Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3134342e302f32302d3234203d3e203238333539.roa
File:                     3138372e39342e3134342e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          YaaXG7PKu9S2L2//y3gjUIezldExPZ2r8uqPn/eNXes=
Subject key identifier:   72:53:90:C4:F9:49:4B:FE:F5:A4:0B:78:82:21:4E:85:B7:7A:C5:6E
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       65F279A8AA8CF83F7C0CAEDF9057705B5B6E30D3
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3134342e302f32302d3234203d3e203238333539.roa
Signing time:             Fri 09 Aug 2024 17:19:09 +0000
ROA not before:           Fri 09 Aug 2024 17:14:09 +0000
ROA not after:            Fri 08 Aug 2025 17:19:09 +0000
asID:                     28359
IP address blocks:        187.94.144.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f2:79:a8:aa:8c:f8:3f:7c:0c:ae:df:90:57:70:5b:5b:6e:30:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:14:09 2024 GMT
            Not After : Aug  8 17:19:09 2025 GMT
        Subject: CN=725390C4F9494BFEF5A40B7882214E85B77AC56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:b3:ac:9a:e3:54:dc:0d:f7:de:ef:9d:33:
                    91:10:e6:34:2a:80:69:f6:12:85:0c:79:fe:e6:5b:
                    fa:55:b7:9b:6f:9d:e0:49:1f:05:5d:51:fc:e8:3c:
                    48:ba:fb:e2:e3:8d:d2:d0:5f:5a:7d:b4:2f:0f:04:
                    65:88:95:02:23:39:3f:47:dd:eb:88:54:07:d1:50:
                    ec:47:27:0d:1d:d4:5c:95:39:a5:03:50:9c:53:37:
                    45:1e:28:67:d7:aa:10:cb:65:24:41:ee:55:fa:3e:
                    9a:2d:33:3b:bd:81:97:35:41:fd:75:a0:17:a8:eb:
                    88:5c:dc:7c:88:2a:f8:24:4a:aa:f1:e3:c8:b1:42:
                    00:04:c4:8f:14:5e:33:87:f0:dd:74:27:bf:68:48:
                    f1:42:c9:ef:25:28:59:63:70:d7:53:af:8e:ab:1a:
                    3a:cf:cc:01:54:23:7f:9a:f9:2f:c2:73:da:a8:59:
                    7b:2f:da:08:d3:7c:da:36:a7:12:f4:4b:08:68:13:
                    e6:52:31:4f:8d:5a:76:67:ec:28:5a:8d:5f:2b:3e:
                    03:5b:02:27:60:c7:34:1d:d8:6b:29:1d:f3:9a:5a:
                    ef:ce:8a:8c:53:ce:92:b9:11:d6:9a:e3:c4:48:5b:
                    b1:33:65:06:6e:d6:1e:98:b2:d3:5b:0c:7f:50:83:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:53:90:C4:F9:49:4B:FE:F5:A4:0B:78:82:21:4E:85:B7:7A:C5:6E
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3134342e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:57:42:26:19:fd:bf:f7:56:e5:d1:0b:9b:2d:b0:a2:ef:6a:
         f8:40:d4:3b:9e:dd:d9:ea:b7:71:7f:c1:ab:a3:68:c0:87:74:
         d4:1e:c1:c8:31:56:91:bb:2d:52:bc:d0:21:de:18:68:15:45:
         72:8c:61:25:2f:dc:02:43:55:83:b7:44:42:aa:39:1b:38:76:
         92:12:bf:14:61:ef:4b:3f:af:71:85:53:20:a0:6c:cd:2c:2e:
         88:bb:a6:bc:f3:6f:05:5e:03:49:14:45:35:92:70:b9:3f:d0:
         70:11:42:5c:e0:14:f6:40:f3:b6:20:0f:80:03:4a:01:83:94:
         e3:2c:26:45:70:16:c7:fc:10:fe:b4:9f:b3:fd:8f:7a:d0:ce:
         7c:36:15:ea:95:17:50:3d:61:fb:40:35:51:1f:1d:f4:10:c0:
         7b:85:37:1a:b2:f6:f2:13:75:86:02:a8:64:3c:1f:d9:91:1e:
         73:6c:7f:1b:a5:79:9e:bb:7d:2c:7a:95:36:93:1d:88:1b:0b:
         0f:76:91:8a:bd:b1:8d:2c:55:ed:16:76:83:fd:92:ae:b6:35:
         fe:8c:54:21:af:5b:e7:54:61:55:d2:12:8b:7b:af:c8:ee:a1:
         3e:6f:8b:cc:cc:08:ee:87:02:7f:d7:da:7a:8c:64:31:0d:df:
         12:4c:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:07:36 2024 by rpki-client on console-ams.rpki-client.org