Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3138372e3131302e39362e302f31392d3332203d3e203238363234.roa
File:                     3138372e3131302e39362e302f31392d3332203d3e203238363234.roa (raw, json)
Hash identifier:          70vEopjILPjW8Hzb2h3fyQ7rPXs0rrRNhPMNadgPOa4=
Subject key identifier:   02:D3:3A:1A:9C:55:71:28:93:4B:E3:19:8A:54:B1:99:FC:C5:6C:A7
Certificate issuer:       /CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
Certificate serial:       7EB32E8D2D6A6CA29915230A32A24B9ABCD09E24
Authority key identifier: 81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3138372e3131302e39362e302f31392d3332203d3e203238363234.roa
Signing time:             Wed 03 Apr 2024 19:59:00 +0000
ROA not before:           Wed 03 Apr 2024 19:54:00 +0000
ROA not after:            Wed 02 Apr 2025 19:59:00 +0000
asID:                     28624
IP address blocks:        187.110.96.0/19 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:2e:8d:2d:6a:6c:a2:99:15:23:0a:32:a2:4b:9a:bc:d0:9e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
        Validity
            Not Before: Apr  3 19:54:00 2024 GMT
            Not After : Apr  2 19:59:00 2025 GMT
        Subject: CN=02D33A1A9C557128934BE3198A54B199FCC56CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:89:00:c9:21:27:51:32:39:40:d8:f8:fc:
                    5c:54:dc:d9:82:d5:e3:d6:16:fd:72:85:80:66:64:
                    ca:59:d2:1d:68:15:a3:30:0e:e4:ce:54:5b:18:00:
                    03:c2:e6:72:36:a6:21:95:b0:ef:d4:e2:38:99:37:
                    76:6d:d8:8f:07:60:b5:90:14:eb:18:74:bd:5b:34:
                    6e:55:88:04:ca:8d:69:cf:53:d8:f6:4c:18:44:31:
                    65:55:35:79:f9:4d:df:1f:99:83:4b:48:47:f7:83:
                    01:24:77:59:94:51:c9:bd:9e:bd:0d:bc:c0:ad:75:
                    99:42:10:86:14:76:36:ca:a5:6a:fa:e9:db:c7:ef:
                    72:62:72:5c:7e:b2:43:3b:5e:85:4e:d5:ee:ab:9d:
                    3e:f7:9d:e3:82:3c:17:e2:83:00:b1:72:24:67:e6:
                    f6:1d:db:df:a2:a8:4d:a9:89:b6:d6:be:20:80:8d:
                    7d:9a:3b:37:1d:4a:dd:e5:e2:d9:02:9b:4a:95:d7:
                    38:e4:b6:d1:98:cc:9f:8b:ee:42:fc:4e:44:97:86:
                    49:51:bc:c4:fc:08:f6:c7:66:77:aa:44:75:d1:f6:
                    84:62:ce:34:d9:e9:e6:82:f1:aa:6f:12:75:23:ef:
                    68:ea:3f:40:e3:00:4c:36:52:61:54:a7:a7:aa:0e:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:3A:1A:9C:55:71:28:93:4B:E3:19:8A:54:B1:99:FC:C5:6C:A7
            X509v3 Authority Key Identifier:
                keyid:81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3138372e3131302e39362e302f31392d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:26:4d:e8:fc:ab:e2:f3:13:fb:87:65:70:6b:b0:4c:34:
         be:6a:6a:1f:2a:c6:35:f3:c4:fc:03:d9:df:bb:86:9e:79:e4:
         23:96:ca:d1:c1:47:90:36:30:40:2d:f1:60:bf:a5:c9:b6:98:
         29:4d:19:15:70:36:ec:27:3b:67:89:9a:0b:57:19:71:f5:c9:
         4e:07:e7:05:40:3a:49:72:5d:1e:10:9f:6f:a3:16:c2:9b:eb:
         78:81:af:ec:1d:14:8a:9f:a2:ff:50:9e:72:50:b7:3f:b7:97:
         e1:fd:27:81:03:48:6a:de:f1:e3:94:6a:32:55:40:d3:50:4b:
         25:85:bc:c1:0b:fa:f5:cc:8a:a2:ec:63:83:bf:c1:d7:ab:07:
         28:ff:70:ce:55:b2:e0:fe:d0:4f:a8:ec:87:2b:46:b7:44:91:
         e6:ff:8d:b2:c1:c5:9b:1c:ee:bc:8f:8a:91:fc:47:62:c3:55:
         5d:e1:50:d1:de:09:af:0a:c9:be:01:38:b8:87:15:c7:e3:ef:
         43:8a:f6:94:a1:88:cb:af:66:24:a3:2f:2b:3f:3d:22:e7:6f:
         1c:8b:b9:d5:d1:ad:1c:66:c2:30:69:a0:4c:8e:d3:2e:24:d8:
         82:48:3a:59:e4:3d:e2:39:8d:e8:3f:22:36:a3:aa:b1:a8:b6:
         e7:3f:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 05:50:12 2024 by rpki-client on console-fra.rpki-client.org