Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32332d3233203d3e20323730393632.roa
File:                     3138372e38342e3132302e302f32332d3233203d3e20323730393632.roa (raw, json)
Hash identifier:          vewQarj79WSMKw4CNEJdUq+HT/EPKMpcclMAfWN/mqY=
Subject key identifier:   F5:78:44:EF:D7:6C:F9:86:B8:25:88:66:C7:76:45:4B:F8:35:28:14
Certificate issuer:       /CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
Certificate serial:       554A4C205063DDACBAAAEBE2A44EC637FE2D8AAB
Authority key identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32332d3233203d3e20323730393632.roa
Signing time:             Tue 04 Jun 2024 18:38:09 +0000
ROA not before:           Tue 04 Jun 2024 18:33:09 +0000
ROA not after:            Tue 03 Jun 2025 18:38:09 +0000
asID:                     270962
IP address blocks:        187.84.120.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:4c:20:50:63:dd:ac:ba:aa:eb:e2:a4:4e:c6:37:fe:2d:8a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
        Validity
            Not Before: Jun  4 18:33:09 2024 GMT
            Not After : Jun  3 18:38:09 2025 GMT
        Subject: CN=F57844EFD76CF986B8258866C776454BF8352814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:fe:60:70:71:7e:8a:b4:a3:32:7d:79:2a:
                    0e:63:11:75:9d:ad:92:37:a5:72:47:d5:a4:da:fe:
                    66:8b:59:d4:d7:81:c5:2b:cc:3f:37:89:e4:07:7e:
                    8c:3a:22:c8:83:0f:6c:07:6f:01:74:1f:69:b3:2d:
                    d9:3b:38:d2:1d:1d:f0:47:2e:ab:fd:91:21:58:38:
                    94:14:40:08:ea:01:1a:6a:41:38:65:a6:e2:65:bb:
                    06:34:59:95:8a:9d:fe:5a:16:ac:e8:c3:39:50:9f:
                    d5:6d:2c:35:fa:5d:81:47:d4:31:56:b8:3e:26:13:
                    a7:9a:de:b0:75:7d:1d:3f:ae:1d:9c:b5:7f:59:c9:
                    14:92:b0:cc:7d:50:54:ea:dc:9d:1f:29:6b:d3:dd:
                    a4:9e:55:0a:3b:09:b8:3a:84:fc:66:5c:a5:a1:01:
                    4a:09:34:b5:0b:b1:cf:f7:9d:05:cb:87:d5:ef:35:
                    0c:80:5d:5b:4a:1f:7a:99:92:93:5b:0f:05:2c:b6:
                    e6:35:60:fa:dd:87:98:61:62:ab:c5:19:d7:96:94:
                    d9:fa:e1:cc:f6:da:25:6c:01:9b:68:c1:48:44:58:
                    e9:47:30:2b:43:48:ce:9f:14:10:a5:d0:be:8f:fb:
                    e8:d3:99:d0:4c:59:ef:54:5c:59:71:e2:54:ea:0a:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:44:EF:D7:6C:F9:86:B8:25:88:66:C7:76:45:4B:F8:35:28:14
            X509v3 Authority Key Identifier:
                keyid:08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32332d3233203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:b6:5a:1c:90:e5:86:0b:9a:6b:cc:d8:75:29:5d:f1:1a:8a:
         fd:fa:7f:4e:b6:a8:92:b8:fd:c4:93:02:63:b8:ae:45:8a:c4:
         26:c9:19:2e:2b:52:d2:3e:c9:6f:cb:4e:01:22:54:99:60:23:
         ba:7c:39:39:f9:ae:0c:04:ff:34:85:04:ae:a7:1a:41:2a:f2:
         49:c6:cc:e7:4c:4e:dd:93:ac:ef:ca:7f:90:03:ef:f2:f5:e0:
         e8:0c:06:ff:75:cb:ab:1b:fa:35:d0:71:05:c3:64:a1:46:a1:
         a6:ae:1b:6e:e4:2b:6c:33:76:dd:ee:4e:78:af:8c:9b:bd:d6:
         02:e9:35:0f:21:07:95:eb:a0:cc:47:61:30:8e:e3:8b:92:f2:
         f4:5c:87:2b:d0:fb:93:78:c1:bd:e0:96:6b:68:f5:f5:8d:2b:
         b0:81:79:fa:70:43:ce:2a:08:9f:e9:32:3e:8e:f8:6d:5a:27:
         99:b9:38:3b:8c:67:6a:68:0d:f8:34:c4:9c:58:e1:29:07:0d:
         d1:aa:81:cf:0c:a2:60:53:76:df:2e:f3:00:09:02:bf:fb:3c:
         e2:e8:7a:2e:6b:20:4a:fc:ac:51:3a:66:94:34:ca:3d:b6:e2:
         bd:53:be:4c:7d:de:23:a8:5a:e5:f3:fd:b8:e5:de:8b:b8:b7:
         8a:cb:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 14:28:07 2024 by rpki-client on console-ams.rpki-client.org