Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
File:                     3138372e312e31362e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          Z0GscLf4Xleb23Rm7OfDZUAlC8Lch5bj/4d58vqzGkU=
Subject key identifier:   F9:DF:89:76:44:59:0B:6B:BC:D5:33:F7:BF:6E:33:AB:74:04:20:CB
Certificate issuer:       /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial:       5AF51AC95392390345DD2D2A52C3FD036B3B9C34
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
Signing time:             Wed 12 Jun 2024 13:18:51 +0000
ROA not before:           Wed 12 Jun 2024 13:13:51 +0000
ROA not after:            Wed 11 Jun 2025 13:18:51 +0000
asID:                     262272
IP address blocks:        187.1.16.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f5:1a:c9:53:92:39:03:45:dd:2d:2a:52:c3:fd:03:6b:3b:9c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
        Validity
            Not Before: Jun 12 13:13:51 2024 GMT
            Not After : Jun 11 13:18:51 2025 GMT
        Subject: CN=F9DF897644590B6BBCD533F7BF6E33AB740420CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:55:4b:c2:76:df:f2:a3:31:be:2c:ea:72:
                    5d:00:bd:c1:e4:64:03:d9:2e:61:26:b3:61:41:86:
                    99:e1:a3:8f:c6:07:e6:d4:3b:a9:12:c7:8b:52:ba:
                    f7:05:88:a1:89:8d:22:68:a4:99:18:02:62:14:8b:
                    1a:76:51:50:4f:f8:6f:93:79:30:ed:dc:7d:7a:ca:
                    0d:cf:6d:2a:18:b0:53:01:54:bd:d3:e1:6e:cc:9c:
                    ae:33:1b:2f:51:bc:87:f7:c6:09:fa:11:50:25:cd:
                    b9:31:d2:aa:38:99:e5:df:b5:a5:2c:6d:b5:55:a6:
                    c7:44:00:10:27:8f:8f:85:98:c5:ff:f2:c7:79:2a:
                    79:1b:d2:fe:6f:74:ae:4b:e4:26:91:1b:75:a7:fa:
                    49:4b:98:65:58:c7:e8:d7:86:94:9c:df:bd:81:20:
                    ab:de:49:f5:53:b6:e7:84:d3:ae:ce:77:8f:9e:bb:
                    cd:b7:6d:0c:44:24:aa:be:4a:ef:55:7d:48:15:bd:
                    ba:2e:48:f3:67:b4:2f:7b:8a:a0:a8:44:20:a7:ef:
                    2f:1f:79:d7:56:1c:35:e3:5c:15:75:87:bc:e0:49:
                    1f:37:5d:59:63:67:ca:ce:0d:f2:20:26:bf:81:f9:
                    89:de:82:05:87:af:49:00:4c:98:58:b0:0c:d6:24:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DF:89:76:44:59:0B:6B:BC:D5:33:F7:BF:6E:33:AB:74:04:20:CB
            X509v3 Authority Key Identifier:
                keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3138372e312e31362e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:89:9a:6c:2d:10:22:43:54:b0:23:df:a8:06:c2:2e:0f:d6:
         6b:63:7c:10:79:7a:3b:18:0f:f3:7d:bb:4e:9b:d8:d8:19:f4:
         b7:c2:38:ea:75:b5:8b:40:91:45:d4:87:a9:99:79:10:eb:fc:
         8c:64:33:ce:88:bd:1c:6b:bd:99:40:42:e2:1b:28:7a:b0:25:
         a6:9d:e0:31:9a:66:99:fd:be:e8:50:73:ec:42:d2:b0:d0:b9:
         fa:3c:29:d5:e3:56:2d:4b:a4:76:58:fd:bf:91:7b:61:bf:9d:
         d4:e9:bf:11:68:51:a8:c3:ab:d8:b2:54:d7:8b:a6:ae:ee:01:
         f7:94:1f:fa:14:0c:5d:f5:2f:af:79:83:68:e7:ad:8a:8f:8a:
         55:fa:d1:eb:5e:64:8a:c3:da:e6:a0:9c:44:15:49:fb:c3:f5:
         3a:14:3a:51:7c:1b:39:df:79:c1:34:c9:1b:c0:83:f7:0a:8e:
         dd:a3:74:b1:72:30:bb:7b:ad:17:ef:46:c1:f7:48:81:62:06:
         ca:5a:22:3b:f3:cb:df:f1:ee:2b:2c:31:03:4f:6e:a5:95:8a:
         3d:fa:af:e0:af:5c:d1:2e:ad:46:9b:d2:ff:26:a7:3f:6d:23:
         93:22:27:d8:12:d2:c5:9e:d9:c0:9b:f0:49:73:fc:cf:31:25:
         7a:9e:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:40:59 2024 by rpki-client on console-ams.rpki-client.org