Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32382e302f32322d3234203d3e203238313235.roa
File:                     3138372e31392e32382e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier:          xXN7FZx4gNmfLh9IszRlkTLCR7X03CJmyJCX4TVbDvU=
Subject key identifier:   3E:0D:C0:EF:F8:DE:55:43:79:81:89:1B:C7:F5:8E:06:3E:46:97:6D
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       338ED1601BCA442B565B2FF5E713D08E0EC02D8E
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32382e302f32322d3234203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:50 +0000
ROA not before:           Wed 03 Apr 2024 20:15:50 +0000
ROA not after:            Wed 02 Apr 2025 20:20:50 +0000
asID:                     28125
IP address blocks:        187.19.28.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8e:d1:60:1b:ca:44:2b:56:5b:2f:f5:e7:13:d0:8e:0e:c0:2d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:50 2024 GMT
            Not After : Apr  2 20:20:50 2025 GMT
        Subject: CN=3E0DC0EFF8DE55437981891BC7F58E063E46976D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:b0:7e:a6:76:f6:18:05:2d:88:88:0b:ca:
                    68:33:41:b1:a9:2f:0d:28:94:b3:56:67:b2:7e:34:
                    80:73:69:28:e3:fc:85:12:89:0e:e9:ba:e8:27:ec:
                    54:ff:59:d9:b9:69:ce:84:16:70:f3:38:6c:4e:4c:
                    8d:1c:4f:44:a1:89:07:c6:41:36:d4:b4:f8:b1:dc:
                    50:38:8f:ea:fd:dd:d8:fc:42:12:23:da:22:1f:81:
                    63:7f:57:8f:fe:56:60:72:48:79:9a:7a:ab:51:35:
                    d9:6c:98:34:39:4b:6d:a6:85:1e:ab:9c:4a:ff:84:
                    a7:f7:d4:30:55:54:24:d0:52:7b:6d:6d:ae:37:06:
                    fe:75:da:03:95:eb:52:29:7c:65:ba:ef:8e:23:15:
                    f6:72:6e:38:85:24:4b:10:80:70:62:ac:dd:18:8d:
                    73:59:b7:13:85:37:47:81:95:b2:c0:7e:2b:36:4b:
                    5c:67:41:22:6d:fb:46:7f:ff:3c:9d:2c:f5:98:af:
                    50:30:3b:06:45:50:27:53:94:b0:f3:ec:3a:67:6a:
                    46:da:b3:76:4b:d9:89:84:51:85:ef:80:79:00:f8:
                    b2:8b:4d:21:2f:a2:f9:5a:bd:02:dd:b6:bf:c9:21:
                    4e:92:35:dc:6f:fd:70:3e:2f:69:87:d3:c3:6d:5f:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0D:C0:EF:F8:DE:55:43:79:81:89:1B:C7:F5:8E:06:3E:46:97:6D
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32382e302f32322d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:d7:de:69:25:a2:4d:5e:cc:40:59:e2:1c:e1:d6:87:db:0b:
         84:d5:77:cc:50:67:9f:f1:a3:25:04:a8:93:1a:bd:c7:54:15:
         0b:15:0f:05:d8:84:54:a9:2d:9f:6b:25:f0:87:4b:75:97:5e:
         2d:3d:75:59:33:e6:18:64:ae:5a:5b:72:e7:b2:ed:88:57:ef:
         1c:e4:95:67:b6:27:1a:7c:17:4e:ba:78:7d:c0:84:24:a3:15:
         7d:30:28:c7:75:b6:c7:d9:b0:22:92:c7:22:fe:7f:01:ca:cc:
         2f:5a:2f:2f:a1:3a:2d:f9:e9:e8:1b:d7:f6:3a:7a:30:08:3e:
         91:b9:87:72:ac:3c:3c:5e:7e:73:29:b1:47:76:43:27:6d:27:
         9c:9c:de:f5:10:12:07:e7:c6:45:f5:f8:ce:98:a6:12:8c:7f:
         98:5e:0a:3e:b8:a7:d5:14:4b:47:9a:62:8d:45:5e:93:1d:13:
         c5:c3:49:68:57:7a:82:ac:c0:32:e8:03:09:7e:b2:4a:55:22:
         13:94:25:3e:df:d6:d9:79:b1:c8:1c:56:da:58:59:f2:71:71:
         72:f6:d9:0f:aa:b7:86:4f:a4:b6:cf:0f:c7:0d:7a:88:16:27:
         68:b0:ca:79:c0:2a:e6:fb:19:7c:2f:5d:60:38:80:27:67:d6:
         e6:f6:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 13:36:47 2024 by rpki-client on console-fra.rpki-client.org