Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3138372e3131302e36342e302f31392d3332203d3e203238363234.roa
File:                     3138372e3131302e36342e302f31392d3332203d3e203238363234.roa (raw, json)
Hash identifier:          nSCN78r8n6iy4u1Ng+v5wK/IbGq6pq7NKuL9PtTJfTQ=
Subject key identifier:   0E:57:AA:39:7D:D4:BB:4E:E0:F2:5C:53:3C:AC:9B:62:E6:46:2D:6C
Certificate issuer:       /CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
Certificate serial:       43C5EF621DA319D684442C2678A66645A65ACFBB
Authority key identifier: 81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3138372e3131302e36342e302f31392d3332203d3e203238363234.roa
Signing time:             Wed 03 Apr 2024 19:59:00 +0000
ROA not before:           Wed 03 Apr 2024 19:54:00 +0000
ROA not after:            Wed 02 Apr 2025 19:59:00 +0000
asID:                     28624
IP address blocks:        187.110.64.0/19 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c5:ef:62:1d:a3:19:d6:84:44:2c:26:78:a6:66:45:a6:5a:cf:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
        Validity
            Not Before: Apr  3 19:54:00 2024 GMT
            Not After : Apr  2 19:59:00 2025 GMT
        Subject: CN=0E57AA397DD4BB4EE0F25C533CAC9B62E6462D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:7e:30:a3:ff:d9:8f:b2:53:79:08:b6:74:
                    34:6f:b5:9c:86:db:c2:3e:60:db:52:dd:54:61:7e:
                    a4:da:a7:6b:bc:f0:1e:e5:c2:19:70:e4:4c:c6:88:
                    48:d5:7c:16:5a:4c:9c:26:12:69:e0:e0:eb:c0:06:
                    48:f0:50:3f:7d:cb:5c:54:6f:1f:3b:e1:f1:4f:a5:
                    d3:d7:80:35:9e:8d:5a:d5:32:39:53:4f:f2:ca:9b:
                    4a:67:8f:1c:a1:6c:f8:ae:e3:f2:9b:24:15:ae:cb:
                    24:d7:68:2d:42:21:e4:71:a5:c8:33:6a:1a:e1:e5:
                    05:f4:16:c1:40:5a:0c:56:a7:26:80:b4:4d:09:e7:
                    ae:f5:b3:39:56:fb:fa:23:8e:52:01:ff:08:a0:1e:
                    a8:81:3a:67:60:2f:bf:8e:eb:d4:f2:4e:23:da:7a:
                    61:eb:65:36:8c:9c:5d:da:e5:22:8d:5d:41:14:18:
                    db:a4:ad:fb:3f:8b:44:f4:37:b1:09:8d:b1:73:6f:
                    b7:c1:5c:b6:a4:e0:06:b4:fe:44:d3:94:7f:c6:c0:
                    a1:cd:21:a1:07:94:ec:af:5f:7a:7c:bf:d6:2a:b2:
                    e5:25:91:e2:1e:87:90:24:9b:1b:ff:e8:ea:6f:1b:
                    bc:60:30:ea:11:2c:90:d9:24:97:20:8d:de:ab:68:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:AA:39:7D:D4:BB:4E:E0:F2:5C:53:3C:AC:9B:62:E6:46:2D:6C
            X509v3 Authority Key Identifier:
                keyid:81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3138372e3131302e36342e302f31392d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:39:e5:74:e6:a7:81:09:65:fa:72:5e:88:ea:2a:d0:4d:
         39:cb:61:94:d0:51:41:81:1b:08:22:d1:49:cd:60:1c:01:9e:
         fc:6f:02:2c:89:c7:1e:85:ec:41:87:1b:62:56:3f:cc:e5:9b:
         76:1b:01:38:05:96:5d:76:d6:48:b3:5b:fb:fb:d4:ee:c2:dd:
         9a:b3:71:f7:8c:30:f7:0b:cd:aa:d3:d5:7f:a4:a3:6b:af:14:
         b0:2a:51:98:46:c3:59:d2:ee:e9:b4:33:66:07:a7:95:4e:90:
         c6:ee:42:3e:21:32:36:02:26:38:b4:38:b8:0f:2a:8b:4c:f4:
         85:26:5b:b7:d1:f1:dc:c3:99:73:0a:19:8c:c7:7a:be:82:0f:
         19:44:f6:a8:25:7c:33:db:01:b7:aa:81:4e:da:f6:e4:46:e8:
         29:43:d8:64:01:79:3a:3e:f5:ad:5f:07:02:d2:1e:c1:db:f8:
         26:ff:68:ba:59:3e:46:a1:46:4a:0a:04:f7:67:4d:ad:16:54:
         72:9c:d6:bf:a4:06:27:72:72:7d:a7:18:06:79:9d:ff:cd:06:
         5d:fb:61:f0:41:85:fc:11:d3:98:18:3b:45:98:21:b9:81:28:
         28:c2:11:01:59:aa:be:90:e0:45:42:02:4f:14:a4:af:ac:16:
         fa:70:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:06:14 2024 by rpki-client on console-ams.rpki-client.org