Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa
File:                     3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa (raw, json)
Hash identifier:          T3DbIgwUdh7H36PS1oKJbI171d3RpZKYbldgTjyTvvU=
Subject key identifier:   EC:37:F0:28:8C:D1:11:74:63:16:48:A7:01:72:A4:EB:81:5F:60:F9
Certificate issuer:       /CN=C21506A6156B7F8310321D898139CEE0A28D6935
Certificate serial:       26DF960D20D06E33B8AF092DA1BD536A78E33E29
Authority key identifier: C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa
Signing time:             Wed 10 Apr 2024 13:30:39 +0000
ROA not before:           Wed 10 Apr 2024 13:25:39 +0000
ROA not after:            Wed 09 Apr 2025 13:30:39 +0000
asID:                     53195
IP address blocks:        187.121.144.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:df:96:0d:20:d0:6e:33:b8:af:09:2d:a1:bd:53:6a:78:e3:3e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21506A6156B7F8310321D898139CEE0A28D6935
        Validity
            Not Before: Apr 10 13:25:39 2024 GMT
            Not After : Apr  9 13:30:39 2025 GMT
        Subject: CN=EC37F0288CD11174631648A70172A4EB815F60F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:7e:89:8e:23:c0:5b:c3:18:ff:57:36:4e:
                    7f:b9:81:3b:3d:3d:fb:9d:fa:4f:0d:5e:2f:43:20:
                    a4:92:7e:8a:6c:c3:9b:48:01:d2:20:90:0f:fa:33:
                    2e:98:42:dc:a7:fa:dd:62:b0:4e:cb:1f:f6:c8:eb:
                    9c:d3:55:2d:18:5d:42:a4:bf:3a:0b:06:a3:03:97:
                    8d:04:78:9a:12:7b:11:b0:a1:5f:24:d1:5e:0e:f8:
                    01:3e:9a:d1:6c:10:4f:76:08:8b:36:08:99:9b:e1:
                    98:a6:8d:38:4e:a7:82:35:97:68:0b:08:00:ae:f5:
                    f4:1b:10:6a:0d:3e:64:4b:f4:58:bf:ca:37:50:a4:
                    8b:89:40:13:ec:55:75:e8:db:f3:4c:34:e4:eb:41:
                    c2:38:1d:45:23:b6:0a:a3:c3:e4:8c:c4:4c:15:ae:
                    d5:21:0a:0c:2f:ea:ea:06:37:8f:85:07:75:9e:23:
                    1b:4c:a6:e4:f3:8b:42:11:5c:96:b3:3f:e9:7b:65:
                    e9:a0:4a:77:44:f8:2a:af:3a:b6:ac:66:53:03:a9:
                    da:c3:2e:c4:84:9e:9c:11:fb:cd:46:41:75:86:78:
                    dc:31:b9:88:d2:96:e6:00:20:61:df:e5:e1:a7:42:
                    bd:94:11:a8:72:53:46:a1:62:22:10:cb:9f:91:c4:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:37:F0:28:8C:D1:11:74:63:16:48:A7:01:72:A4:EB:81:5F:60:F9
            X509v3 Authority Key Identifier:
                keyid:C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/C21506A6156B7F8310321D898139CEE0A28D6935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:06:71:2b:00:a9:57:ab:00:3a:66:d1:f5:44:2a:0a:55:b9:
         ac:e1:11:39:2c:c5:2b:e5:e2:97:0c:11:8d:21:c9:fe:36:39:
         8d:54:ff:3a:3c:9e:fb:fa:b6:18:00:d6:9d:1e:40:1a:0f:60:
         d6:c0:9f:b8:c6:68:7a:99:d7:ba:da:9d:91:76:c6:ef:2f:74:
         f3:62:a4:53:06:01:d2:5b:b0:dd:e7:48:6c:df:c7:e2:8a:ad:
         85:f4:18:2f:2d:9c:4b:99:65:1e:f1:f6:21:5e:b0:13:99:f7:
         81:3b:4a:de:52:f1:61:23:63:2e:73:a4:8f:c1:f2:73:46:e8:
         6a:8d:f0:7c:91:af:8e:93:ce:9d:ae:6b:bd:e0:10:42:c7:85:
         ca:75:85:3d:92:0b:8c:a5:54:a1:36:e5:11:65:7f:bc:cc:2c:
         18:68:c8:65:a4:f6:3a:5f:ca:3d:18:d3:94:48:3a:e9:a3:a9:
         e0:90:aa:4f:58:78:b4:68:5c:fe:ba:79:6d:91:95:69:b8:21:
         88:65:81:f7:7b:e0:fd:4e:a4:6c:ae:18:52:50:b9:8f:bf:81:
         62:3c:65:51:b2:21:8a:78:bd:e7:e8:5c:3c:21:8d:a8:6b:25:
         c6:4e:7f:19:40:63:ef:f7:28:f0:70:9c:d3:ed:8e:58:8c:d3:
         69:95:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org