Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32322d3234203d3e20323730353234.roa
File:                     3138372e3130332e3230302e302f32322d3234203d3e20323730353234.roa (raw, json)
Hash identifier:          GRymSngAg3EPg1F46HHax69dQUijEc0ylrnyUwHde+0=
Subject key identifier:   C7:54:6F:87:9E:88:98:F3:C0:0B:B5:11:40:5C:10:D8:F5:CA:D3:BB
Certificate issuer:       /CN=3F0335C6CC12B2730D2E127319C59A4A24756643
Certificate serial:       0AF89FF92E077B7A57F6052078EB1BE3FFE43FDB
Authority key identifier: 3F:03:35:C6:CC:12:B2:73:0D:2E:12:73:19:C5:9A:4A:24:75:66:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0335C6CC12B2730D2E127319C59A4A24756643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32322d3234203d3e20323730353234.roa
Signing time:             Mon 05 Aug 2024 00:19:27 +0000
ROA not before:           Mon 05 Aug 2024 00:14:27 +0000
ROA not after:            Mon 04 Aug 2025 00:19:27 +0000
asID:                     270524
IP address blocks:        187.103.200.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f8:9f:f9:2e:07:7b:7a:57:f6:05:20:78:eb:1b:e3:ff:e4:3f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0335C6CC12B2730D2E127319C59A4A24756643
        Validity
            Not Before: Aug  5 00:14:27 2024 GMT
            Not After : Aug  4 00:19:27 2025 GMT
        Subject: CN=C7546F879E8898F3C00BB511405C10D8F5CAD3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:e5:dd:7d:85:6b:9d:5d:0c:79:21:42:e7:
                    6b:5e:03:e4:f4:98:45:2e:af:7f:c0:1e:87:bd:87:
                    09:57:27:30:da:d4:0b:03:8d:bd:98:1b:e6:b9:c3:
                    19:c1:33:91:26:10:42:1c:5b:27:00:86:91:47:c2:
                    44:49:16:63:65:f1:d4:65:53:fa:ae:4f:63:21:48:
                    96:09:f6:69:e8:ea:05:16:99:3a:be:32:aa:64:97:
                    7a:27:07:6a:6b:8b:7d:ae:5e:b4:80:4b:c2:a2:b7:
                    3f:14:7c:33:08:5e:25:9c:a4:8c:ec:3d:14:e3:a5:
                    df:ea:03:7a:7a:b1:b0:5f:00:a3:71:2b:5f:45:e8:
                    99:09:9f:c5:08:a5:c0:f7:c2:1d:e3:7f:2b:15:01:
                    64:dd:d8:35:aa:c4:7e:e3:c1:1a:64:a4:44:85:b2:
                    f1:d3:f3:7b:b3:80:c9:c1:25:ac:4b:1a:4b:f4:95:
                    f4:a2:07:92:48:a1:9b:83:4a:9f:24:f1:ba:c0:37:
                    4b:bc:db:22:55:2d:2f:b4:73:eb:13:5e:42:3d:5a:
                    de:39:88:ae:4d:30:a4:29:94:e5:80:e8:54:02:13:
                    2d:ca:50:c6:57:04:1c:b5:db:7a:b2:b4:c8:98:d0:
                    24:02:79:fe:b7:d4:7b:35:a2:60:ed:32:ab:45:ee:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:54:6F:87:9E:88:98:F3:C0:0B:B5:11:40:5C:10:D8:F5:CA:D3:BB
            X509v3 Authority Key Identifier:
                keyid:3F:03:35:C6:CC:12:B2:73:0D:2E:12:73:19:C5:9A:4A:24:75:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3F0335C6CC12B2730D2E127319C59A4A24756643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0335C6CC12B2730D2E127319C59A4A24756643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32322d3234203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:5d:db:9f:aa:71:28:e5:2c:e8:8f:bf:a1:4c:df:e9:8c:
         d8:cf:4a:1e:75:05:b3:b0:df:a2:57:21:d0:32:21:3f:16:78:
         cb:55:cd:db:be:31:bd:f8:36:3c:bf:84:6b:5c:61:5a:6e:94:
         c9:83:ed:73:13:e4:2b:62:e5:6c:98:09:2f:fe:54:14:5e:25:
         ef:fb:aa:c4:7b:ac:67:17:a8:ee:5a:b8:13:69:8c:ba:6c:cd:
         97:f1:a5:30:22:18:d0:e3:86:82:5c:b0:bc:97:0e:17:ba:6f:
         a6:08:d3:1b:d2:d5:72:f2:01:c8:22:19:b1:a2:3e:05:47:ed:
         1e:3b:bc:df:97:1e:82:3f:f6:3a:c1:e1:77:e0:2b:94:57:27:
         fc:6f:ef:39:f4:52:1f:2e:7f:db:70:d0:9b:2e:2a:c2:72:fd:
         87:80:62:80:1f:3c:0e:85:79:c6:7a:36:83:ec:85:60:08:f3:
         ff:80:4f:d7:c5:f0:9b:43:77:9f:34:9a:72:97:8b:96:8c:fa:
         ef:ec:66:95:1c:fe:8b:b2:3d:91:76:24:7f:cf:fe:3a:01:a4:
         78:7b:16:da:d8:9e:15:82:1c:ca:01:10:44:27:af:9d:2e:74:
         90:52:ed:dc:aa:64:1f:53:02:df:cc:2f:34:aa:f2:3f:ed:0d:
         a6:56:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:40:03 2024 by rpki-client on console-fra.rpki-client.org