Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32322d3232203d3e20323731353032.roa
File:                     3138312e3138392e3132342e302f32322d3232203d3e20323731353032.roa (raw, json)
Hash identifier:          9YadtCBXkb2NlA/2lqGtbKWA5nmmfhaV37rDB0wzQ+4=
Subject key identifier:   3E:B0:EB:FC:41:BA:1C:26:61:B8:0A:C5:02:EB:F3:BD:C8:29:76:D5
Certificate issuer:       /CN=F6DBA753A519A4A6CD975E1903824CB4B06730FD
Certificate serial:       07A8BBB10EBE95D1916DA0B9F211B82BB2259EAD
Authority key identifier: F6:DB:A7:53:A5:19:A4:A6:CD:97:5E:19:03:82:4C:B4:B0:67:30:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32322d3232203d3e20323731353032.roa
Signing time:             Mon 01 Jan 2024 17:20:23 +0000
ROA not before:           Mon 01 Jan 2024 17:15:23 +0000
ROA not after:            Mon 30 Dec 2024 17:20:23 +0000
asID:                     271502
IP address blocks:        181.189.124.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a8:bb:b1:0e:be:95:d1:91:6d:a0:b9:f2:11:b8:2b:b2:25:9e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DBA753A519A4A6CD975E1903824CB4B06730FD
        Validity
            Not Before: Jan  1 17:15:23 2024 GMT
            Not After : Dec 30 17:20:23 2024 GMT
        Subject: CN=3EB0EBFC41BA1C2661B80AC502EBF3BDC82976D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:23:d5:99:02:cf:a0:46:58:02:00:54:16:
                    46:41:f0:d4:d1:21:73:07:e4:67:0a:07:0b:b5:1c:
                    00:65:90:25:0e:d9:c9:67:8c:06:d3:be:a7:74:8e:
                    8d:45:7b:0f:dd:c8:28:41:ff:a4:00:d6:89:e5:cb:
                    5f:ab:40:0b:32:b4:22:6b:78:76:4d:a2:39:b2:06:
                    de:89:ea:8a:6a:07:e6:85:17:7c:c2:49:08:cb:ff:
                    65:f0:49:57:e5:2e:47:cc:ff:2d:d4:4e:9d:f9:d0:
                    2c:f9:f6:b0:b5:28:ac:8d:0f:a3:b9:5b:f0:03:bf:
                    6b:21:1b:d3:ea:3b:3b:d8:47:19:84:78:ff:ac:ae:
                    97:a4:93:bf:84:fe:56:33:d6:7e:2b:7d:c8:9b:1f:
                    71:26:67:70:68:a9:3f:02:b3:02:98:e3:16:21:78:
                    b7:1a:7e:1a:ff:5e:3b:88:61:6e:fc:09:7a:8e:ed:
                    c7:06:11:8d:85:31:fe:bd:aa:9d:5e:2b:66:01:11:
                    75:77:8d:78:06:ce:25:55:de:d9:dd:41:99:38:d8:
                    a6:99:76:6c:ba:19:c0:c4:64:21:c9:13:bd:84:a0:
                    84:10:71:88:b2:20:d0:fa:92:1c:ca:05:b8:5e:fb:
                    b7:c4:16:46:2a:7d:02:c3:ca:3f:dd:1c:92:de:7d:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B0:EB:FC:41:BA:1C:26:61:B8:0A:C5:02:EB:F3:BD:C8:29:76:D5
            X509v3 Authority Key Identifier:
                keyid:F6:DB:A7:53:A5:19:A4:A6:CD:97:5E:19:03:82:4C:B4:B0:67:30:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32322d3232203d3e20323731353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:06:1b:1b:33:40:43:84:a2:79:3a:c1:e6:1c:70:d0:62:db:
         fd:19:6e:1e:7c:e5:7f:0e:0a:18:bd:bc:a3:7e:76:45:aa:9a:
         52:65:2c:36:f6:48:b1:28:f2:c7:9c:06:fd:35:2c:03:44:44:
         57:d0:1c:09:c0:9f:ad:21:48:a9:6c:a4:45:4a:87:72:d1:49:
         a2:4e:0b:61:c1:26:4f:f2:9f:34:3a:09:98:f1:1d:a4:0c:a3:
         49:c7:6b:ec:2f:38:34:10:ea:30:b7:1c:aa:e7:25:27:84:47:
         e7:66:c9:4d:02:f3:09:50:5b:89:73:e3:23:08:80:55:6a:ee:
         00:3f:63:69:b6:08:2d:02:0a:1f:93:b3:2e:23:ab:6e:26:22:
         c3:fc:41:3d:7f:ca:dd:0e:a2:e2:fd:aa:c2:41:1f:4c:c5:8f:
         a1:04:57:49:ad:4b:f7:ec:8c:c9:25:ec:1d:b2:cd:f5:ac:2a:
         fd:48:5e:b1:30:fc:4d:4c:9a:e6:1b:37:6e:fa:fd:f3:25:b9:
         1b:d1:59:6f:3e:5f:7b:39:9f:f7:39:08:2a:92:45:ab:3c:74:
         f7:61:d8:80:3c:ec:68:18:1a:dd:f9:2d:f9:e7:8b:8f:35:0b:
         2f:b1:d6:32:a2:e6:d5:57:35:c1:a2:4a:ff:8c:79:fa:a4:af:
         ff:83:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:39:18 2024 by rpki-client on console-fra.rpki-client.org