Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37372e302f32342d3234203d3e20323731333533.roa
File:                     3139302e35322e37372e302f32342d3234203d3e20323731333533.roa (raw, json)
Hash identifier:          BM0G/0xRB9qrltJ96yVwUoMbWobxJYMM8Nvs1pP3YgI=
Subject key identifier:   F2:BC:DE:63:77:1C:AE:A1:3A:82:C6:45:50:79:C9:06:F2:D9:A0:65
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       373A7E1EEB80B05CE9F8242E5B70EE37A60B5C90
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37372e302f32342d3234203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:47 +0000
ROA not before:           Thu 04 Apr 2024 20:50:47 +0000
ROA not after:            Thu 03 Apr 2025 20:55:47 +0000
asID:                     271353
IP address blocks:        190.52.77.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3a:7e:1e:eb:80:b0:5c:e9:f8:24:2e:5b:70:ee:37:a6:0b:5c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:47 2024 GMT
            Not After : Apr  3 20:55:47 2025 GMT
        Subject: CN=F2BCDE63771CAEA13A82C6455079C906F2D9A065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:01:29:62:ee:5a:48:08:17:09:c4:6a:c5:
                    f1:09:d2:0d:c8:1e:52:2a:c8:c1:13:3b:cb:58:10:
                    96:b1:4c:ea:c1:aa:74:ba:9b:4f:8d:d1:b9:23:e6:
                    a8:78:84:71:85:d4:9c:0b:0e:43:91:e0:ee:b5:1e:
                    5a:95:d9:5a:2d:2a:58:ea:96:a6:e5:d5:23:b6:a5:
                    ca:e2:4a:1c:12:43:6c:f8:c2:2b:b5:eb:79:c2:1a:
                    31:ca:1f:df:d2:a2:81:0d:1c:2f:13:44:48:f7:3f:
                    49:b1:ba:ad:fe:03:c9:f1:dc:0c:3d:69:69:8c:06:
                    4e:bd:5a:7a:db:a9:6b:15:c3:ec:0f:6f:e4:43:4b:
                    46:70:7c:65:14:08:d0:da:19:cc:83:c2:96:55:22:
                    04:94:43:a4:46:0a:23:a7:74:b5:d5:10:48:d3:16:
                    10:1f:ea:de:c8:08:9e:d9:4d:b2:94:31:82:f7:9c:
                    fe:b6:0f:b7:3b:0f:55:c5:d4:3a:d0:d9:37:b1:a8:
                    8a:8e:14:a2:af:ee:fa:2d:f0:02:f3:08:ea:35:aa:
                    21:9d:45:ac:ea:28:af:be:16:63:00:e6:39:a3:7d:
                    db:e3:f4:94:42:53:f0:a3:82:a2:03:4d:09:74:ba:
                    22:f3:bf:db:07:21:2f:5c:13:c4:ba:4d:97:9b:7d:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BC:DE:63:77:1C:AE:A1:3A:82:C6:45:50:79:C9:06:F2:D9:A0:65
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37372e302f32342d3234203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:21:dc:8b:b8:cd:64:9a:06:35:5e:76:1b:2c:09:45:8d:3f:
         77:6d:b0:41:79:bf:c7:a8:2b:d9:cf:87:f4:d6:9f:9c:9f:f4:
         e4:d7:00:f2:37:f6:65:bc:55:79:a6:26:68:25:12:d7:22:b4:
         4b:0f:7d:81:5e:c7:f7:f6:e7:1b:22:a6:4b:a5:ab:f6:3d:82:
         45:ed:da:46:78:2a:df:b8:70:b5:bf:0b:7f:2a:75:5f:eb:52:
         1a:29:ce:e2:6e:38:db:c9:d0:7b:1c:a0:3c:00:e8:01:25:88:
         ee:68:dd:0b:18:a2:c3:de:ae:a4:e6:d1:9d:da:85:63:f8:ba:
         87:14:91:23:f6:92:19:90:ac:04:21:9d:c7:ec:c0:2b:4b:5a:
         37:b2:e9:88:bc:0b:11:e0:10:94:a4:a7:7c:81:bb:e2:5a:0f:
         2a:87:4a:08:8a:9a:2d:f6:6b:ff:64:33:59:e9:bf:cc:dc:cb:
         90:ec:9d:89:37:62:a9:f6:87:c1:27:4b:12:7e:3d:7f:dc:d8:
         41:1d:eb:66:eb:73:1c:38:f6:3a:3e:ef:7d:a8:d4:3f:d1:4a:
         85:5e:be:42:ef:d7:64:e6:5c:c4:fd:81:21:c2:26:51:0c:8d:
         3d:b2:de:5b:c3:43:6e:f0:66:08:b0:5a:e0:05:88:cc:45:e9:
         82:b6:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 14:31:32 2024 by rpki-client on console-ams.rpki-client.org