Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa
File:                     3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa (raw, json)
Hash identifier:          1UjNJRNAllRN8bKQlWcV+NwJ6JR88sSm2A14iSlZIRg=
Subject key identifier:   86:3B:AE:E7:5D:59:7E:FE:CA:AC:CC:15:20:2C:69:EA:36:14:D2:16
Certificate issuer:       /CN=C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB
Certificate serial:       0321261DB6E2EA63E1A4EC6B883ACC6C32B09D34
Authority key identifier: C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa
Signing time:             Fri 12 Jan 2024 14:18:00 +0000
ROA not before:           Fri 12 Jan 2024 14:13:00 +0000
ROA not after:            Fri 10 Jan 2025 14:18:00 +0000
asID:                     28276
IP address blocks:        187.102.100.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:26:1d:b6:e2:ea:63:e1:a4:ec:6b:88:3a:cc:6c:32:b0:9d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB
        Validity
            Not Before: Jan 12 14:13:00 2024 GMT
            Not After : Jan 10 14:18:00 2025 GMT
        Subject: CN=3082010A0282010100B6E752921D86C242BB111FCADD6EC74A26D0A273FDF6AF39E5BAB78BCE52E7C79382173AF311EEE5DFAC2DB1FEA56CF2025B144328E2E4856CB5C008C73543282BFCCCCC2CF158C0E06E2ED9CF4961F061A6E66561D614030EE9B445D5A1C69D1D5C577B6071FAA6C69DF4C48715B67C66C4DD6075A777248C707FDA249BDA411D984C4360A29087276C7B17168FE220E7718CD33608E9DA985739FCAA29C294E4E639ADDACB9EE94A591F170EDC7F8C4E3030FDB27EA39B15E54DA577C887FBDA6D4964269B1F7A1923274B52324CAB81AACC73665DEAC898953608A2E8D816112F0E12D88F14B1A0D315BF0BD754D1939989ACDF6DA696172A9FAEDC646E950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:52:92:1d:86:c2:42:bb:11:1f:ca:dd:6e:
                    c7:4a:26:d0:a2:73:fd:f6:af:39:e5:ba:b7:8b:ce:
                    52:e7:c7:93:82:17:3a:f3:11:ee:e5:df:ac:2d:b1:
                    fe:a5:6c:f2:02:5b:14:43:28:e2:e4:85:6c:b5:c0:
                    08:c7:35:43:28:2b:fc:cc:cc:2c:f1:58:c0:e0:6e:
                    2e:d9:cf:49:61:f0:61:a6:e6:65:61:d6:14:03:0e:
                    e9:b4:45:d5:a1:c6:9d:1d:5c:57:7b:60:71:fa:a6:
                    c6:9d:f4:c4:87:15:b6:7c:66:c4:dd:60:75:a7:77:
                    24:8c:70:7f:da:24:9b:da:41:1d:98:4c:43:60:a2:
                    90:87:27:6c:7b:17:16:8f:e2:20:e7:71:8c:d3:36:
                    08:e9:da:98:57:39:fc:aa:29:c2:94:e4:e6:39:ad:
                    da:cb:9e:e9:4a:59:1f:17:0e:dc:7f:8c:4e:30:30:
                    fd:b2:7e:a3:9b:15:e5:4d:a5:77:c8:87:fb:da:6d:
                    49:64:26:9b:1f:7a:19:23:27:4b:52:32:4c:ab:81:
                    aa:cc:73:66:5d:ea:c8:98:95:36:08:a2:e8:d8:16:
                    11:2f:0e:12:d8:8f:14:b1:a0:d3:15:bf:0b:d7:54:
                    d1:93:99:89:ac:df:6d:a6:96:17:2a:9f:ae:dc:64:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3B:AE:E7:5D:59:7E:FE:CA:AC:CC:15:20:2C:69:EA:36:14:D2:16
            X509v3 Authority Key Identifier:
                keyid:C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:36:7c:23:df:1f:f6:47:5f:b9:28:82:72:38:db:51:b9:80:
         d0:6f:48:1f:ad:30:6d:65:e4:31:2b:a7:91:cd:b6:77:36:38:
         ca:21:53:8f:bb:e1:7a:f2:68:8e:a6:3b:5b:0d:88:44:21:f2:
         eb:73:98:37:e2:06:90:58:a5:72:9a:c7:8e:19:d8:41:c5:a5:
         8f:ea:90:89:42:e9:ec:7f:1a:fc:aa:71:bc:16:1d:da:d9:2e:
         dd:14:c1:15:13:ac:37:3a:4b:01:c7:eb:4d:f9:8e:7d:e9:e0:
         18:a0:11:3d:a6:2c:b5:9a:98:ce:39:ca:f6:cd:92:27:10:68:
         45:a5:3c:7d:79:40:95:5b:6b:71:a1:d2:46:a0:fd:4e:58:1f:
         33:68:13:d6:00:30:64:05:d0:44:51:59:52:2e:96:92:55:4a:
         16:d7:92:46:f7:06:8f:77:67:4f:31:72:9a:8d:25:ca:28:b9:
         07:59:0a:21:b1:c4:d0:f5:af:a4:e9:b9:91:8e:f6:d0:8e:7a:
         df:fd:86:38:0b:03:da:75:0a:da:57:e6:4f:f4:5c:58:f5:24:
         20:25:cf:59:2d:16:d6:f8:02:09:58:f1:40:6f:62:e1:21:42:
         1c:45:3b:7f:e0:28:e3:ab:e7:fd:ef:18:c7:71:f4:60:20:17:
         74:58:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 10:09:30 2024 by rpki-client on console-ams.rpki-client.org