Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa
File:                     3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa (raw, json)
Hash identifier:          xsFd1z8vWjVuOkb3cc/ridD5gdBlxbhQFj+Gs8W5xO8=
Subject key identifier:   DC:9A:F7:DA:EC:42:BA:88:EB:98:02:7D:D9:0F:34:58:0C:A6:7E:15
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       5BB77F09C776EE4ECDA91E79F76A4EACCCBC3689
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        187.108.112.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:7f:09:c7:76:ee:4e:cd:a9:1e:79:f7:6a:4e:ac:cc:bc:36:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=DC9AF7DAEC42BA88EB98027DD90F34580CA67E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:13:b4:5a:08:3c:b1:55:52:ed:41:1a:d7:
                    cf:48:50:58:dd:3f:81:8d:fd:d7:37:1a:56:76:cb:
                    c9:1c:aa:a4:17:95:e7:e0:30:da:35:fb:98:15:f1:
                    4c:fe:04:e5:c5:99:75:9e:d8:84:11:66:cb:78:2b:
                    29:83:f9:a9:23:64:3d:0b:c8:cc:b2:96:74:85:d3:
                    28:a3:97:c3:cc:d5:45:1d:9e:0d:84:e0:66:bf:2d:
                    83:c3:33:c0:c1:0e:e7:ba:a5:63:21:4d:2f:3a:6a:
                    d6:4d:d9:85:ee:59:ae:db:33:f3:6d:54:ce:12:8f:
                    b8:98:89:c6:54:6c:9a:b3:b4:ca:a7:f1:9a:48:be:
                    7c:2c:fd:7e:fd:bb:0c:d0:e3:d4:aa:23:1a:d2:42:
                    a5:8d:b1:2c:95:a9:b3:15:72:81:a2:ab:71:f1:8d:
                    52:7e:51:2a:40:f5:09:ec:f2:0f:ed:50:5d:d6:24:
                    7d:c4:62:44:24:a0:cd:12:ae:60:59:1f:c1:df:c4:
                    6f:62:33:84:cb:36:d4:0a:7e:8c:3e:28:f0:0f:38:
                    6f:8f:88:13:bd:20:64:d7:16:5f:1e:5d:f0:8d:fd:
                    ed:fa:04:d2:b3:34:00:ab:b7:80:8f:18:7f:b4:38:
                    b0:35:23:7c:21:19:7d:70:a3:54:2b:2e:b6:7f:9b:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9A:F7:DA:EC:42:BA:88:EB:98:02:7D:D9:0F:34:58:0C:A6:7E:15
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:97:10:4d:d8:87:c6:fb:aa:f7:7b:76:ea:cd:cb:8a:a5:
         c6:4e:a2:02:19:10:3a:0e:31:52:28:ea:db:df:a6:e3:62:c3:
         8d:c3:fd:e9:5c:04:da:52:82:7e:25:5b:31:5e:77:fc:e8:5c:
         fc:e2:f8:99:df:2c:c2:af:79:a4:f7:d1:25:bd:5b:d5:35:c0:
         15:ef:96:e4:72:22:84:3f:ea:b3:ff:73:0b:e1:da:df:27:50:
         79:85:ce:f1:ed:a2:ae:00:85:ae:1e:02:9b:77:c6:8f:31:b9:
         f7:71:80:78:ee:ba:4d:7b:cf:e6:b5:68:a7:23:66:58:be:7e:
         d5:a5:75:c1:f4:fc:30:d1:9e:c0:ad:13:96:be:10:2d:96:eb:
         d7:e6:ed:05:fe:0f:1d:0f:91:e3:74:eb:9f:00:4b:85:4c:e8:
         3d:28:3c:30:8b:28:fc:f6:8d:bd:9d:49:29:b5:53:bd:3e:9d:
         48:66:c1:c2:38:36:32:5f:63:51:9a:f5:51:b1:d1:3c:74:60:
         ec:e1:6e:f9:dd:07:df:2d:12:e4:29:68:fb:81:38:6c:e0:39:
         91:2b:50:3a:a9:d8:4f:88:a8:7a:89:c9:8f:ff:0d:c3:96:db:
         6d:bc:47:20:6b:09:eb:c0:24:14:b9:08:80:55:f2:26:88:12:
         8d:99:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:56 2024 by rpki-client on console-fra.rpki-client.org