Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132302e302f32312d3231203d3e203533313235.roa
File:                     3138372e3130382e3132302e302f32312d3231203d3e203533313235.roa (raw, json)
Hash identifier:          GfI4VIndRKL9qXIPMUu5NCsJoZc1RLrNQ8GpuyyVID4=
Subject key identifier:   E0:BE:07:EE:BE:4A:D0:92:FF:62:3E:DB:D8:8E:A9:B2:82:B7:27:1D
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       3639E1987F4DFD36870407D056391100CC05BE5D
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132302e302f32312d3231203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        187.108.120.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:39:e1:98:7f:4d:fd:36:87:04:07:d0:56:39:11:00:cc:05:be:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=E0BE07EEBE4AD092FF623EDBD88EA9B282B7271D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:a6:07:5d:67:d8:48:d1:d5:33:43:14:3d:
                    c6:8e:a5:95:9a:be:27:dc:4b:40:b8:fd:8d:8a:4f:
                    a4:10:6b:66:26:93:3e:7e:2a:a4:5d:d0:36:68:66:
                    5e:e6:e8:a5:4a:8f:ff:24:3e:9e:08:2c:50:e2:df:
                    83:fe:ea:69:2e:da:94:97:95:0a:83:8f:80:f1:fe:
                    2d:65:e0:a9:63:f8:65:6b:10:e3:62:f4:cf:19:07:
                    db:aa:aa:25:9b:ad:a0:a2:6d:8f:e1:2f:3b:09:77:
                    fe:43:7d:77:d7:3e:76:ca:77:e8:a0:b4:b1:9d:73:
                    d9:bc:43:ab:57:cc:f5:c7:a3:b8:52:eb:4a:85:70:
                    5d:81:20:8e:66:51:74:e5:d2:7a:fa:6e:c0:d0:03:
                    b5:a7:fb:34:94:9b:7b:1b:89:d0:b3:a3:02:93:9b:
                    75:22:dd:76:6b:98:f9:98:44:eb:69:18:5e:f5:36:
                    fa:2c:dd:d3:a3:b9:ac:f9:c1:8e:28:15:54:5d:f4:
                    f6:97:e7:21:21:2b:84:fc:03:01:d1:f0:98:35:e9:
                    4f:33:4d:27:f8:90:b3:a5:eb:cd:7f:39:4e:f3:d8:
                    67:ea:13:5b:1d:b8:e3:df:7b:ed:64:e2:3b:15:a6:
                    17:e9:7a:36:3d:0a:d1:1e:39:72:38:07:31:86:98:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BE:07:EE:BE:4A:D0:92:FF:62:3E:DB:D8:8E:A9:B2:82:B7:27:1D
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132302e302f32312d3231203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:30:49:6f:7e:0d:a6:04:5b:7c:eb:5c:2f:76:b3:59:d6:80:
         27:16:f0:3d:85:2d:fd:97:63:5b:2d:94:74:54:aa:b2:69:1f:
         70:34:23:74:5b:0a:69:51:fc:5d:1f:50:12:25:24:2b:0c:70:
         84:07:4e:17:29:9f:c5:66:41:57:05:44:c6:15:84:91:fa:d9:
         3f:62:56:9f:b3:b0:ce:42:a0:f1:05:2c:79:25:c5:af:ac:a9:
         5b:5a:33:18:a8:fc:9b:0d:58:35:46:26:c3:8d:13:15:9d:32:
         f7:37:f3:18:70:f2:ff:f0:15:8a:8c:18:8d:c4:e5:01:65:20:
         2c:97:2c:9f:b2:96:33:79:fb:f0:89:af:72:29:48:5f:49:83:
         7b:24:ce:53:8e:4c:31:cc:a7:c2:ae:03:89:5d:b0:79:e5:91:
         be:a1:30:78:a8:1c:1f:15:ab:c4:15:b3:5b:84:f4:8f:5d:4a:
         c1:76:9d:36:a5:45:ec:a0:7f:ec:3b:62:af:d3:7c:fa:8a:8a:
         78:69:f2:59:d4:bc:a4:08:d4:7e:3d:0b:1d:e8:3e:d7:c1:65:
         fe:14:b6:bf:50:87:4f:8a:7e:cf:46:88:be:35:d3:02:10:2d:
         cd:11:28:0c:43:35:bb:93:0f:e3:bf:64:28:6c:89:55:1c:f7:
         10:4c:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:56 2024 by rpki-client on console-fra.rpki-client.org