Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132302e302f32342d3234203d3e20323731363638.roa
File:                     3138372e3131312e3132302e302f32342d3234203d3e20323731363638.roa (raw, json)
Hash identifier:          DbUe/Ow7yNZ88oqrcdhb8mkAVVZYNTzIw7jplMsXyZs=
Subject key identifier:   14:50:39:5E:08:74:63:F2:67:90:F6:F8:10:07:38:F7:92:DA:97:6E
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       289CC44971BF54CFF1B4F846B72EE247F7DD22E4
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132302e302f32342d3234203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:46 +0000
ROA not before:           Thu 11 Jul 2024 18:55:46 +0000
ROA not after:            Thu 10 Jul 2025 19:00:46 +0000
asID:                     271668
IP address blocks:        187.111.120.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9c:c4:49:71:bf:54:cf:f1:b4:f8:46:b7:2e:e2:47:f7:dd:22:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:46 2024 GMT
            Not After : Jul 10 19:00:46 2025 GMT
        Subject: CN=1450395E087463F26790F6F8100738F792DA976E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d4:b0:77:a5:b1:d2:ee:e9:41:0d:5d:19:e9:
                    43:7c:f4:09:25:4d:a4:70:79:1b:6a:e7:53:12:08:
                    45:1c:70:e9:f1:4a:ef:58:ed:dd:95:5f:e6:b2:1d:
                    6b:d8:47:b5:e8:34:ac:0a:b3:9a:86:0f:f3:c7:02:
                    39:88:85:5a:67:e6:1d:16:35:45:b5:78:e5:67:9f:
                    91:a6:02:b2:53:f6:9f:f0:d1:56:91:94:88:25:56:
                    28:6d:95:94:72:1e:d2:3d:95:27:47:ef:b8:16:47:
                    31:f5:4f:6d:31:e4:66:33:8a:70:1c:d7:ec:83:67:
                    af:a4:96:11:b0:0a:42:30:b6:b8:d6:5a:b6:dc:8a:
                    e3:92:5e:f6:73:7a:3b:5f:8c:86:8b:e1:1d:22:d1:
                    72:8c:ae:70:43:ce:7d:33:40:86:0b:54:97:fd:68:
                    d3:b6:51:82:e2:e2:8d:52:19:54:71:58:d0:15:a6:
                    a4:6d:7d:6c:63:37:a2:2c:7a:c1:cb:7d:4d:5c:44:
                    0d:53:81:9e:a7:f7:02:2a:aa:10:4c:b6:fb:1f:e9:
                    09:68:0e:ff:83:f0:75:d0:6c:fb:a8:44:1e:b0:fb:
                    b9:38:e4:25:9f:11:94:13:d2:cd:e7:de:44:33:b1:
                    56:c2:3a:e5:b7:2c:c4:83:4e:28:05:af:5c:25:8b:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:50:39:5E:08:74:63:F2:67:90:F6:F8:10:07:38:F7:92:DA:97:6E
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132302e302f32342d3234203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:93:18:90:1c:f1:cc:97:75:55:b5:01:ca:7d:d9:3b:38:00:
         80:d0:e8:cf:22:9d:90:91:e1:24:33:f0:70:2f:9c:83:cb:c6:
         c1:79:90:00:f7:01:fa:0b:04:a6:14:0e:0e:e7:a5:7f:32:1a:
         aa:1f:c4:c8:98:6a:df:52:70:ca:08:d1:71:e7:54:9e:3f:53:
         74:c5:b3:52:26:20:2d:c3:fc:06:01:40:27:4d:65:d7:ec:38:
         37:39:8c:85:23:5d:00:95:1b:5b:80:f1:66:5d:03:d3:b4:2c:
         17:be:c5:ff:be:c1:3a:dc:bf:48:96:da:21:4b:d7:15:af:b2:
         d3:86:41:2e:80:b2:ad:9e:a5:1d:94:44:d1:85:01:a6:eb:34:
         b4:cf:3a:7c:17:03:13:21:94:61:bb:be:0f:22:00:ef:b3:b3:
         38:e7:ec:cf:18:f0:e9:4b:f3:d7:93:ba:ae:43:b2:0b:eb:0b:
         0c:8a:c9:82:a0:4e:c1:31:a2:c2:08:72:dc:9d:00:88:af:79:
         64:2c:fa:b0:f8:31:ff:b4:f5:02:88:07:c6:b4:ff:0f:2f:d2:
         b2:a4:2b:6d:e2:98:3e:c4:06:13:d3:3e:98:64:55:17:ee:4d:
         59:bd:61:03:5a:bb:a9:4e:f2:d6:76:26:4f:a0:03:6a:a6:57:
         6d:8a:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 04:31:30 2024 by rpki-client on console-fra.rpki-client.org