Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa
File:                     3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa (raw, json)
Hash identifier:          JBrYQJUsdxDIXk22VnTzXf0mVjgHsUSbjW8U2mXg31Y=
Subject key identifier:   5F:69:A9:B2:B3:32:73:7D:C2:2D:7E:3C:CB:FD:8F:D4:3A:54:C2:76
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       044987AC0AD541F49E2D873DBB90CC222B40E6F8
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        187.108.124.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:49:87:ac:0a:d5:41:f4:9e:2d:87:3d:bb:90:cc:22:2b:40:e6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=5F69A9B2B332737DC22D7E3CCBFD8FD43A54C276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:a7:ab:a2:b6:0c:01:92:79:5b:10:0d:d1:
                    4b:a5:81:38:4a:80:8b:bb:36:61:fa:79:6f:96:d8:
                    93:68:e0:f2:54:c0:81:75:91:71:83:ad:69:59:92:
                    df:79:68:f1:71:61:d1:f5:d7:0a:4f:2a:02:a3:a1:
                    52:f5:d5:06:58:2c:04:d2:5f:6b:40:bf:2e:44:7b:
                    fd:24:a7:31:bc:c9:68:76:15:7b:fd:6d:59:42:88:
                    60:9e:8e:43:1c:f2:1e:d6:ac:70:43:fd:d7:eb:3c:
                    39:4a:fb:46:a8:59:6c:3d:a9:21:58:b4:88:bf:6b:
                    93:4c:f7:95:fb:f4:64:2b:c7:4b:c3:ee:72:34:54:
                    f9:21:2f:22:56:c9:ea:f6:84:80:24:00:01:e8:56:
                    20:6d:9e:b3:d9:8f:fb:f6:76:66:68:b4:70:96:25:
                    23:1b:29:ba:a1:64:da:0d:73:e5:ed:14:fd:cf:7f:
                    7b:d7:6c:64:50:1d:a1:6a:5c:dd:d8:10:60:78:0a:
                    fd:20:3d:a2:d2:2b:e6:42:3d:5e:03:fa:25:8b:75:
                    5e:02:13:5f:20:bd:53:90:cb:a1:2f:c8:d5:c7:74:
                    aa:a9:e2:78:46:79:d9:37:25:1d:91:80:cb:22:f5:
                    83:b4:d2:db:49:77:54:2e:f2:16:43:c8:c6:31:16:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:69:A9:B2:B3:32:73:7D:C2:2D:7E:3C:CB:FD:8F:D4:3A:54:C2:76
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:03:80:4e:99:3b:37:e6:a6:09:29:92:ce:48:90:7f:8a:
         26:6b:3c:c7:5f:60:fa:d9:e1:72:68:b2:2e:30:d8:39:7b:d9:
         c7:71:49:65:9a:06:c6:48:80:36:d7:4b:d5:21:ce:a2:04:d8:
         43:40:f5:05:9f:ae:97:54:2e:93:12:62:00:52:dd:86:fb:3c:
         e2:3e:87:06:79:33:9e:2a:cc:29:22:71:66:3e:a7:6a:0d:bd:
         85:de:62:f7:54:23:7b:be:40:cc:80:43:db:16:07:27:fe:63:
         05:1c:d1:86:50:95:a6:13:47:40:64:6e:f0:f3:89:01:b3:dd:
         7f:43:5d:fe:2f:0a:79:b1:5f:5a:7a:6b:fc:2e:4f:6b:02:42:
         f3:09:4c:f0:67:df:38:36:3b:cf:10:1f:ca:1b:f5:fe:ec:95:
         ce:65:5d:13:c2:c2:b6:47:14:dd:60:e9:22:b6:ca:18:56:66:
         f1:da:9a:4c:fb:d2:6b:2c:a0:7d:23:51:4d:af:19:68:a4:48:
         29:f4:6a:f5:04:5f:1d:f7:24:1e:2d:b7:ec:f9:89:79:c6:1f:
         8e:86:5b:87:ee:1e:6e:f8:d7:d7:4b:d1:47:a2:82:a2:fb:d2:
         85:fa:9d:02:dc:6f:f7:8d:d3:87:d1:f5:b4:eb:f9:ef:f4:9e:
         6e:74:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:50:04 2024 by rpki-client on console-ams.rpki-client.org