Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa
File:                     3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          vvPhCptgR/JlHSqy2ICUhJzBLnQJwbEPXqVq/fAAimw=
Subject key identifier:   B8:D5:AE:EF:F2:A5:1A:73:D3:34:FA:94:DC:BB:B3:99:0F:C1:B3:EB
Certificate issuer:       /CN=64E4B884F01FC9DC0000E111AE283F356C137547
Certificate serial:       6825473DA8A5EE69D2EC8A136E1620B02281B51B
Authority key identifier: 64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     262952
IP address blocks:        187.61.120.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:25:47:3d:a8:a5:ee:69:d2:ec:8a:13:6e:16:20:b0:22:81:b5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E4B884F01FC9DC0000E111AE283F356C137547
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=B8D5AEEFF2A51A73D334FA94DCBBB3990FC1B3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:3b:ce:27:c3:f5:56:12:24:b0:5f:93:0a:
                    a8:cb:53:27:31:b7:f6:a1:30:e9:db:cc:fe:fd:06:
                    aa:30:cb:a7:3b:87:10:f1:1f:d2:ea:2f:3d:cb:88:
                    da:57:37:46:5d:f7:7e:ad:2c:84:7f:7c:71:56:de:
                    e8:e0:e9:aa:22:9a:6a:5d:4b:93:c7:79:6b:b1:44:
                    dd:4a:29:45:99:ba:7b:07:22:bb:6a:38:7b:06:1b:
                    40:55:de:4f:e2:a7:bd:00:9a:4d:0e:10:f5:76:4e:
                    c2:b1:cb:7c:ce:12:6b:97:c0:1e:2e:03:af:19:80:
                    09:52:92:91:12:e9:53:16:8a:9a:ce:0e:5f:be:3e:
                    c6:11:d6:1d:d4:58:db:1f:c7:65:63:0e:00:56:03:
                    71:bd:fd:89:de:88:3e:94:4f:59:7c:e0:d9:4b:ba:
                    a0:0b:47:78:ae:65:5a:dd:fd:ed:0f:cb:1f:80:79:
                    46:c7:83:5a:1b:0d:c1:f1:de:9e:d2:be:60:64:cb:
                    c5:a9:c3:60:7e:d2:77:01:25:40:9d:44:cf:55:93:
                    68:db:94:8e:ed:74:02:f1:5e:92:64:a9:23:65:f3:
                    b1:b4:c2:28:9f:96:b0:d1:69:50:cd:ae:b9:03:f2:
                    07:71:4c:8a:6b:53:c6:9b:65:3a:c3:e2:ac:4f:2d:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D5:AE:EF:F2:A5:1A:73:D3:34:FA:94:DC:BB:B3:99:0F:C1:B3:EB
            X509v3 Authority Key Identifier:
                keyid:64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:fe:16:41:7b:1f:c0:ff:e3:25:8f:79:a4:0b:c5:0a:07:48:
         64:57:0e:15:57:07:e3:4d:b9:75:c7:da:af:a0:39:e1:e7:e2:
         dc:1a:ef:38:ee:3b:10:4c:32:16:8e:ad:e1:ca:d5:f7:dc:bb:
         8c:47:5c:fd:3b:29:72:c5:75:c9:27:25:e7:34:4a:63:55:cf:
         7c:ec:d3:d0:76:16:d2:8d:aa:23:20:6c:cd:3d:1c:0e:b9:19:
         07:da:0d:be:f2:d5:25:b9:ba:fc:2e:c6:d5:53:fa:1c:06:c8:
         aa:9e:64:02:61:fb:d7:50:0a:c2:7f:2a:f3:1e:e6:1d:32:df:
         79:44:82:b6:d7:8d:a7:79:72:db:28:31:ad:32:c0:00:1a:07:
         9b:a3:96:b1:7f:b5:9e:38:2e:89:c6:13:02:80:e9:7b:76:c6:
         b1:ea:f1:46:5a:c4:1a:38:38:ae:5c:04:6e:57:c3:d6:89:b3:
         da:57:e6:27:1e:67:a5:d5:14:dd:40:bd:b1:11:2a:e5:f4:80:
         a0:97:c4:1c:10:75:3d:6e:60:8b:ae:17:f9:4c:ec:7c:dd:29:
         4b:00:11:6e:ee:b1:e1:4c:e9:ec:95:21:1d:fb:2f:ff:f6:c5:
         94:19:52:82:24:cb:71:90:05:7d:07:5e:0c:f3:94:7e:07:d4:
         9a:05:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:11:44 2024 by rpki-client on console-ams.rpki-client.org