Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3137362e302f32302d3234203d3e203238333539.roa
File:                     3138392e37362e3137362e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          7508v6T/rC9vEjQ6UY5akWx/J4SUE7ypku+0UyY8cGg=
Subject key identifier:   6F:28:ED:09:65:A3:D1:92:18:34:2B:7A:2E:6E:8F:26:53:A6:77:E8
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       42281D6CF1A578E85BC408C6FE1A839F270950E1
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3137362e302f32302d3234203d3e203238333539.roa
Signing time:             Fri 09 Aug 2024 17:17:07 +0000
ROA not before:           Fri 09 Aug 2024 17:12:07 +0000
ROA not after:            Fri 08 Aug 2025 17:17:07 +0000
asID:                     28359
IP address blocks:        189.76.176.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:28:1d:6c:f1:a5:78:e8:5b:c4:08:c6:fe:1a:83:9f:27:09:50:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:12:07 2024 GMT
            Not After : Aug  8 17:17:07 2025 GMT
        Subject: CN=6F28ED0965A3D19218342B7A2E6E8F2653A677E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:45:80:a2:24:ca:b8:93:08:1f:e5:6d:df:
                    21:72:76:aa:f0:11:b2:f1:ba:36:e3:cf:cb:de:86:
                    de:b6:f9:5b:fc:ad:47:e5:4d:5f:62:be:28:3d:f1:
                    ba:b1:1d:71:af:34:92:9d:c5:0c:fb:ff:58:e5:46:
                    ee:c1:f0:01:42:06:c8:58:24:bd:c9:9c:80:d2:52:
                    6f:79:e1:9d:61:b3:17:e0:40:3c:46:3b:3b:ba:50:
                    d3:17:75:39:e3:9d:b9:c1:de:1e:00:61:46:1b:d2:
                    b8:ee:f3:31:16:00:88:8a:63:e4:78:25:d5:4f:8d:
                    18:5b:80:1e:55:7b:bd:a6:ef:03:5a:f2:f8:e9:09:
                    3f:95:ab:73:15:63:76:62:58:65:9c:09:05:3a:41:
                    fd:76:69:fb:fc:de:98:a6:41:c7:81:3e:52:93:5d:
                    76:13:94:b5:f2:15:44:15:d4:51:7f:44:b2:2a:09:
                    d6:a8:c6:51:29:cf:ab:8d:2e:3f:1d:58:db:35:ab:
                    fc:55:23:68:4a:1f:f9:7e:f5:3a:55:1f:0a:e6:f1:
                    9d:d6:28:fb:7d:39:78:e2:48:97:6b:c9:ed:4e:e2:
                    d5:6d:47:0e:ef:9c:b8:63:73:23:1b:11:c3:83:88:
                    eb:fc:c9:e5:8b:ed:ec:e0:af:41:8a:a8:3a:d5:60:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:ED:09:65:A3:D1:92:18:34:2B:7A:2E:6E:8F:26:53:A6:77:E8
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3137362e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:45:9b:71:71:6d:8d:22:1a:dd:d3:ae:1b:6d:07:47:96:
         a3:d6:73:eb:03:ed:93:52:d8:04:9a:dc:75:b9:99:b7:e9:df:
         22:09:0f:6a:b6:5a:58:e3:fe:92:c1:3c:e9:28:c6:1d:59:e1:
         e9:72:20:7b:13:af:d5:cb:ca:56:75:88:93:9e:f4:50:a6:d6:
         8e:81:3e:3c:e8:09:24:20:f2:18:0f:20:45:e9:6e:5e:54:f2:
         c3:b0:7e:b9:a3:e3:06:84:10:48:02:29:72:6b:fd:02:5b:ae:
         32:8c:b1:5c:61:ef:d0:22:45:bd:31:92:55:4b:42:58:fe:48:
         d2:fb:81:b5:9c:17:f9:b8:12:fb:f6:cf:02:1a:65:51:af:79:
         b5:b3:2d:0f:90:10:13:cb:cb:17:98:bc:eb:d8:73:2b:2b:d2:
         01:de:7a:af:e1:a7:71:6a:91:9c:fd:87:07:3f:08:92:03:69:
         f0:ee:3e:51:4a:52:50:a0:32:45:40:f4:a7:00:84:d8:51:61:
         75:c6:8a:3f:2b:2a:68:5e:ea:54:1c:de:ce:23:21:92:e1:ac:
         42:e7:1d:d3:49:05:07:d9:f9:d7:47:25:cc:cc:42:da:0a:47:
         5f:6c:83:a9:a0:1c:67:16:0f:24:8b:42:7f:63:be:78:c6:7c:
         ca:a0:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org