Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3230203d3e203238323630.roa
File:                     3138372e39352e33322e302f32302d3230203d3e203238323630.roa (raw, json)
Hash identifier:          XEFMKZZsl1gfagiJU8hxoCmAREPpDKWCRsvLVpJngiI=
Subject key identifier:   75:B3:7F:EE:C2:5D:AD:C1:CC:AC:0D:4A:91:74:A2:07:8C:C4:E5:E9
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       4A3324DE026EABB8CF668416DEF9DC205CA5F102
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3230203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:54 +0000
ROA not before:           Thu 09 Mar 2023 20:12:54 +0000
ROA not after:            Thu 07 Mar 2024 20:17:54 +0000
asID:                     28260
IP address blocks:        187.95.32.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:33:24:de:02:6e:ab:b8:cf:66:84:16:de:f9:dc:20:5c:a5:f1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:54 2023 GMT
            Not After : Mar  7 20:17:54 2024 GMT
        Subject: CN=75B37FEEC25DADC1CCAC0D4A9174A2078CC4E5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:5d:0a:71:ab:36:52:64:4b:bb:c3:95:5e:
                    a5:b3:af:aa:97:65:88:71:30:30:54:8a:fa:73:40:
                    c6:a3:2d:d0:d8:a9:19:21:fc:09:ad:aa:0f:b4:60:
                    f9:01:2a:ec:a6:01:77:86:bd:02:18:2c:31:a2:cb:
                    f2:12:fd:7e:a0:18:b1:d6:c8:72:7e:0c:69:21:2a:
                    8a:23:3f:f7:85:71:4e:24:ca:0a:33:38:3f:16:99:
                    8c:8c:92:7f:8d:67:d0:f0:6b:b0:56:7f:44:ca:f0:
                    fc:78:4b:d5:3c:29:2f:ee:f8:0b:d8:aa:6e:fb:ef:
                    75:f9:68:f8:5c:0c:35:51:ec:3f:b7:37:71:25:34:
                    59:94:8e:4d:a2:14:d2:b2:28:50:ae:3e:77:7b:28:
                    77:bf:0b:ff:fc:c6:76:c8:53:01:bc:56:5c:ed:4f:
                    de:e7:24:b0:4c:df:63:5d:96:2e:03:f1:c5:09:de:
                    a8:11:ce:97:81:21:35:6e:10:56:5c:c1:fc:e6:af:
                    52:c2:8d:48:74:6e:bb:08:2b:bb:03:c8:57:28:66:
                    df:ef:e8:55:65:29:22:f9:f9:fa:aa:90:2c:51:77:
                    50:c2:7c:a3:80:f3:70:92:a6:38:73:46:7e:87:d6:
                    2a:c9:c8:ec:01:6b:18:d1:42:6a:66:cb:bc:01:e0:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B3:7F:EE:C2:5D:AD:C1:CC:AC:0D:4A:91:74:A2:07:8C:C4:E5:E9
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3230203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:45:a9:df:96:ba:25:d8:75:2f:4f:1d:b2:ad:75:63:e7:
         b3:bf:31:a0:37:a0:78:f2:78:7d:33:df:95:b7:4f:ab:22:07:
         c7:c7:da:9e:2f:ce:dc:6a:fb:85:fc:6f:aa:87:98:12:ce:6c:
         f6:aa:15:7f:8e:24:f5:0b:82:1b:26:00:1b:1d:07:f7:16:8c:
         4e:44:6c:78:55:42:89:f7:d7:93:9a:ad:3b:8c:10:76:58:52:
         3c:81:28:c0:73:a3:25:bb:97:21:73:4d:cb:1e:70:f2:53:c2:
         54:54:d4:79:2f:7f:6d:ea:e4:73:de:92:a5:ec:c8:bd:bb:0e:
         95:77:45:4a:b3:64:8c:70:1c:37:21:7c:b4:e2:d9:30:f3:05:
         fe:9d:bb:ef:b6:98:19:17:df:8f:a9:a1:64:9d:e0:44:44:30:
         ad:b4:39:3e:05:f4:a8:30:b9:63:d7:2a:3f:f7:1a:0e:58:85:
         92:87:d1:d9:57:32:b1:dd:11:24:aa:53:99:08:de:99:bb:f0:
         ae:6c:43:96:e7:6d:2e:cd:ca:ba:fd:2e:d5:e7:a6:55:fe:42:
         3d:b4:cb:94:cc:3f:ef:78:53:6c:70:6e:71:bd:aa:f9:f5:40:
         8d:db:6a:e5:0f:c0:32:6c:1f:1b:22:df:d6:41:95:8e:63:84:
         f5:27:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:51 2024 by rpki-client on console-ams.rpki-client.org