Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32342e302f32312d3231203d3e203238313235.roa
File:                     3138372e31392e32342e302f32312d3231203d3e203238313235.roa (raw, json)
Hash identifier:          ZZ5LqFEtEhSlJpOO/R9CFncsMmMqTvI4P0b65Yz5Zqw=
Subject key identifier:   5C:57:79:78:07:53:AA:05:51:F7:60:5D:4F:19:7D:B2:D6:CA:E9:DE
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       5CC898F82F1B250548CB6DD51E4DB6FB6A93023D
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32342e302f32312d3231203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:49 +0000
ROA not before:           Wed 03 Apr 2024 20:15:49 +0000
ROA not after:            Wed 02 Apr 2025 20:20:49 +0000
asID:                     28125
IP address blocks:        187.19.24.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:98:f8:2f:1b:25:05:48:cb:6d:d5:1e:4d:b6:fb:6a:93:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:49 2024 GMT
            Not After : Apr  2 20:20:49 2025 GMT
        Subject: CN=5C5779780753AA0551F7605D4F197DB2D6CAE9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:ee:79:8e:14:06:d6:0f:4a:f7:c7:96:55:
                    b5:c6:1f:72:b2:34:2f:b5:5d:f0:12:35:ff:8b:31:
                    f5:5b:ca:66:02:33:4e:85:f2:77:78:54:42:f6:d5:
                    76:74:b6:9e:2c:52:d5:d3:24:44:55:11:c1:50:74:
                    a4:bd:2e:1b:81:72:0a:a7:3c:c3:7a:31:bb:26:81:
                    c3:e8:41:d4:4a:dc:6c:b9:63:71:bd:e7:62:75:a6:
                    6f:7a:64:37:2b:55:a9:2a:85:71:92:67:b5:2e:c8:
                    a0:c4:15:1a:38:ef:5e:e2:32:bc:6d:a6:d1:cc:71:
                    f2:09:9c:99:a6:b1:e9:3f:b1:b9:90:52:dd:7d:24:
                    c4:80:b5:23:d1:de:f0:70:3a:d0:f3:63:59:5c:cf:
                    cf:8e:39:46:4f:5d:a2:e4:e8:01:cf:29:2a:cb:dd:
                    f3:14:65:40:b4:08:2b:e0:9b:63:cd:5a:b6:a9:3b:
                    fa:70:04:38:20:42:7e:20:aa:d5:c9:09:6c:6d:fd:
                    55:31:a6:ab:36:c2:69:60:46:1c:8c:e7:c4:a1:09:
                    cd:20:f9:4f:a4:21:d9:04:3c:f3:d1:89:58:1a:41:
                    88:a0:87:70:b1:b1:19:b0:7e:f8:22:2a:48:c8:7e:
                    70:5c:af:e1:3a:5e:bb:06:e3:b8:21:1a:57:7d:2f:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:57:79:78:07:53:AA:05:51:F7:60:5D:4F:19:7D:B2:D6:CA:E9:DE
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32342e302f32312d3231203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:23:1e:2c:a7:0b:36:c5:24:8d:51:b4:c8:ea:46:38:1b:
         a3:42:59:25:b8:dc:c5:1f:3a:e2:da:4a:d1:b0:26:4d:e9:44:
         3b:59:cb:db:3c:3c:d4:00:23:99:e1:b5:a7:6a:b5:d9:84:c3:
         a9:bf:83:3f:8c:9a:a0:64:d3:4c:ce:a1:95:ed:fe:4e:17:fb:
         05:db:c1:07:94:bf:c9:f3:3c:34:3f:65:5e:39:c5:07:bb:fc:
         96:c3:24:e7:1b:48:d0:42:b8:57:7a:15:87:30:47:cd:66:ee:
         b9:ed:e6:4b:ae:0c:83:49:b3:04:b1:6d:ca:27:ae:d9:2b:b5:
         02:26:2b:dc:60:c4:ae:26:36:7d:44:8d:5e:6a:39:a1:d2:92:
         41:c8:8b:11:38:b4:61:ea:f7:f7:4c:d0:5b:81:13:2e:28:01:
         45:4b:b3:1e:2f:71:6d:7f:95:30:8b:f9:39:e2:1d:3b:d9:4e:
         8e:5b:08:47:75:a9:a1:5f:e6:0a:29:61:66:44:01:61:38:c6:
         82:d4:fc:e6:10:37:cb:40:22:67:ec:e3:8b:2d:0a:99:86:59:
         98:81:ad:fe:c6:fb:0c:2c:50:b6:16:22:d9:55:26:76:18:1f:
         1c:9d:40:90:40:17:9b:c5:53:fd:1b:62:ab:18:6b:1e:ab:04:
         cc:9f:ab:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXMiY+C8bJQVIy23VHk22+2qTAj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNEM2N0EzQUJCQTkyRjMwOTVGOTRFMTIyOEYwNjM2
NUU2QUVFQTAeFw0yNDA0MDMyMDE1NDlaFw0yNTA0MDIyMDIwNDlaMDMxMTAvBgNV
BAMTKDVDNTc3OTc4MDc1M0FBMDU1MUY3NjA1RDRGMTk3REIyRDZDQUU5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Pu55jhQG1g9K98eWVbXGH3Ky
NC+1XfASNf+LMfVbymYCM06F8nd4VEL21XZ0tp4sUtXTJERVEcFQdKS9LhuBcgqn
PMN6MbsmgcPoQdRK3Gy5Y3G952J1pm96ZDcrVakqhXGSZ7UuyKDEFRo4717iMrxt
ptHMcfIJnJmmsek/sbmQUt19JMSAtSPR3vBwOtDzY1lcz8+OOUZPXaLk6AHPKSrL
3fMUZUC0CCvgm2PNWrapO/pwBDggQn4gqtXJCWxt/VUxpqs2wmlgRhyM58ShCc0g
+U+kIdkEPPPRiVgaQYigh3CxsRmwfvgiKkjIfnBcr+E6XrsG47ghGld9L811AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXFd5eAdTqgVR92BdTxl9stbK6d4wHwYDVR0j
BBgwFoAUy+TGejq7qS8wlflOEijwY2XmruowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMS9DQkU0QzY3QTNBQkJBOTJGMzA5NUY5NEUxMjI4RjA2MzY1RTZBRUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRTRDNjdBM0FCQkE5MkYz
MDk1Rjk0RTEyMjhGMDYzNjVFNkFFRUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzEv
MzEzODM3MmUzMTM5MmUzMjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7sTGDANBgkqhkiG9w0BAQsFAAOCAQEAHRojHiynCzbF
JI1RtMjqRjgbo0JZJbjcxR864tpK0bAmTelEO1nL2zw81AAjmeG1p2q12YTDqb+D
P4yaoGTTTM6hle3+Thf7BdvBB5S/yfM8ND9lXjnFB7v8lsMk5xtI0EK4V3oVhzBH
zWbuue3mS64Mg0mzBLFtyieu2Su1AiYr3GDEriY2fUSNXmo5odKSQciLETi0Yer3
90zQW4ETLigBRUuzHi9xbX+VMIv5OeIdO9lOjlsIR3WpoV/mCilhZkQBYTjGgtT8
5hA3y0AiZ+zjiy0KmYZZmIGt/sb7DCxQthYi2VUmdhgfHJ1AkEAXm8VT/Rtiqxhr
HqsEzJ+r4w==
-----END CERTIFICATE-----
Generated at Wed Jul 3 14:35:15 2024 by rpki-client on console-ams.rpki-client.org