:c2:11:8a:1d:67:6d:ef:f8:
         13:83:85:7f:ca:4e:29:a4:ea:97:6b:23:b3:ea:eb:08:ad:43:
         75:4b:8f:d5:5d:00:e3:9c:9c:cd:c1:ef:42:91:7c:08:74:30:
         6d:df:81:42:bc:3d:65:51:81:67:ba:9c:c4:b4:a2:9e:85:c8:
         97:c0:9f:fa:64:68:40:2c:b1:04:e8:bf:4c:41:c2:cc:d8:c5:
         81:b1:38:28:81:4e:16:86:ba:0a:8f:72:22:bb:7b:8a:8f:64:
         4d:bb:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 23:41:14 2024 by rpki-client on console-ams.rpki-client.org