Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa
File:                     3138372e39342e3132382e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          TfF46vczlZTh0DuWRGx/ob/08soVnP+Jlgc0fqePqqA=
Subject key identifier:   E0:43:95:69:F8:D7:9B:19:7E:7F:31:5F:EC:AB:2B:CC:25:B0:36:02
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       657DBDC0B95C5BDAD317E96BF2723841B1C044D1
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa
Signing time:             Fri 09 Aug 2024 17:18:54 +0000
ROA not before:           Fri 09 Aug 2024 17:13:54 +0000
ROA not after:            Fri 08 Aug 2025 17:18:54 +0000
asID:                     28359
IP address blocks:        187.94.128.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7d:bd:c0:b9:5c:5b:da:d3:17:e9:6b:f2:72:38:41:b1:c0:44:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:13:54 2024 GMT
            Not After : Aug  8 17:18:54 2025 GMT
        Subject: CN=E0439569F8D79B197E7F315FECAB2BCC25B03602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:f7:bd:1c:08:d9:4d:7b:d8:fb:1d:f5:5f:
                    08:07:26:70:85:4a:06:ec:6a:2e:19:eb:0b:38:bd:
                    ac:58:d6:d2:70:60:c3:f2:cd:f5:07:64:4f:aa:fa:
                    c1:d8:2e:8a:ab:f2:85:f1:01:a5:65:86:5c:03:50:
                    41:d3:2f:2b:36:b8:cd:ed:b4:0f:58:35:a0:2c:d1:
                    5c:b0:95:16:fc:f1:bb:7d:e0:13:2b:46:3d:47:cf:
                    92:d7:92:d3:35:6e:f1:28:9c:a8:ab:66:18:03:fd:
                    ea:e5:9e:ef:7c:61:48:e0:5e:c8:a7:7f:b0:c6:38:
                    66:18:bd:63:98:d9:05:ac:3d:7f:c2:f9:48:ea:92:
                    5a:d4:5a:66:fb:98:1e:92:ce:15:9b:76:5e:27:66:
                    3a:35:7e:d9:d0:5a:d3:dc:89:0d:66:b4:10:b6:01:
                    c2:3d:27:f6:b9:40:ce:51:b2:75:9a:98:f4:51:bd:
                    68:21:13:af:8b:98:e7:23:02:79:28:f0:48:0e:1d:
                    b3:b2:c3:06:7b:42:36:5b:88:8c:2a:46:04:8b:60:
                    00:09:c6:e0:4b:5c:8b:51:0b:a2:0a:a2:87:42:ad:
                    5f:2b:c6:0c:86:88:0e:41:45:45:1d:4d:db:42:85:
                    7a:b3:d0:46:a7:c9:35:e1:e3:03:94:53:a0:e6:2e:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:43:95:69:F8:D7:9B:19:7E:7F:31:5F:EC:AB:2B:CC:25:B0:36:02
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:18:9a:be:4a:8b:08:dc:8e:9b:6c:c7:8d:2e:27:94:4b:f6:
         df:be:57:35:fa:6e:f2:a7:8d:73:ff:eb:b6:59:ec:9b:b5:b3:
         2f:e2:20:d3:18:20:a5:79:f6:46:66:fd:c6:dc:e2:c5:54:a0:
         de:aa:df:fa:47:bd:3c:2d:6b:3d:fa:6b:f4:b5:dc:ea:5d:ae:
         97:8d:ce:8c:04:8d:c7:a9:3a:9e:8f:ad:58:38:1a:a0:40:ac:
         b4:35:aa:bb:32:6f:dc:8f:6f:2a:8a:ab:00:00:18:34:2d:bd:
         73:34:ac:32:be:a2:0c:61:1c:a4:94:8b:10:95:cc:3f:ed:47:
         55:90:48:0a:e9:31:d0:0f:ca:86:8e:6d:d2:67:4e:b8:e9:42:
         e5:1a:dd:31:29:4b:5e:88:2d:88:41:76:48:ac:33:37:96:46:
         38:40:00:12:67:8b:17:cd:b6:3d:aa:7c:ff:87:36:88:71:b4:
         48:c3:86:5b:49:59:e5:bc:15:9c:56:54:c2:46:5a:94:93:51:
         f7:94:60:3d:98:eb:bc:24:8f:a4:56:35:a7:b1:71:ca:3a:a7:
         13:b2:79:3c:5b:43:d9:96:0d:20:88:8b:78:28:3a:f0:83:6f:
         2e:12:cd:85:3e:02:cf:a1:55:1e:b6:ba:59:31:61:fa:87:fb:
         8c:f8:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:07:36 2024 by rpki-client on console-ams.rpki-client.org