Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/3139302e3130372e3136382e302f32322d3234203d3e20323730343034.roa
File:                     3139302e3130372e3136382e302f32322d3234203d3e20323730343034.roa (raw, json)
Hash identifier:          VVEyNRdOkukdTzQmBO8dv324dF2eUnkN4AX35fJJxio=
Subject key identifier:   F7:5C:30:6D:F6:B8:A1:2E:99:19:61:16:47:E4:C7:A4:D1:41:57:85
Certificate issuer:       /CN=FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7
Certificate serial:       38238CD83EE5B0932828616767C3C47BD2556F86
Authority key identifier: FF:34:DA:4F:C8:F5:70:3B:3E:7A:6E:24:52:84:3A:B3:33:EC:D2:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/3139302e3130372e3136382e302f32322d3234203d3e20323730343034.roa
Signing time:             Thu 04 Apr 2024 09:08:18 +0000
ROA not before:           Thu 04 Apr 2024 09:03:18 +0000
ROA not after:            Thu 03 Apr 2025 09:08:18 +0000
asID:                     270404
IP address blocks:        190.107.168.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:8c:d8:3e:e5:b0:93:28:28:61:67:67:c3:c4:7b:d2:55:6f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7
        Validity
            Not Before: Apr  4 09:03:18 2024 GMT
            Not After : Apr  3 09:08:18 2025 GMT
        Subject: CN=F75C306DF6B8A12E9919611647E4C7A4D1415785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:88:0d:d2:f6:ac:26:d9:21:d9:a9:bc:34:
                    1d:da:60:e5:0e:dc:65:98:3e:7c:c5:70:09:5b:6f:
                    bc:0e:2d:2c:c4:00:35:d9:9d:40:64:ce:e4:38:ca:
                    bb:ca:88:22:6f:74:8e:2c:57:fc:62:f0:d3:09:85:
                    c9:f8:bc:b7:88:18:f6:cc:56:13:f7:5e:8b:71:d2:
                    a7:07:84:71:4b:67:b7:68:e0:ff:c3:9b:a3:26:23:
                    e5:30:cf:11:06:c0:91:93:1a:4b:a1:55:3f:e4:24:
                    2e:d2:86:6c:fd:a3:b0:64:8c:e4:9b:fb:b9:05:4b:
                    66:f9:7a:90:27:5b:ff:cd:e6:b4:bd:5b:6b:fe:ba:
                    c4:25:e0:36:5f:bf:d7:42:ed:af:94:6f:0c:fb:a8:
                    07:0c:dc:09:70:0a:01:08:ab:4e:e1:0e:39:bb:39:
                    7f:76:71:0f:ae:96:b5:7b:2f:4d:3a:71:b7:7a:e8:
                    b0:c5:36:48:40:bd:94:6d:26:bf:18:bf:c3:cb:1a:
                    01:87:44:92:f1:9a:d5:44:e3:a6:ef:ff:76:fb:ec:
                    57:8c:29:cd:e8:75:9c:e5:92:ee:77:56:8a:2b:34:
                    b6:e1:43:e0:08:ce:2f:cc:99:21:94:7c:31:45:98:
                    50:1b:8e:18:f1:b8:95:6b:bd:10:9e:6d:13:e1:48:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:30:6D:F6:B8:A1:2E:99:19:61:16:47:E4:C7:A4:D1:41:57:85
            X509v3 Authority Key Identifier:
                keyid:FF:34:DA:4F:C8:F5:70:3B:3E:7A:6E:24:52:84:3A:B3:33:EC:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/3139302e3130372e3136382e302f32322d3234203d3e20323730343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:72:3f:f5:0f:53:92:de:da:33:7a:15:fd:a3:01:55:f3:da:
         08:b4:72:22:d8:2e:c2:1d:d0:0d:1f:f2:a4:97:49:92:98:8e:
         7c:d9:09:50:80:5f:e3:8e:db:3d:aa:a4:b2:65:10:aa:bf:53:
         8e:ac:6f:34:22:c4:d2:ec:5a:41:79:57:3c:b2:d4:52:3c:b0:
         33:af:c1:6d:80:2d:0d:b2:fc:4e:20:93:f1:c4:30:ab:40:6f:
         57:a4:a7:53:1a:37:83:be:c7:6f:60:c1:44:af:2a:35:a1:dc:
         84:5b:b0:5f:29:d4:7e:7d:c5:61:73:00:89:d7:46:4a:1a:0e:
         ba:3d:b0:39:52:ca:0b:ec:ad:4c:bc:3a:a7:7e:10:9a:58:bf:
         e8:f2:da:eb:07:33:95:c9:45:97:1d:71:af:0c:32:10:c3:11:
         7d:4a:0e:49:40:c7:a9:03:fc:bf:9f:ad:71:1f:5b:01:54:c4:
         11:e1:8b:eb:92:dd:51:b6:be:69:30:b7:8b:53:8f:7b:ee:82:
         db:79:fb:a5:2b:67:ec:a4:dd:f6:a5:60:45:30:90:4e:e7:97:
         7a:95:fd:c2:fb:c4:5d:66:00:ae:38:5f:02:44:fd:f7:06:40:
         74:bd:58:7c:2b:ee:b2:16:91:8a:c2:02:48:06:72:8b:39:6e:
         c2:5c:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:58:34 2024 by rpki-client on console-fra.rpki-client.org