Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132332e302f32342d3234203d3e20323731363638.roa
File:                     3138372e3131312e3132332e302f32342d3234203d3e20323731363638.roa (raw, json)
Hash identifier:          Q/ZGT0QVQ3uCpnYLdHKtSymFWG1L2dtCNlqOCW8JQTw=
Subject key identifier:   51:D1:95:B4:73:93:DB:DC:30:43:DC:7E:56:D3:37:DA:03:8C:8F:6D
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       156F981694CA84A9652BA184B72480092B67F50E
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132332e302f32342d3234203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:43 +0000
ROA not before:           Thu 11 Jul 2024 18:55:43 +0000
ROA not after:            Thu 10 Jul 2025 19:00:43 +0000
asID:                     271668
IP address blocks:        187.111.123.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6f:98:16:94:ca:84:a9:65:2b:a1:84:b7:24:80:09:2b:67:f5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:43 2024 GMT
            Not After : Jul 10 19:00:43 2025 GMT
        Subject: CN=51D195B47393DBDC3043DC7E56D337DA038C8F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:56:5d:45:1e:d8:59:85:d0:7e:0e:ad:a6:
                    65:8e:ad:bf:38:9d:f8:1c:c5:72:08:fc:36:8d:c8:
                    ec:3f:93:92:8d:4a:97:e9:2c:64:48:8e:0b:1b:fb:
                    c6:3a:56:9a:8a:46:f2:4c:46:07:dd:00:e3:a6:11:
                    56:ad:b4:d3:cd:39:aa:79:1a:3c:3e:6a:29:49:b0:
                    7d:71:f6:9c:ce:2c:72:b8:69:ee:79:7d:59:f5:ee:
                    7c:59:d2:7f:20:56:ff:47:42:50:f9:16:e8:9d:0c:
                    fb:60:37:16:fc:da:84:16:d3:89:73:a2:af:a9:06:
                    4a:1e:e5:ab:42:a9:10:31:87:d1:a6:cb:6f:e0:70:
                    31:a4:4d:af:2b:17:dc:98:99:97:01:0a:c4:0d:c7:
                    dd:35:e2:ac:97:6b:0d:73:eb:57:68:a5:0d:f3:a0:
                    fd:f4:c9:07:c5:d9:b0:c5:cc:66:c4:30:a6:d4:61:
                    45:74:d0:ea:54:77:3c:10:58:d0:f2:58:f9:79:63:
                    6d:ed:88:54:c3:74:93:4f:20:1f:f3:ef:b0:18:94:
                    00:8a:3b:4a:90:af:42:69:59:2d:3c:c4:de:d3:43:
                    bb:c4:2b:c4:1b:10:99:d8:d5:38:cc:b9:c8:fb:0e:
                    c3:89:db:56:ab:9f:0b:16:58:f1:63:02:8a:af:10:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D1:95:B4:73:93:DB:DC:30:43:DC:7E:56:D3:37:DA:03:8C:8F:6D
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132332e302f32342d3234203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:55:ac:0b:13:00:9f:0f:dd:26:cc:01:72:bd:1a:3d:9b:f4:
         6e:b0:77:98:63:d5:8e:a2:39:b7:5d:1d:d8:51:6c:26:13:eb:
         2f:c7:01:25:f3:3c:db:dd:fd:54:70:22:df:76:46:c1:66:8a:
         2b:5d:aa:93:3d:99:c8:ea:ec:4e:29:27:6d:a4:ed:93:73:50:
         8d:7a:5e:2e:44:63:61:f4:2e:ed:67:88:2f:92:4a:f4:1f:7a:
         78:06:40:e0:c0:a3:a1:40:62:89:49:dc:e2:70:38:2e:db:6a:
         50:78:a0:82:66:f7:28:3b:59:6d:8e:5c:cb:f3:ca:fa:ce:2e:
         6d:68:19:ab:84:de:d0:98:0a:e4:56:0c:90:02:62:21:0b:d6:
         ce:15:ea:9d:91:11:81:f5:f9:95:60:2d:7c:84:11:aa:cc:5b:
         7f:20:11:78:85:5a:17:76:99:ea:2e:a7:6c:ef:05:71:9c:e5:
         e6:40:b6:0f:92:fb:85:c1:f5:43:78:81:de:24:a0:00:5c:85:
         91:bf:b6:45:ad:ee:05:96:52:4a:6f:4e:f6:ec:5a:3d:8e:fc:
         26:5e:99:f5:22:07:09:06:9a:23:ee:97:a8:62:7c:29:41:4c:
         77:a2:ea:8f:23:3d:d8:cf:f3:6c:ad:4d:2d:14:b2:32:18:cb:
         69:4a:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 06:09:40 2024 by rpki-client on console-ams.rpki-client.org