Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/3138362e3139352e3234342e302f32332d3233203d3e20323730383734.roa
File:                     3138362e3139352e3234342e302f32332d3233203d3e20323730383734.roa (raw, json)
Hash identifier:          //WO2PTs1CxEkMMPn3WAlfG8ieL6iFblxZf54qCO8tQ=
Subject key identifier:   22:DC:E7:EB:BA:64:6A:0E:49:1E:40:5B:D0:AD:E5:CB:46:39:84:22
Certificate issuer:       /CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
Certificate serial:       35C45789CF753F7A764475AA888E77A7AC2D3A43
Authority key identifier: 5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/3138362e3139352e3234342e302f32332d3233203d3e20323730383734.roa
Signing time:             Mon 13 May 2024 04:17:32 +0000
ROA not before:           Mon 13 May 2024 04:12:32 +0000
ROA not after:            Mon 12 May 2025 04:17:32 +0000
asID:                     270874
IP address blocks:        186.195.244.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c4:57:89:cf:75:3f:7a:76:44:75:aa:88:8e:77:a7:ac:2d:3a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
        Validity
            Not Before: May 13 04:12:32 2024 GMT
            Not After : May 12 04:17:32 2025 GMT
        Subject: CN=22DCE7EBBA646A0E491E405BD0ADE5CB46398422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:5b:e0:7d:71:29:ee:6a:e8:02:8f:8f:5a:
                    76:6a:6e:f0:cf:32:48:50:1c:7c:a6:82:92:d3:a1:
                    c1:31:d1:ec:1f:dc:33:b7:0b:5f:81:85:1a:ec:80:
                    41:73:99:eb:0b:a5:7b:53:5a:88:49:91:81:b0:57:
                    33:9c:e2:6f:1f:1b:af:89:51:a4:c8:28:5b:3a:db:
                    e8:ee:4f:75:49:e7:0b:8a:2d:30:b5:52:ec:7e:bc:
                    af:f8:3f:6a:e7:cb:4e:7b:db:73:2d:0f:a2:f9:7a:
                    79:29:36:33:20:27:58:59:15:78:f3:06:8c:99:85:
                    9d:fa:47:d3:d5:3f:6b:88:26:0b:27:1a:cf:7f:a6:
                    aa:8d:d6:83:3b:c0:78:8d:09:27:d7:c3:d7:1f:25:
                    7f:72:e2:c4:c7:29:26:e9:34:6c:f8:e1:2a:21:c0:
                    27:46:2c:15:9a:71:5c:b4:6f:97:d0:be:c7:4f:60:
                    f2:d6:84:9a:8a:49:50:1c:3c:dd:86:e8:a3:9a:03:
                    9d:eb:d1:7b:ea:5e:d7:fe:4c:96:2c:9e:cc:5f:b4:
                    1c:57:74:15:36:d2:36:be:9f:a7:92:a5:89:5e:13:
                    ca:09:f9:1c:f3:08:fd:e0:55:44:23:4d:0c:4b:6d:
                    dd:24:e0:48:97:33:f9:04:c3:09:30:52:2d:38:11:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DC:E7:EB:BA:64:6A:0E:49:1E:40:5B:D0:AD:E5:CB:46:39:84:22
            X509v3 Authority Key Identifier:
                keyid:5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/3138362e3139352e3234342e302f32332d3233203d3e20323730383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:3f:44:30:d7:ad:77:1d:3e:9d:9a:bc:81:b3:42:cb:bb:d9:
         91:e5:ca:b0:b7:74:e8:a6:b4:78:aa:01:e6:23:49:a8:42:a0:
         0c:02:5e:3f:58:8a:b6:92:3d:63:b5:29:06:01:2f:c1:49:29:
         c8:06:9f:42:65:f7:bb:00:07:a6:85:f1:5d:32:60:c3:c1:93:
         c0:3a:08:48:f1:e2:e9:4d:c7:c5:57:43:b0:3e:d8:10:66:8a:
         8a:a8:53:2a:12:8b:74:b5:be:93:8a:ae:77:91:9e:f6:43:e2:
         b1:5d:bd:2b:e1:9d:8a:43:38:2e:15:d8:ca:27:f9:0c:13:1e:
         e3:72:ff:aa:3a:9d:2f:8d:42:dd:6b:83:e6:10:79:0a:52:3e:
         4b:0d:42:0c:22:ac:d0:5a:01:49:27:ce:b2:56:91:e6:ee:60:
         8d:de:6a:d6:55:28:da:7e:79:b5:c0:08:ff:b0:58:e4:1f:b3:
         7b:31:5f:35:86:3b:e4:48:8d:9a:b2:28:2e:9a:1d:8e:fd:2b:
         90:2b:20:00:ad:76:54:e8:d6:f8:7f:99:5d:e1:d3:d2:b6:2e:
         8b:c2:c3:f3:e3:b0:12:ab:0d:24:36:c1:e4:25:e1:db:2b:f8:
         39:8f:00:00:2a:91:ff:d9:ea:ec:64:60:00:58:2a:b0:ad:b9:
         77:f0:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 12:26:53 2024 by rpki-client on console-ams.rpki-client.org