Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e31362e302f32312d3231203d3e203238313235.roa
File:                     3138372e31392e31362e302f32312d3231203d3e203238313235.roa (raw, json)
Hash identifier:          js3qMn+rBgmtJGtszV71+dEkFhhM7ZcBze/pxL7i29U=
Subject key identifier:   F3:D7:F5:AD:9E:0D:14:5C:6B:98:B1:2B:EA:DB:FE:2C:FC:12:C0:E7
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       02F3A2420989FA812AA14277AE39B54D93592A0C
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e31362e302f32312d3231203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:49 +0000
ROA not before:           Wed 03 Apr 2024 20:15:49 +0000
ROA not after:            Wed 02 Apr 2025 20:20:49 +0000
asID:                     28125
IP address blocks:        187.19.16.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f3:a2:42:09:89:fa:81:2a:a1:42:77:ae:39:b5:4d:93:59:2a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:49 2024 GMT
            Not After : Apr  2 20:20:49 2025 GMT
        Subject: CN=F3D7F5AD9E0D145C6B98B12BEADBFE2CFC12C0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:c6:19:c5:5a:c8:a8:8c:91:e5:8a:55:d6:
                    d1:72:2a:97:2e:57:e1:18:a5:29:59:a1:c3:72:73:
                    fe:bf:57:1e:b4:0f:61:bb:f2:4d:56:70:9d:1f:10:
                    b0:46:e6:fd:e9:7c:ca:1d:0e:ed:ee:26:c9:1a:24:
                    dc:ac:e7:c0:7a:0e:a7:bf:37:ee:33:71:24:ba:95:
                    95:82:48:3d:e1:f6:e9:37:1c:ca:d7:40:66:38:c0:
                    6a:26:fc:65:a5:03:41:fc:45:50:25:00:8e:9d:27:
                    49:f7:10:06:60:4f:86:a4:7a:b2:e6:e0:1a:00:18:
                    5c:1c:e8:c5:4b:d1:84:ab:2c:b7:a6:a1:5f:f2:39:
                    85:26:6f:82:7f:c3:6c:b2:60:57:f3:70:53:c0:84:
                    83:49:1f:c5:c1:05:4a:b9:ff:ed:29:b0:69:c1:34:
                    ce:6b:e2:77:c3:e5:cb:04:5e:e1:e6:f5:d8:9b:2f:
                    24:bc:e8:2f:77:b2:5b:1f:c9:6e:f1:68:7a:1a:2e:
                    96:7d:b7:b3:9f:90:cd:b1:2e:5e:56:57:fe:5a:a6:
                    59:98:e5:85:9e:23:06:3d:12:e2:e1:5e:a5:a4:8f:
                    73:92:3f:fe:e2:0e:3a:69:5c:c4:8b:fe:70:92:1d:
                    3d:e0:be:a4:ef:67:18:e3:ab:d4:9b:a2:bb:2d:dc:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:F5:AD:9E:0D:14:5C:6B:98:B1:2B:EA:DB:FE:2C:FC:12:C0:E7
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e31362e302f32312d3231203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:2a:f9:18:51:15:ac:2d:ad:64:ef:5d:95:bb:5e:ac:85:
         4f:ed:68:ba:2e:dd:dc:3b:f3:0a:aa:e3:e5:bd:fb:27:c3:83:
         57:cb:98:83:0b:f3:4f:4d:79:a6:42:50:00:c1:4f:61:79:3b:
         03:f1:75:e8:e1:e4:54:b8:fe:8c:06:29:19:05:fc:5b:da:c2:
         ab:c8:4e:fd:9c:34:17:8c:fd:d9:7a:65:66:e7:04:10:ed:f4:
         d3:f0:18:ce:55:5e:59:ee:65:b8:0c:f3:e5:15:4c:7b:d3:9e:
         a7:91:51:bf:f3:86:61:0e:d2:b2:0d:a1:18:0d:9a:5d:79:46:
         39:fd:3e:48:a4:ee:09:f7:a6:d4:ec:01:15:98:5f:a5:b0:cb:
         7e:08:7d:c0:08:52:1d:fe:d9:4d:04:8f:4b:50:e3:d6:02:26:
         d4:40:5d:16:52:7e:d5:fc:ac:48:8a:15:c4:d8:c7:66:ce:e7:
         98:2c:e7:fd:8d:d7:e9:d1:16:fa:b2:7b:88:88:c0:75:cb:8c:
         e7:93:55:e9:cb:fd:32:a4:d8:d3:83:40:4b:e5:8c:0e:20:f9:
         ee:d7:d0:47:74:42:eb:c7:82:45:7d:21:60:85:0b:85:b3:cf:
         f5:b4:bf:83:96:50:24:3b:6f:50:a8:d6:9e:a1:59:85:af:39:
         78:a4:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 14:35:15 2024 by rpki-client on console-ams.rpki-client.org