Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132322e302f32332d3233203d3e20323731363638.roa
File:                     3138372e3131312e3132322e302f32332d3233203d3e20323731363638.roa (raw, json)
Hash identifier:          9kIpytbIfYV2xmqja4xXE1QyEkV4X+nAfuwQ3so7qes=
Subject key identifier:   C7:F0:A0:66:8C:85:FA:9D:0C:DA:46:BE:B2:59:9B:FF:F9:9F:67:2E
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       39B8FF30305A584F22A5BB107F9E40BF5475A934
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132322e302f32332d3233203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:41 +0000
ROA not before:           Thu 11 Jul 2024 18:55:41 +0000
ROA not after:            Thu 10 Jul 2025 19:00:41 +0000
asID:                     271668
IP address blocks:        187.111.122.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b8:ff:30:30:5a:58:4f:22:a5:bb:10:7f:9e:40:bf:54:75:a9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:41 2024 GMT
            Not After : Jul 10 19:00:41 2025 GMT
        Subject: CN=C7F0A0668C85FA9D0CDA46BEB2599BFFF99F672E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:b3:0a:4a:55:08:9b:e7:05:9e:c6:7d:24:
                    81:60:5b:e3:b7:33:2d:26:61:23:0b:53:e0:4c:0f:
                    b2:48:55:62:f3:10:da:02:24:93:ca:d0:5f:fd:53:
                    05:02:01:96:9f:05:e2:de:23:c2:ec:cd:29:14:b0:
                    b5:39:b3:98:1f:80:78:ad:a9:9c:33:df:ed:d3:e6:
                    ad:a9:79:35:7b:47:36:35:30:d6:36:0f:f3:5c:d1:
                    f1:36:ee:d2:02:25:db:d0:76:d3:35:2c:8e:a7:65:
                    dc:f7:3e:87:2b:5e:24:83:3f:c2:d3:a2:23:f3:8d:
                    51:7b:91:b4:58:9c:a1:28:eb:24:65:84:8b:80:f7:
                    24:2e:76:0d:86:8c:b9:23:34:cd:4b:82:fc:d6:97:
                    46:3b:b8:bd:57:38:37:24:5f:7e:2d:20:bb:dd:6e:
                    2e:3b:1d:c4:2f:d7:c0:7f:7d:38:17:5b:98:16:45:
                    33:73:66:13:04:fb:7d:02:a1:c0:46:82:79:70:67:
                    7b:ce:fb:c4:42:12:5d:57:d7:aa:7a:4d:58:f0:18:
                    ba:46:93:8e:c8:18:6f:f9:ce:df:5a:15:9f:a1:76:
                    5f:3a:72:89:33:6d:1b:ff:3a:62:0b:5a:c5:00:a5:
                    20:8d:08:82:6b:3a:8f:a1:cb:fb:e3:0e:bc:76:01:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:A0:66:8C:85:FA:9D:0C:DA:46:BE:B2:59:9B:FF:F9:9F:67:2E
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132322e302f32332d3233203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:56:c7:9f:43:5d:c1:6f:6e:bd:3a:00:b9:41:c2:ab:0d:
         b3:5d:41:60:90:fe:19:3c:71:ff:92:d4:96:bb:b9:42:61:07:
         f7:70:ee:1c:5f:44:3c:90:e1:aa:40:a5:19:4f:88:bd:f0:f5:
         71:48:a9:7d:40:62:7b:df:c0:65:74:71:ff:a5:86:1e:1e:78:
         90:e3:bb:55:8b:6c:a6:c5:a5:6d:20:fc:c3:e8:c1:b7:00:08:
         46:f2:0e:bf:a1:8c:1a:bb:d2:56:20:7f:d7:14:66:58:65:15:
         d2:5f:87:ee:ce:8b:77:2c:98:39:04:af:6a:6b:27:28:a5:9a:
         d8:8d:7a:72:d8:f2:3d:19:22:15:8d:f2:3a:70:fa:68:39:33:
         e2:db:a1:d2:35:37:7e:62:02:25:1f:28:9b:68:59:47:5c:4f:
         02:66:2f:77:60:4e:02:54:08:b8:b9:12:a1:dc:aa:14:9b:64:
         9b:83:d0:0c:d1:32:0e:0c:71:b8:3f:49:f9:6a:a3:98:38:82:
         77:b7:fb:d1:80:96:78:61:42:99:23:c2:3a:ea:7e:bf:1f:9e:
         4b:4d:e4:7f:2e:97:bb:bc:ab:fd:3d:a2:5c:e0:9e:b2:ce:9d:
         ae:3e:8b:d6:90:e6:b8:38:38:f7:12:33:64:50:32:13:56:f5:
         b1:20:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 04:31:30 2024 by rpki-client on console-fra.rpki-client.org