Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/3138362e3139352e3234342e302f32342d3234203d3e20323730383734.roa
File:                     3138362e3139352e3234342e302f32342d3234203d3e20323730383734.roa (raw, json)
Hash identifier:          TyAh0QN80mnjAEyuk40JKVCfMabST5C1WqY9d4gdlnU=
Subject key identifier:   7A:9D:D5:5B:66:A4:DF:77:00:C2:6A:DF:14:C2:72:CF:11:23:00:23
Certificate issuer:       /CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
Certificate serial:       5CE2D7C52A18F51458A8C1410C7758BD27622767
Authority key identifier: 5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/3138362e3139352e3234342e302f32342d3234203d3e20323730383734.roa
Signing time:             Mon 13 May 2024 04:17:32 +0000
ROA not before:           Mon 13 May 2024 04:12:32 +0000
ROA not after:            Mon 12 May 2025 04:17:32 +0000
asID:                     270874
IP address blocks:        186.195.244.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:d7:c5:2a:18:f5:14:58:a8:c1:41:0c:77:58:bd:27:62:27:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
        Validity
            Not Before: May 13 04:12:32 2024 GMT
            Not After : May 12 04:17:32 2025 GMT
        Subject: CN=7A9DD55B66A4DF7700C26ADF14C272CF11230023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ba:b5:9d:b2:f1:94:d5:39:4c:04:02:cd:7b:
                    0f:52:e0:ee:44:19:81:56:4d:c9:3b:61:15:e5:7d:
                    fa:fa:8e:a8:b9:8d:13:25:38:a7:50:13:7c:6f:d0:
                    22:a3:0a:2d:fa:fe:5f:cc:de:1f:68:6a:fd:d4:0d:
                    0a:9d:65:8a:e4:4b:fa:32:89:75:af:c9:7a:79:64:
                    5c:a7:7b:21:8d:39:08:ab:97:a9:80:67:57:d6:5c:
                    7e:b0:25:84:11:f6:4b:5e:77:93:c4:6b:64:4e:5a:
                    ab:6c:9a:9d:da:aa:ff:d9:ac:45:fd:45:8a:4f:18:
                    e4:41:6d:ca:4b:a9:d3:2f:7b:08:83:31:33:6e:b3:
                    a7:53:33:b2:8a:2a:25:98:f4:e3:b5:27:e5:5a:fd:
                    0e:76:49:9e:78:bb:54:38:03:3c:d1:11:84:c9:11:
                    e6:1d:06:ce:65:64:09:8d:1f:85:00:0a:3a:28:34:
                    2e:6c:59:fc:7d:9a:0e:bb:e0:18:91:0f:63:b6:2a:
                    4a:f4:8c:c1:55:b0:07:4f:13:dc:ab:bc:0a:91:74:
                    81:9e:cf:71:76:97:60:89:f5:f9:4d:b2:e3:f8:77:
                    28:97:4b:89:e9:86:39:04:86:51:82:69:c3:f4:02:
                    eb:57:39:4f:ee:6e:41:b5:66:b0:a0:7d:79:9c:a9:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:D5:5B:66:A4:DF:77:00:C2:6A:DF:14:C2:72:CF:11:23:00:23
            X509v3 Authority Key Identifier:
                keyid:5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/3138362e3139352e3234342e302f32342d3234203d3e20323730383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:6b:a7:f8:fd:52:3c:e5:23:36:e7:a8:71:b2:fb:fd:1b:
         b7:5b:be:b8:52:0e:bb:63:07:d8:e0:eb:b4:55:34:ed:56:ab:
         ec:ec:ba:b9:47:55:3b:6e:62:d8:29:9c:17:8c:78:b5:27:b8:
         eb:74:f5:61:7a:bf:cd:b0:a7:eb:fe:76:79:d8:f4:30:06:a2:
         63:9c:17:05:e3:18:6c:cc:40:3a:f0:dd:8a:95:51:9c:01:fc:
         b2:ed:05:34:9a:ee:07:34:96:21:d2:36:08:5e:73:83:ae:8b:
         38:63:ff:80:d4:eb:2e:53:d8:1a:a2:0e:90:c8:06:59:76:27:
         75:50:b0:ad:02:37:18:72:0b:53:da:ba:c3:2e:e7:fe:75:f0:
         87:da:e2:70:b9:e7:9d:ce:b1:f8:b6:63:7e:d0:61:8f:9a:14:
         4c:fb:04:f4:ee:17:e6:60:dc:64:f6:b2:39:0f:8c:c7:31:f8:
         41:35:0d:a7:b3:6b:30:45:05:d0:38:57:de:56:07:0e:69:d2:
         22:17:eb:35:dc:38:97:7b:39:0d:5a:69:ec:7f:99:90:c8:3c:
         a1:b2:27:76:38:e9:c1:b9:e9:46:c5:ce:00:36:73:58:93:d1:
         4f:e1:c8:9b:67:23:db:6a:5a:62:c8:21:c7:1d:d5:3f:80:05:
         7e:9c:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 12:26:53 2024 by rpki-client on console-ams.rpki-client.org