Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131322e302f32322d3232203d3e203533313235.roa
File:                     3138372e3130382e3131322e302f32322d3232203d3e203533313235.roa (raw, json)
Hash identifier:          +uWkWwUeNOgWD+l3PcZJWvc3vHWWX9TdeW4kvhcsLRw=
Subject key identifier:   B0:60:C0:D8:21:16:2B:94:2F:8B:47:0C:CF:67:10:C9:8B:43:DD:10
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       76389CF5D5D869F22AE1F1DC93486610559C71
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131322e302f32322d3232203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        187.108.112.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:38:9c:f5:d5:d8:69:f2:2a:e1:f1:dc:93:48:66:10:55:9c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=B060C0D821162B942F8B470CCF6710C98B43DD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:2d:02:ad:3c:6a:86:d6:c9:88:e2:da:24:
                    3b:22:2e:48:9e:72:9b:6e:af:ea:e8:3f:3a:0d:f0:
                    89:0d:e2:44:4f:11:cc:5a:14:a7:89:5b:22:6b:52:
                    3a:07:54:62:5a:c8:f2:fa:a9:7d:99:05:f9:49:29:
                    e2:93:f6:5c:36:0c:95:99:a6:9e:54:6d:2c:d8:42:
                    91:b0:27:ff:e9:2e:c0:23:44:91:c3:c0:ae:87:22:
                    f4:28:ac:b0:6b:28:1b:0b:8f:e5:1b:71:e5:7c:56:
                    17:6d:86:15:1b:11:9a:b6:16:13:40:de:f7:56:2a:
                    a6:e6:5e:da:2d:69:53:ef:ed:31:fc:41:4c:30:22:
                    28:bd:19:4b:37:08:d5:e5:1f:90:6d:80:b2:33:38:
                    0a:01:18:17:d6:24:4a:7e:1c:10:ab:de:a0:33:91:
                    91:d9:da:2e:8c:3b:6f:7b:70:ce:5e:fa:db:51:eb:
                    ed:92:42:7c:6c:de:6a:22:08:7f:27:b1:52:ed:cf:
                    09:32:5f:5d:eb:6d:50:e0:fd:b6:9c:28:7b:5d:bc:
                    ea:b0:ba:8c:9e:f8:a5:36:d8:83:ff:41:53:fe:0d:
                    a3:4e:cf:a9:c5:19:4e:eb:62:00:b9:c1:4e:9c:d0:
                    91:93:8b:00:43:24:17:69:6c:50:24:7e:0f:83:50:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:C0:D8:21:16:2B:94:2F:8B:47:0C:CF:67:10:C9:8B:43:DD:10
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131322e302f32322d3232203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:22:25:5d:dd:b8:17:0d:5e:09:95:c4:a8:02:24:0f:17:
         51:6f:fe:82:cf:62:fb:d8:17:0c:b8:46:03:f1:54:e9:7c:39:
         69:a9:a3:93:4c:b3:90:22:98:e6:22:b9:9c:97:0c:64:80:83:
         70:80:c1:0e:fb:b8:32:83:3f:ca:59:8e:9c:17:3d:79:a8:ca:
         f4:15:37:2e:36:f0:9d:55:ca:53:91:c4:df:aa:5c:d3:13:e7:
         ed:8d:83:9c:79:e0:ce:fd:55:54:44:22:ff:f2:91:b0:15:13:
         61:7a:e9:87:71:30:9f:23:a4:dc:d3:8f:47:f2:72:3d:df:ca:
         27:38:5f:3c:9a:d2:98:e3:86:f8:a1:bb:68:34:82:b2:f9:7d:
         84:5a:35:c9:d9:f6:e9:aa:6f:84:67:3e:04:b6:8f:e9:cf:69:
         ce:20:e0:be:b3:42:7d:02:0a:14:bc:9e:7c:ec:28:d7:4a:07:
         3c:c2:49:6a:c4:16:c6:11:08:0a:67:03:fd:b7:f9:dd:4f:b1:
         50:a0:10:db:91:eb:2b:e7:46:d2:c0:ef:5a:7a:75:2f:5f:ee:
         c6:08:26:82:51:13:08:2e:13:c0:4f:a6:ba:ad:ef:4a:1e:bf:
         b3:68:c8:aa:da:e6:46:18:fd:9c:da:56:5a:34:0f:94:1f:e5:
         29:05:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:50:04 2024 by rpki-client on console-ams.rpki-client.org