Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/3138392e38342e302e302f32302d3234203d3e203238333632.roa
File:                     3138392e38342e302e302f32302d3234203d3e203238333632.roa (raw, json)
Hash identifier:          7NcxgOeDT5kmQl8Sxpz9iY/9s3Qw+2yS5cIfUwDBdB8=
Subject key identifier:   A3:83:FA:78:12:55:A4:33:33:97:0B:F6:11:B3:C6:83:69:94:C1:12
Certificate issuer:       /CN=82F50432BA8427D157709F5EB0F6ECA7498B3E40
Certificate serial:       44C01CDC898F2015D6499D86F89196AA3678C52A
Authority key identifier: 82:F5:04:32:BA:84:27:D1:57:70:9F:5E:B0:F6:EC:A7:49:8B:3E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82F50432BA8427D157709F5EB0F6ECA7498B3E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/3138392e38342e302e302f32302d3234203d3e203238333632.roa
Signing time:             Thu 04 Apr 2024 16:06:28 +0000
ROA not before:           Thu 04 Apr 2024 16:01:28 +0000
ROA not after:            Thu 03 Apr 2025 16:06:28 +0000
asID:                     28362
IP address blocks:        189.84.0.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c0:1c:dc:89:8f:20:15:d6:49:9d:86:f8:91:96:aa:36:78:c5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82F50432BA8427D157709F5EB0F6ECA7498B3E40
        Validity
            Not Before: Apr  4 16:01:28 2024 GMT
            Not After : Apr  3 16:06:28 2025 GMT
        Subject: CN=A383FA781255A43333970BF611B3C6836994C112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:65:e5:dc:05:31:44:ff:ca:f0:6c:29:a1:
                    53:e4:77:07:bc:4c:47:a8:62:21:28:8d:79:7e:a4:
                    5e:e0:09:7e:50:fd:ab:e1:a6:8b:31:3c:d6:4c:82:
                    9f:d2:76:21:7b:83:58:7c:ea:7b:09:3a:17:6f:80:
                    4c:53:cb:a5:ca:34:0b:01:b4:b9:1f:c9:16:f4:ad:
                    8d:b4:c6:b4:c3:28:06:f1:ef:6f:55:eb:65:36:ca:
                    32:8b:06:05:33:79:e4:9d:76:84:b9:6d:c2:04:40:
                    10:5d:94:5f:ec:cb:da:93:76:36:36:37:a9:62:e1:
                    6e:b3:a7:71:2e:89:11:e4:e1:8b:ee:c4:e3:a3:9a:
                    06:c2:7b:73:e4:00:65:e6:f7:07:67:3a:5a:22:e0:
                    49:60:80:b3:f7:fd:c2:f9:2e:09:b4:c2:bc:d0:37:
                    66:d7:72:1d:2e:67:d5:ed:9a:78:cf:17:a9:2a:19:
                    c0:43:ba:06:70:46:36:07:ff:7d:47:38:11:fa:1f:
                    bc:1a:f0:05:31:ab:fe:ef:82:73:14:8e:17:07:93:
                    1a:51:9c:d7:b6:c3:9a:e2:6f:a0:a7:fd:d1:c5:ef:
                    45:74:e6:21:86:27:24:54:f1:ce:3a:71:cf:95:bd:
                    a6:16:14:b2:f3:6d:30:22:aa:65:5e:fc:91:d1:d4:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:83:FA:78:12:55:A4:33:33:97:0B:F6:11:B3:C6:83:69:94:C1:12
            X509v3 Authority Key Identifier:
                keyid:82:F5:04:32:BA:84:27:D1:57:70:9F:5E:B0:F6:EC:A7:49:8B:3E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/82F50432BA8427D157709F5EB0F6ECA7498B3E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82F50432BA8427D157709F5EB0F6ECA7498B3E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/3138392e38342e302e302f32302d3234203d3e203238333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:72:36:85:98:6a:c2:4a:b4:30:7d:bc:fd:17:03:ce:7b:b0:
         5e:1c:3b:24:5c:21:11:60:ce:40:07:bc:13:58:9c:15:c3:ed:
         be:6c:db:63:2c:17:19:8d:9d:7d:f7:0d:5a:3f:9a:41:79:62:
         fa:55:de:a8:af:9b:b5:c9:bc:e8:dc:ac:c3:98:d4:ef:c2:5b:
         b5:3f:97:7d:69:f4:9b:33:31:b5:6d:8a:82:f5:00:24:47:46:
         65:89:fc:7e:8d:1b:76:89:86:30:d1:84:09:e7:56:3a:b4:86:
         3e:54:08:98:a0:20:03:5e:8d:e1:71:07:a5:70:dc:e6:ff:c8:
         4f:c9:79:63:36:92:cb:57:44:2d:07:3d:c7:f0:17:03:9d:a1:
         80:2f:0f:a0:07:f4:dc:7d:82:54:02:ab:7e:81:84:46:88:a2:
         5a:d8:eb:6c:ca:9c:2c:56:c8:dd:8f:58:d2:58:e9:cf:5d:3e:
         ce:ee:cf:bf:e0:fc:ad:c0:db:99:ff:62:f8:c5:c6:bc:1f:22:
         ec:40:5a:6b:2b:9e:5c:e9:9e:a1:a3:be:6b:06:19:60:75:9e:
         66:67:63:33:8e:f4:12:b4:fe:a3:8b:b5:c7:43:c3:5a:e3:53:
         49:a7:58:41:f1:ca:b4:e1:5e:2f:ef:fb:f4:01:b5:be:bd:18:
         24:41:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 08:57:11 2024 by rpki-client on console-ams.rpki-client.org