Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37362e302f32342d3234203d3e20323731333533.roa
File:                     3139302e35322e37362e302f32342d3234203d3e20323731333533.roa (raw, json)
Hash identifier:          jslO15Vz3O/VmyYlm8MVLvl+OF4iWFzzqknCHJAHAxg=
Subject key identifier:   4B:A0:22:08:52:60:05:F2:85:2C:1F:CF:54:09:87:2B:A7:96:D8:AA
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       29F925F1C0DF8EBF528D5FA8E6EC905322F87C89
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37362e302f32342d3234203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:47 +0000
ROA not before:           Thu 04 Apr 2024 20:50:47 +0000
ROA not after:            Thu 03 Apr 2025 20:55:47 +0000
asID:                     271353
IP address blocks:        190.52.76.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:25:f1:c0:df:8e:bf:52:8d:5f:a8:e6:ec:90:53:22:f8:7c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:47 2024 GMT
            Not After : Apr  3 20:55:47 2025 GMT
        Subject: CN=4BA02208526005F2852C1FCF5409872BA796D8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:c6:ac:6a:19:9f:04:58:1a:e8:f9:f2:de:
                    e8:8d:af:97:90:c1:1f:9b:34:ac:ae:f1:9e:1d:42:
                    13:31:e4:58:7d:2f:9d:b1:3c:04:c7:27:da:8a:79:
                    18:88:f4:98:7f:39:4b:2a:4c:2f:cb:a1:73:ec:7a:
                    03:2b:34:8e:b8:62:ec:80:a3:5c:c1:0d:1e:f6:fb:
                    cd:d0:b8:25:cb:3d:12:b9:45:3c:b4:14:69:6a:ef:
                    ea:22:9c:0f:4d:d7:f7:60:98:e6:ed:01:92:50:6a:
                    8f:a0:3f:a3:99:b1:0c:52:7b:e2:a2:22:bb:46:89:
                    8a:44:35:11:34:e8:b6:cc:e3:51:b5:10:c1:4e:de:
                    61:6a:80:93:11:dc:6c:92:28:ee:e4:f7:ab:32:6a:
                    04:4f:88:2d:38:be:10:7a:8d:c4:e6:08:99:9b:7f:
                    4a:28:f1:24:c9:d5:34:5b:93:36:91:43:a6:88:1f:
                    f5:32:9d:90:a4:4c:1b:51:d9:ce:15:d6:25:d2:2f:
                    97:47:6d:90:67:a1:e6:2b:7d:73:7a:d6:07:2b:e1:
                    9c:97:ca:86:82:0e:1a:ab:40:39:9b:43:f7:ab:e5:
                    eb:84:52:e3:99:19:b6:cf:3b:65:e9:59:2b:2c:b0:
                    80:92:92:1b:2c:3b:21:b7:9c:2d:3b:8b:f2:66:90:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:22:08:52:60:05:F2:85:2C:1F:CF:54:09:87:2B:A7:96:D8:AA
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37362e302f32342d3234203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:db:eb:f8:b4:1b:0a:b1:fb:f4:e7:80:fc:4c:9e:e0:1c:d3:
         8d:6d:c3:8a:c6:d6:fb:30:a9:32:21:e4:c6:51:1e:a2:ce:d1:
         2d:55:fd:14:f7:67:16:d7:6e:2a:e0:fa:6c:b7:9e:1f:ca:47:
         c2:5c:b6:17:a3:23:36:33:6e:27:8d:e6:f7:61:76:72:29:36:
         ff:36:7c:c8:8b:1e:0b:9a:1f:48:e4:10:17:ec:f4:57:96:6d:
         56:0d:24:4c:9f:87:b5:08:6e:2d:05:f7:38:99:65:76:90:59:
         3d:b1:37:72:f1:d3:5d:2f:12:90:de:0e:9f:d9:be:5a:e6:bb:
         c3:ca:fc:cb:02:ec:a9:07:98:57:a7:ff:59:bc:9d:9d:15:6d:
         95:8b:db:b3:7a:be:f4:94:62:6f:98:31:1b:11:b0:7b:03:5c:
         5f:b5:d6:41:70:54:9d:8d:88:1c:b8:b2:27:67:4a:a3:11:58:
         4b:c7:40:3e:7b:e1:18:4f:85:cc:58:af:5b:0f:91:f6:11:e8:
         e8:8d:af:2b:fe:32:86:a6:62:04:64:13:70:36:37:46:74:d2:
         50:84:91:63:63:e0:14:15:12:89:ca:21:68:0b:11:1c:f6:93:
         61:8d:e6:39:8e:aa:34:d3:a5:47:3d:2b:03:84:a4:81:74:77:
         fe:7f:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 13:31:48 2024 by rpki-client on console-fra.rpki-client.org