Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/3139302e38332e32382e302f32322d3234203d3e20323730333438.roa
File:                     3139302e38332e32382e302f32322d3234203d3e20323730333438.roa (raw, json)
Hash identifier:          AQsFy4jpWiw4F625sSZHFdMyL1ypjYdnioCTPUjhieY=
Subject key identifier:   D0:59:92:7D:A3:BD:99:53:E0:E6:47:6E:E1:4B:8F:F4:6A:7C:5C:48
Certificate issuer:       /CN=788B36C2CD89F8698D3899FE503F57FCDCEF52E9
Certificate serial:       40C6E1A48E59627A767861B1040F52B7137615EE
Authority key identifier: 78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/3139302e38332e32382e302f32322d3234203d3e20323730333438.roa
Signing time:             Wed 03 Apr 2024 20:28:48 +0000
ROA not before:           Wed 03 Apr 2024 20:23:48 +0000
ROA not after:            Wed 02 Apr 2025 20:28:48 +0000
asID:                     270348
IP address blocks:        190.83.28.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c6:e1:a4:8e:59:62:7a:76:78:61:b1:04:0f:52:b7:13:76:15:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788B36C2CD89F8698D3899FE503F57FCDCEF52E9
        Validity
            Not Before: Apr  3 20:23:48 2024 GMT
            Not After : Apr  2 20:28:48 2025 GMT
        Subject: CN=D059927DA3BD9953E0E6476EE14B8FF46A7C5C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:97:8d:7e:5b:7e:7b:18:bd:d8:99:52:9b:
                    c5:02:c1:2e:41:8f:89:6a:4b:e4:66:28:0d:0f:ee:
                    93:0a:7e:fb:4f:b1:f4:eb:12:60:41:13:6e:3c:89:
                    e4:18:8a:2b:d0:1d:89:6c:a9:a6:62:89:49:47:10:
                    5a:fd:3f:c7:20:36:4a:f1:29:02:63:25:be:c2:ff:
                    7d:df:54:ac:8a:be:3d:b8:4e:9d:b1:62:a6:2f:3f:
                    e1:35:32:81:2e:3a:5d:3c:40:23:5b:87:6d:88:fb:
                    48:1d:04:cb:40:34:42:42:3f:e4:44:1e:3f:37:42:
                    69:f0:81:44:18:59:96:27:67:09:95:87:49:d6:b8:
                    27:26:a8:bb:48:40:87:c4:f2:3f:5d:9c:c8:d8:7c:
                    1a:79:c2:98:f7:b1:f9:78:ee:c4:be:f7:df:81:f7:
                    1c:3e:e2:b7:a0:7f:d4:52:14:91:82:50:62:69:80:
                    fc:ba:8e:8a:a5:3a:ab:81:3e:43:db:32:36:e9:8d:
                    4e:82:02:91:01:ee:2e:f0:60:0f:63:57:fe:44:d2:
                    b4:b9:8d:c2:1a:04:6d:27:34:af:f4:e2:a1:70:a7:
                    b3:9f:b7:1b:f7:97:ec:55:cc:03:f1:8a:dc:79:d4:
                    68:45:7e:af:3c:1f:56:28:31:f1:c4:c9:11:9c:66:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:59:92:7D:A3:BD:99:53:E0:E6:47:6E:E1:4B:8F:F4:6A:7C:5C:48
            X509v3 Authority Key Identifier:
                keyid:78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/3139302e38332e32382e302f32322d3234203d3e20323730333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:5d:45:d2:75:ac:39:29:07:f5:bd:03:f6:f4:bf:e6:96:3d:
         b9:83:7b:bf:f2:1b:ab:93:c1:5b:c2:d8:e0:ac:a2:cd:9e:9e:
         02:d7:79:ac:54:55:87:68:2c:c1:9b:38:f1:46:72:27:17:8f:
         96:fc:cb:fc:4d:f9:65:bf:bb:d8:95:60:c7:0b:0d:13:b6:b8:
         1e:fd:e5:64:0f:e2:a1:57:69:d4:61:46:cc:ae:f5:50:8d:d0:
         3e:e5:30:8a:a3:74:23:7b:0e:44:8e:82:30:ca:fc:aa:fa:0b:
         c6:a8:f8:7d:7b:d0:b6:9d:78:61:20:17:4e:62:b0:f1:69:03:
         be:56:94:e5:1a:c4:0d:ea:ce:13:90:c2:cb:17:73:28:52:b1:
         46:3c:5c:cb:de:11:4d:7d:48:ff:cb:ee:8b:bd:38:61:a7:91:
         13:3f:a8:00:72:22:07:1a:72:c6:0d:c3:4a:4f:89:71:0d:9f:
         8b:a3:0e:ce:b7:5b:03:e9:36:29:39:ff:2f:d1:e1:d2:d8:06:
         8c:c3:ca:d9:7f:54:45:35:8f:3d:11:d2:4c:d2:e3:82:69:e1:
         23:cb:31:14:07:ee:be:05:b1:7d:72:92:f5:9c:ee:61:35:3c:
         05:0e:4b:ec:c7:35:88:33:a7:b2:21:21:2a:10:84:1f:d2:9e:
         2a:95:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 00:03:37 2024 by rpki-client on console-ams.rpki-client.org