Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131362e302f32322d3232203d3e203533313235.roa
File:                     3138372e3130382e3131362e302f32322d3232203d3e203533313235.roa (raw, json)
Hash identifier:          QrNu6Zl+RUc1qwrS02LlJhyi6Vxbpz/ATKp/FiPnEuw=
Subject key identifier:   7E:0D:06:97:92:DE:49:A1:6A:32:8E:D1:A4:D9:CA:59:71:AF:60:6F
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       127C55D3B3C2517F1B6F98D46D73A323EB811078
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131362e302f32322d3232203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        187.108.116.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7c:55:d3:b3:c2:51:7f:1b:6f:98:d4:6d:73:a3:23:eb:81:10:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=7E0D069792DE49A16A328ED1A4D9CA5971AF606F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:b2:39:4b:e6:f8:41:c4:e6:a0:b3:d7:c4:
                    96:ee:09:df:81:63:31:e8:20:a4:80:26:06:0e:b5:
                    38:cb:f0:15:37:44:06:d5:7c:e3:67:1b:d9:57:6b:
                    61:a3:81:e0:52:c3:e1:55:96:25:b8:1a:74:30:1c:
                    20:a4:66:6a:6c:94:af:81:65:be:a3:d9:9d:4d:68:
                    f5:60:60:f6:b9:15:f9:9c:5a:14:11:bc:b5:2a:fa:
                    5e:1c:b9:bb:62:01:d4:26:45:a3:ba:e0:ff:20:f8:
                    d8:fb:a9:3f:da:d9:82:93:59:e2:ae:01:48:03:82:
                    72:ad:c7:bd:ed:2e:89:c2:3c:c3:c4:ec:47:4d:57:
                    33:e4:37:7a:73:cb:34:c7:19:cf:7a:a9:e4:b3:85:
                    8f:d7:17:11:17:05:1c:3b:bb:1c:0f:1b:d8:cc:c5:
                    2d:2a:34:31:e3:92:13:5c:01:14:76:ab:31:30:0c:
                    f3:94:ad:7a:42:0f:0c:8d:ce:b6:81:82:c5:42:fc:
                    09:30:2d:2a:61:f7:58:f6:01:32:1c:e8:85:18:be:
                    6d:cf:6a:c5:cb:a0:a8:be:af:aa:73:d2:dd:23:80:
                    24:c1:b4:a7:da:54:f1:d3:2b:36:16:33:0e:90:a2:
                    73:3a:17:0e:1b:ec:d3:5e:f1:0f:a7:67:1d:1a:f9:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:06:97:92:DE:49:A1:6A:32:8E:D1:A4:D9:CA:59:71:AF:60:6F
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3131362e302f32322d3232203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:63:b9:0b:ec:8f:fd:b5:b4:24:1e:7e:74:b4:a4:c8:78:
         23:93:47:f2:4a:d8:aa:be:43:d3:ac:e8:08:19:af:96:81:6a:
         40:60:38:d8:b1:7c:29:07:d2:43:02:00:e6:04:e6:24:c8:f2:
         ca:7e:63:b8:f6:ce:9f:29:d5:cb:0c:0e:8c:f5:e2:3d:64:cd:
         c6:03:4d:7e:83:d1:2c:94:36:2f:d1:f4:11:c9:cf:e6:c1:78:
         71:87:8a:6b:d9:d4:36:43:ff:e9:ab:97:b9:31:4f:a0:7a:53:
         38:52:6b:f2:e6:69:6b:a7:18:1b:4d:89:51:60:4e:de:c5:cd:
         4b:35:9f:d5:3b:d6:d4:3b:a2:b7:be:73:16:8c:83:ab:27:62:
         a5:f1:9c:3f:fd:86:95:38:4d:3d:b7:b0:e9:32:9e:b3:d6:f7:
         a1:b5:fd:d4:11:45:ae:c2:e3:b7:96:c8:e1:52:96:6e:18:7d:
         50:06:e4:e1:69:b4:e5:5a:9e:06:c2:6f:c3:1c:08:a0:e9:c7:
         3a:8c:db:12:6a:c3:ac:a5:99:4c:47:e4:ad:66:ab:1d:ca:4c:
         56:23:f6:18:5f:e1:62:1e:27:53:c8:79:a2:6a:37:a9:84:38:
         7e:b7:aa:85:bb:d9:ac:8e:65:85:0c:42:f0:b1:3b:de:fb:4a:
         e1:d3:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:56 2024 by rpki-client on console-fra.rpki-client.org