Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323633393137.roa
File:                     3139302e35322e37382e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          twYCeZNVdu/uJXwOt56GaVMKSAddFDXj7ERKEhHo9nI=
Subject key identifier:   36:A4:D4:17:D9:D2:C6:2E:93:73:A0:15:71:8E:5D:7E:25:04:4D:4A
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       14E418805AFDD08C2A33BF7BD97B0FBF7112384E
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323633393137.roa
Signing time:             Thu 04 Apr 2024 20:55:47 +0000
ROA not before:           Thu 04 Apr 2024 20:50:47 +0000
ROA not after:            Thu 03 Apr 2025 20:55:47 +0000
asID:                     263917
IP address blocks:        190.52.78.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e4:18:80:5a:fd:d0:8c:2a:33:bf:7b:d9:7b:0f:bf:71:12:38:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:47 2024 GMT
            Not After : Apr  3 20:55:47 2025 GMT
        Subject: CN=36A4D417D9D2C62E9373A015718E5D7E25044D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:df:d6:0e:00:cf:6b:d9:98:e1:64:86:41:
                    7d:24:80:61:8f:be:ab:62:68:17:72:6c:c7:16:a9:
                    d4:05:26:38:bb:61:59:40:67:97:2e:53:4f:b7:53:
                    b7:64:ae:4e:9c:0a:c2:14:47:74:66:c8:54:69:69:
                    3b:bc:45:69:c6:2b:63:fc:a7:85:6f:61:84:ef:ca:
                    1a:f3:f9:09:0a:27:9b:ab:4f:e0:b9:25:0c:13:17:
                    e4:18:27:d7:ae:9a:63:bb:4d:d1:d8:75:4a:7b:7f:
                    5d:c9:20:01:87:6a:22:ec:26:89:93:91:4b:8f:37:
                    e6:e9:0a:58:be:7b:e0:89:b6:22:19:ac:91:c4:e0:
                    8e:f3:a4:4a:f7:ce:5b:48:1b:b9:42:2d:a1:68:c8:
                    8d:7d:0d:a2:c6:ab:30:25:21:b4:3e:80:f6:95:8d:
                    f5:4a:8e:6b:21:4a:9e:78:21:da:30:7a:3a:06:54:
                    a5:04:ad:98:b5:83:db:0c:d2:73:34:4c:d0:56:1c:
                    4a:cc:14:af:77:3a:57:2a:ba:55:31:81:34:34:dd:
                    b4:e4:77:65:7d:43:86:c5:84:5e:8c:91:29:77:51:
                    86:9b:70:55:74:49:0f:ec:e8:82:6d:4f:c1:99:44:
                    40:61:53:79:53:5f:21:be:b7:01:5f:51:85:ea:55:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:D4:17:D9:D2:C6:2E:93:73:A0:15:71:8E:5D:7E:25:04:4D:4A
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bc:7d:df:96:f3:4b:e2:b0:c5:42:8c:cf:7c:fc:91:f4:93:
         7c:3a:fd:f7:a3:25:7d:2c:b7:94:47:65:d6:1f:e5:b5:41:46:
         be:42:d0:4f:aa:a4:0a:2f:9e:c0:b3:57:87:38:76:c0:32:b9:
         5f:2a:87:ca:0d:ac:00:b2:26:75:06:a7:ee:08:b3:86:1d:73:
         cd:43:cc:69:89:5c:36:dc:9d:5b:ff:99:16:12:94:2a:5a:bb:
         af:3d:b6:a1:5d:7a:00:d4:8e:a2:67:1c:d2:64:d5:ea:58:14:
         6f:ec:69:35:d3:7c:79:79:d2:cd:68:5a:35:71:b9:1c:1e:1b:
         ce:27:0a:11:01:2d:5c:a1:5c:db:ce:ac:3c:8f:af:e3:da:b7:
         9f:30:7d:1d:57:10:9f:34:3e:66:aa:ba:dd:c3:a0:7f:48:54:
         8e:58:40:0f:9a:e9:41:46:3a:9a:3a:32:17:93:89:79:1f:53:
         3e:6c:2c:35:59:eb:eb:fc:3a:14:3d:5a:c1:65:ed:98:76:e9:
         88:56:be:89:e2:c3:fd:0b:e8:8e:5e:4c:50:1a:18:c3:2e:a3:
         c1:48:8c:bd:2f:7d:d2:1f:79:05:6a:78:15:48:48:df:fb:01:
         a7:94:e5:db:f7:a8:9d:74:e9:14:d3:63:85:eb:dd:cd:eb:a3:
         c2:c2:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 13:31:48 2024 by rpki-client on console-fra.rpki-client.org