Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32342e302f32322d3234203d3e203238313235.roa
File:                     3138372e31392e32342e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier:          ETDEPckJipYv6nG5p9Y9eitygDrRhMO8te26GZCrXfk=
Subject key identifier:   69:E8:10:FF:FE:78:39:CD:B8:EB:D0:56:0E:55:CB:EC:C9:2B:62:D4
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       387824F0DC8CDC86B299BDE72C7AFF5EEA8801E1
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32342e302f32322d3234203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:49 +0000
ROA not before:           Wed 03 Apr 2024 20:15:49 +0000
ROA not after:            Wed 02 Apr 2025 20:20:49 +0000
asID:                     28125
IP address blocks:        187.19.24.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:78:24:f0:dc:8c:dc:86:b2:99:bd:e7:2c:7a:ff:5e:ea:88:01:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:49 2024 GMT
            Not After : Apr  2 20:20:49 2025 GMT
        Subject: CN=69E810FFFE7839CDB8EBD0560E55CBECC92B62D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:1d:6c:31:fd:56:54:1e:ec:46:3b:6d:33:
                    a0:bd:25:47:55:f2:27:ef:fe:80:5f:af:b4:21:b3:
                    74:d9:ec:23:2e:79:dd:6b:c0:48:0e:3d:7d:57:ff:
                    62:50:35:ab:21:bc:f2:4f:1e:1e:69:a4:9b:93:77:
                    1f:8d:76:63:43:4b:0e:b7:cf:12:d4:a0:fe:de:47:
                    a3:33:1d:38:32:6f:eb:74:2e:b4:3b:f4:b1:45:c7:
                    2b:b6:ff:9e:9e:eb:af:c5:19:b7:12:fd:9c:68:b1:
                    13:29:0a:1f:56:2f:64:57:93:ff:16:48:12:82:97:
                    1f:aa:0c:cd:49:11:65:91:6f:74:30:84:31:d4:d9:
                    6a:3d:8a:9c:5c:f6:83:af:96:f9:ea:95:ac:b9:ed:
                    f9:92:93:56:f8:70:e2:e4:2c:07:c1:bd:9f:3c:0c:
                    95:a9:02:42:3f:e3:57:77:1e:e0:e5:c8:13:06:24:
                    26:8e:a7:8a:e9:3a:d1:4d:27:36:87:da:39:52:2b:
                    86:0b:99:6b:1a:98:a5:02:83:ce:6c:72:83:2e:d4:
                    ab:01:36:18:8a:0e:be:06:94:34:51:55:a7:0f:3a:
                    0d:4b:b4:e0:88:8a:91:54:30:d3:b7:0e:0a:36:32:
                    c9:d0:d0:5b:22:e7:1b:b7:2b:7e:37:07:43:e2:7d:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E8:10:FF:FE:78:39:CD:B8:EB:D0:56:0E:55:CB:EC:C9:2B:62:D4
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32342e302f32322d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:26:78:21:bd:44:96:fd:93:e4:61:5a:49:6a:25:40:90:e5:
         c3:9a:ba:7a:67:20:43:c4:1c:a6:82:a7:b3:77:d3:57:ce:e9:
         ba:87:f7:78:90:05:e1:c3:4e:f9:2e:7e:7e:73:c9:34:87:79:
         26:c4:cf:03:aa:b3:9e:31:1d:a9:71:40:d9:f4:f9:2c:88:06:
         26:5a:d9:52:c6:cc:16:e9:3c:bc:4a:4e:b1:84:41:2f:dd:51:
         a8:74:fa:e2:99:02:a1:5b:60:0f:54:ef:88:c4:c7:be:86:68:
         5f:01:ca:6c:7c:3a:5a:d8:a0:fa:8f:6f:4a:85:a2:89:77:27:
         72:89:54:95:25:09:ba:76:3d:be:4e:2e:59:ff:dc:00:39:a4:
         b7:d5:06:8b:a9:d2:f6:57:b8:08:db:66:75:c0:08:da:77:a8:
         58:e9:64:43:aa:60:ac:90:dc:d0:80:84:3f:26:c8:ed:1a:2a:
         3f:a6:55:ee:4b:0b:0c:44:f5:34:35:a0:3a:ae:41:05:1f:9c:
         f0:bf:68:83:bd:97:3d:55:2a:3f:88:a0:73:20:37:67:8f:cc:
         d9:dc:f5:7a:b3:52:0d:27:0f:8e:61:5f:17:1f:73:bf:3a:f5:
         ca:53:f2:a4:7a:f4:36:a4:64:e0:45:52:98:e9:53:22:e2:a5:
         cc:11:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 13:36:47 2024 by rpki-client on console-fra.rpki-client.org