Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132322e302f32342d3234203d3e20323731363638.roa
File:                     3138372e3131312e3132322e302f32342d3234203d3e20323731363638.roa (raw, json)
Hash identifier:          OKRJy/mrpc/ogqaMcl+4WxLrNaDxVUrnhELfaqiiLiE=
Subject key identifier:   70:9C:B6:69:8E:EB:0A:26:F8:60:50:0D:10:0A:52:78:BA:58:45:8B
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       5299399B8A1FED051AC9E4995CF4E21FEAC05363
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132322e302f32342d3234203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:42 +0000
ROA not before:           Thu 11 Jul 2024 18:55:42 +0000
ROA not after:            Thu 10 Jul 2025 19:00:42 +0000
asID:                     271668
IP address blocks:        187.111.122.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:99:39:9b:8a:1f:ed:05:1a:c9:e4:99:5c:f4:e2:1f:ea:c0:53:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:42 2024 GMT
            Not After : Jul 10 19:00:42 2025 GMT
        Subject: CN=709CB6698EEB0A26F860500D100A5278BA58458B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:e0:5b:9b:c6:a9:f2:c1:a2:2e:8f:2b:9d:
                    81:8a:aa:a3:98:f0:b3:64:72:fc:c2:85:26:28:85:
                    e0:44:2d:7c:b4:5c:06:a0:10:a0:b5:c2:7d:b5:61:
                    fb:ef:0a:12:aa:42:3b:3c:5d:2f:18:97:0d:cb:2b:
                    4f:f2:9b:23:5b:01:36:20:d8:1b:1b:42:b9:53:54:
                    71:69:54:80:f7:b2:c4:7d:2c:f3:b2:cd:eb:33:87:
                    3d:e4:9f:22:d7:24:e2:7e:1e:00:c7:df:c2:9c:52:
                    bf:8e:41:80:bf:0b:f7:ea:b5:a8:c6:cd:3f:23:8a:
                    04:25:2c:8a:15:55:ca:2e:46:f4:3a:19:68:41:77:
                    ec:0d:56:f8:fa:79:5a:d5:71:47:b1:af:b1:a6:83:
                    03:d6:5a:3a:9d:de:61:5e:3a:0a:96:02:d0:0d:4f:
                    1c:b1:a3:c1:74:f5:64:03:d3:fa:f1:49:99:45:ac:
                    22:7b:ad:f2:32:4b:05:39:b4:15:bd:6e:fc:8a:00:
                    bb:ce:21:bd:59:30:c3:2e:3b:ba:75:3a:5b:a9:61:
                    16:a5:bf:ed:33:c2:35:14:4d:41:e9:88:81:55:13:
                    15:db:d5:91:21:a6:27:be:9b:cc:7e:d3:7d:e3:b4:
                    f6:1b:74:1e:ce:b0:cb:76:75:d2:c9:20:0c:97:09:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9C:B6:69:8E:EB:0A:26:F8:60:50:0D:10:0A:52:78:BA:58:45:8B
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132322e302f32342d3234203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:52:d3:a3:96:89:fb:27:be:7d:48:69:4b:d3:af:61:60:77:
         fb:ac:21:86:a8:9f:40:11:af:c5:2e:e6:cd:10:94:5c:86:24:
         3f:7e:5c:70:86:c2:bc:ea:51:4f:c1:0c:f4:43:43:97:d7:65:
         b5:e6:f3:0e:13:05:79:85:a6:44:e4:8a:61:fb:c7:1e:0d:5d:
         fc:16:4a:9c:98:c7:09:8a:85:2d:53:fe:ad:ea:f9:be:68:72:
         08:74:03:7a:0e:e4:51:01:85:2c:78:62:49:a9:9b:b8:92:a5:
         7d:14:f0:06:8f:c7:e4:19:70:e5:a4:c4:dd:61:87:45:27:ac:
         88:c8:a7:b6:f7:db:17:b2:f7:ca:45:ed:40:93:6e:3c:e9:3e:
         5d:6f:f8:fe:9b:1d:b8:0e:61:96:8e:8e:37:88:c0:e6:52:5a:
         a2:69:12:6e:fc:8f:e0:2f:e6:fe:8b:c1:9f:ff:b5:66:b4:56:
         0e:a6:ef:19:e5:78:4e:63:4d:38:f1:2b:d0:21:25:c1:0b:f8:
         d8:53:d9:ba:c4:18:d1:c3:c7:b3:8c:68:a1:64:93:5f:1e:f5:
         5c:3d:fc:5f:72:04:4c:21:09:24:05:15:16:a3:e0:c9:3e:93:
         20:70:31:42:eb:30:e6:df:a3:72:e8:2a:05:ac:98:ba:c3:22:
         21:d2:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 06:09:40 2024 by rpki-client on console-ams.rpki-client.org