Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323731333533.roa
File:                     3139302e35322e37382e302f32342d3234203d3e20323731333533.roa (raw, json)
Hash identifier:          K2ixMLYG7FNwzYjwUKsOK+tu5hhZdGYMkwk0tXNcAHQ=
Subject key identifier:   3B:69:71:F6:89:0F:3C:73:7D:D4:E1:4E:A4:4D:14:46:8B:98:51:7C
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       76F514F0834499E1048A288DC82FBB5B75E2C7E8
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323731333533.roa
Signing time:             Thu 04 Apr 2024 20:55:47 +0000
ROA not before:           Thu 04 Apr 2024 20:50:47 +0000
ROA not after:            Thu 03 Apr 2025 20:55:47 +0000
asID:                     271353
IP address blocks:        190.52.78.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f5:14:f0:83:44:99:e1:04:8a:28:8d:c8:2f:bb:5b:75:e2:c7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:47 2024 GMT
            Not After : Apr  3 20:55:47 2025 GMT
        Subject: CN=3B6971F6890F3C737DD4E14EA44D14468B98517C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:cb:38:51:d6:ec:38:34:ff:8e:38:44:3b:
                    45:14:62:7d:50:ab:71:71:de:84:3c:71:e6:27:84:
                    d4:fe:d3:44:7f:0f:29:51:d1:df:18:0b:fd:cb:b6:
                    f4:b9:aa:94:8a:1a:52:59:f8:86:96:5e:ba:58:60:
                    0a:8c:12:6d:3c:2b:2e:2e:ce:fa:f6:58:ec:11:5a:
                    f1:2d:52:e2:d6:9e:cc:96:41:3d:a5:8f:bc:80:8f:
                    9b:0f:fa:f4:56:a3:8d:c5:01:95:16:11:5b:27:f6:
                    cf:b6:d3:a6:64:f7:0a:78:73:43:9e:3c:33:1e:bc:
                    15:4c:ca:17:3e:8a:8d:9f:c4:57:1e:6b:71:af:ef:
                    d4:38:c4:b8:c9:24:c9:db:f7:2a:ad:83:d2:91:34:
                    8e:58:95:da:2c:11:d6:82:3c:bd:4e:26:a6:f3:7c:
                    c5:b8:22:9c:84:25:d2:f9:02:50:76:52:9e:29:4a:
                    48:0f:9b:39:bd:52:a7:e0:0e:82:d1:14:01:73:59:
                    e7:ee:c2:e4:80:61:d3:cb:7b:29:ae:83:b4:de:52:
                    a8:89:eb:47:df:ab:ec:a1:10:e6:5d:21:4c:1e:77:
                    29:23:a7:55:0d:64:ff:e1:77:d4:2a:85:8f:91:20:
                    1d:27:6a:29:d0:71:fc:0c:0c:ee:a9:c5:9c:23:11:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:69:71:F6:89:0F:3C:73:7D:D4:E1:4E:A4:4D:14:46:8B:98:51:7C
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:91:07:5e:8f:92:f5:58:c6:1f:8f:03:ab:68:41:ef:9a:
         5a:46:20:96:9d:14:e6:23:2f:6f:af:10:a8:b7:82:08:d8:dd:
         e6:78:52:2c:37:ad:92:e2:b4:b1:c4:37:95:13:a0:77:2c:36:
         e9:93:cf:50:0b:32:59:33:e5:ae:d9:be:b3:73:64:d4:94:e5:
         86:76:d3:1b:6f:81:4f:94:3a:42:08:d5:4e:8d:d3:40:d3:c9:
         5f:5a:1e:f1:d9:c1:16:c7:02:09:67:1c:d2:bb:5e:a0:db:b6:
         5a:ea:43:d3:c7:87:53:79:37:1a:a5:a1:1d:c5:54:6b:3c:26:
         18:9e:c3:6b:67:19:da:ed:7b:b3:83:83:07:0c:b9:fd:54:f6:
         cc:32:0b:84:ef:b9:17:20:7c:c0:46:98:d4:eb:01:0b:4e:cd:
         0b:ab:54:1f:14:36:7e:1e:66:29:b4:5a:f9:be:15:6a:62:d1:
         25:1f:36:62:27:f3:e6:33:bc:f9:6b:1f:f0:75:2e:85:9c:7f:
         3f:a8:35:99:44:4f:2e:45:91:04:c5:cb:18:45:34:82:32:a6:
         68:ff:78:4c:3e:fb:54:bf:a8:8c:cd:86:36:34:b3:7b:54:f5:
         56:e9:a8:72:6c:22:ac:b5:b1:ba:35:9b:b4:79:75:f5:a2:aa:
         02:dd:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 13:31:48 2024 by rpki-client on console-fra.rpki-client.org