Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3232203d3e20323730393632.roa
File:                     3138372e38342e3132302e302f32322d3232203d3e20323730393632.roa (raw, json)
Hash identifier:          i320Iya62rql+Al5UY50OMRUwNhzALfCTrebzhSUxjU=
Subject key identifier:   63:3F:ED:22:C4:DF:07:CC:22:25:E9:78:55:CC:01:F1:B8:F2:C8:55
Certificate issuer:       /CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
Certificate serial:       563BDB12E65CA59BEEF27451C0E57EB0129D8DF6
Authority key identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3232203d3e20323730393632.roa
Signing time:             Tue 04 Jun 2024 18:38:11 +0000
ROA not before:           Tue 04 Jun 2024 18:33:11 +0000
ROA not after:            Tue 03 Jun 2025 18:38:11 +0000
asID:                     270962
IP address blocks:        187.84.120.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3b:db:12:e6:5c:a5:9b:ee:f2:74:51:c0:e5:7e:b0:12:9d:8d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
        Validity
            Not Before: Jun  4 18:33:11 2024 GMT
            Not After : Jun  3 18:38:11 2025 GMT
        Subject: CN=633FED22C4DF07CC2225E97855CC01F1B8F2C855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:e9:c0:09:ed:54:98:f9:a4:09:27:36:81:
                    50:45:3a:aa:99:1a:1c:45:5b:98:85:2d:56:42:ce:
                    68:55:03:63:d3:9c:42:52:2f:77:d5:10:84:83:c1:
                    4f:de:a9:b7:06:b2:3d:43:1f:e9:10:3c:d3:48:55:
                    63:f2:59:bc:2c:fa:92:05:60:93:1c:35:85:db:af:
                    58:f2:4b:6d:b7:50:7e:d5:fc:fe:72:4c:ac:b8:74:
                    c2:35:8b:68:d5:91:05:45:e2:95:de:8f:b3:3d:11:
                    c1:fc:4e:cf:7a:43:07:15:29:40:bc:4e:c8:c8:3f:
                    2c:e8:60:a8:b7:ec:c2:db:46:69:9b:e1:ec:2b:c5:
                    af:5b:5d:52:36:00:23:6f:0e:55:8e:e4:fa:3d:a3:
                    9a:52:08:5c:75:1f:21:82:ef:97:a3:c9:96:21:66:
                    64:be:b4:cf:26:44:6c:61:63:c4:6d:33:87:a9:ef:
                    2e:96:76:10:39:bc:14:58:93:d7:de:38:78:a7:e5:
                    07:fa:7f:6a:07:cd:26:f3:3f:06:d2:9f:40:24:4e:
                    35:cb:b9:30:e3:72:00:75:48:4b:0b:1f:56:77:75:
                    3e:f4:d6:bf:5e:b5:ad:c1:0a:f1:b0:0e:b3:c3:9b:
                    2a:60:e8:dc:e6:bb:75:3f:19:42:0d:54:32:e6:b1:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:ED:22:C4:DF:07:CC:22:25:E9:78:55:CC:01:F1:B8:F2:C8:55
            X509v3 Authority Key Identifier:
                keyid:08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3232203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:3d:9b:75:10:c7:94:c5:95:aa:7a:d0:bf:ca:46:7c:f3:
         e7:af:33:b5:54:f7:9b:c7:c4:d7:cb:31:5d:d7:df:f3:ac:8b:
         1c:5e:ec:84:90:85:fb:d5:f6:23:7c:8a:1b:6f:d9:6c:67:dd:
         20:e0:38:91:91:0a:80:53:1e:b5:f6:df:59:4b:8c:44:9e:02:
         cc:1b:41:ed:f2:f5:05:c8:0c:c7:02:6f:28:19:bc:3c:03:b7:
         7f:8c:b9:12:7a:aa:5c:b4:e5:94:a1:6f:89:bc:6f:eb:19:8d:
         44:a2:8a:00:96:ea:5e:73:13:f7:7e:b7:ec:32:8c:cb:61:46:
         96:b0:c4:6c:c9:64:e3:64:ce:cd:83:4c:cf:75:09:93:e1:86:
         ab:d2:07:c3:73:7f:44:76:2a:bd:51:59:d5:8d:be:ee:a0:1a:
         48:93:98:38:9b:ab:a6:c1:c0:63:5d:40:92:63:28:80:ca:c9:
         5e:ab:30:68:8b:18:5f:5a:38:ac:92:44:ee:13:1b:af:dd:b7:
         c9:65:21:78:a8:9d:3a:8c:90:f2:9c:eb:31:2a:df:35:57:fe:
         e1:c1:2a:45:38:ce:46:cc:ee:5d:39:bf:8c:48:d2:8d:8a:17:
         2b:eb:dc:e1:db:44:24:ac:98:ba:b5:b5:ca:70:2c:bc:79:96:
         6b:38:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 14:28:07 2024 by rpki-client on console-ams.rpki-client.org