Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa
File:                     3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa (raw, json)
Hash identifier:          gIsSATwZgmln8XyGBlKM3Hkcs/2YMCHh2B4KDw9fBRI=
Subject key identifier:   8C:A8:DB:D0:77:FA:90:DB:4C:91:8C:4F:A7:94:CE:AD:10:FD:09:91
Certificate issuer:       /CN=D410BCFCF37EA8EB76A7D3DF9CB01803C283D292
Certificate serial:       7C39F77A55CF507D4DCCA1F3F8AA593450317070
Authority key identifier: D4:10:BC:FC:F3:7E:A8:EB:76:A7:D3:DF:9C:B0:18:03:C2:83:D2:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D410BCFCF37EA8EB76A7D3DF9CB01803C283D292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     264268
IP address blocks:        138.118.176.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:39:f7:7a:55:cf:50:7d:4d:cc:a1:f3:f8:aa:59:34:50:31:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D410BCFCF37EA8EB76A7D3DF9CB01803C283D292
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100F0771D222E9A110CD2738DB0EEFAABC7D2198C089CACD0EEF58E443058CA7F9AE1277BBF8404F3C8954010638503B4371BC87AAB3680F682CB7C7DDD85249CA09E853EDD8EA5848E7A7DF6250E7443924CD6894D39507F9729F98C57B9C26614B6771E794DE0C28431D64F3E21BBFBF4E2877086B7E379F41153C4AF58034EF25F85555203A3E41E081BA6DF1B7769C5B76F6CCECF7F1633E0E7A16F73FA96CA25918288FDF021F4A0EA09B90E9C7C8CC75723EF83F1A42F79E29ABA4E4653D448DE1D05A4B9A87CA856A5E77CDC6AE2F0E58DAFFBD90C7C805508DBC083952D6CBDD4C0502EDF7904718F79585A343E6DD5BC11D535EE2610A792700E2074030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:77:1d:22:2e:9a:11:0c:d2:73:8d:b0:ee:fa:
                    ab:c7:d2:19:8c:08:9c:ac:d0:ee:f5:8e:44:30:58:
                    ca:7f:9a:e1:27:7b:bf:84:04:f3:c8:95:40:10:63:
                    85:03:b4:37:1b:c8:7a:ab:36:80:f6:82:cb:7c:7d:
                    dd:85:24:9c:a0:9e:85:3e:dd:8e:a5:84:8e:7a:7d:
                    f6:25:0e:74:43:92:4c:d6:89:4d:39:50:7f:97:29:
                    f9:8c:57:b9:c2:66:14:b6:77:1e:79:4d:e0:c2:84:
                    31:d6:4f:3e:21:bb:fb:f4:e2:87:70:86:b7:e3:79:
                    f4:11:53:c4:af:58:03:4e:f2:5f:85:55:52:03:a3:
                    e4:1e:08:1b:a6:df:1b:77:69:c5:b7:6f:6c:ce:cf:
                    7f:16:33:e0:e7:a1:6f:73:fa:96:ca:25:91:82:88:
                    fd:f0:21:f4:a0:ea:09:b9:0e:9c:7c:8c:c7:57:23:
                    ef:83:f1:a4:2f:79:e2:9a:ba:4e:46:53:d4:48:de:
                    1d:05:a4:b9:a8:7c:a8:56:a5:e7:7c:dc:6a:e2:f0:
                    e5:8d:af:fb:d9:0c:7c:80:55:08:db:c0:83:95:2d:
                    6c:bd:d4:c0:50:2e:df:79:04:71:8f:79:58:5a:34:
                    3e:6d:d5:bc:11:d5:35:ee:26:10:a7:92:70:0e:20:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:DB:D0:77:FA:90:DB:4C:91:8C:4F:A7:94:CE:AD:10:FD:09:91
            X509v3 Authority Key Identifier:
                keyid:D4:10:BC:FC:F3:7E:A8:EB:76:A7:D3:DF:9C:B0:18:03:C2:83:D2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/D410BCFCF37EA8EB76A7D3DF9CB01803C283D292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D410BCFCF37EA8EB76A7D3DF9CB01803C283D292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/1/3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:48:b9:25:c6:6c:40:7a:ed:a4:a6:59:d0:b7:63:34:09:
         94:db:e9:e3:67:1f:81:1c:5d:26:c0:47:a0:60:db:e3:cf:4f:
         35:4e:9e:5a:77:4d:68:1f:ca:56:72:30:7c:0f:59:ed:ac:63:
         e4:a4:f1:d1:66:19:e6:3b:4f:0d:31:90:d6:d7:4d:71:c1:1f:
         2d:bf:e7:23:8b:e1:57:05:27:87:34:6b:94:5c:ad:ac:9c:a0:
         98:d8:44:0f:5e:0a:48:3c:85:2a:b1:89:08:77:d7:6b:88:f7:
         b5:37:ee:70:88:3c:db:1c:bc:fe:de:96:d0:53:45:0f:3d:da:
         5c:d0:44:40:3d:0c:e1:68:00:a4:21:76:47:11:88:2b:71:b3:
         84:4c:86:43:e6:c1:b0:77:71:eb:60:cc:6b:c0:22:2a:37:0b:
         49:cb:7a:35:8f:b3:0b:0b:72:da:76:d2:8a:ae:ab:a9:fc:24:
         a7:f7:47:47:8e:f5:4d:bc:0b:63:51:4c:17:8b:ae:fd:d5:37:
         d5:95:cf:9b:c6:f4:16:14:20:a2:28:0a:5a:51:78:a3:03:55:
         e7:5a:25:6a:54:3d:62:3f:78:73:57:55:dd:d0:d1:b5:3b:e1:
         7e:62:a8:0b:83:56:81:1d:58:e2:4a:4a:f0:b8:c6:5a:64:f2:
         9b:11:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 06:22:27 2024 by rpki-client on console-fra.rpki-client.org