Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          bfeI/fCqZTT5bHjvrcd6HeQUQjTg860x4fivZ5z6i4s=
Subject key identifier:   7D:9B:08:BF:F1:FB:D8:50:2B:02:1B:43:F0:F5:B6:9E:A1:1D:A9:41
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       01714BFE8CA8AF899BA7C1C189EE309CC1D46A4C
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:19:28 +0000
ROA not before:           Fri 24 May 2024 14:14:28 +0000
ROA not after:            Fri 23 May 2025 14:19:28 +0000
asID:                     53153
IP address blocks:        186.209.107.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:71:4b:fe:8c:a8:af:89:9b:a7:c1:c1:89:ee:30:9c:c1:d4:6a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:14:28 2024 GMT
            Not After : May 23 14:19:28 2025 GMT
        Subject: CN=7D9B08BFF1FBD8502B021B43F0F5B69EA11DA941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:ab:88:cf:e0:ff:1f:ac:e3:2f:86:28:eb:
                    ab:12:93:4c:f3:d0:4b:6b:55:f5:f6:8b:70:33:ff:
                    e1:2e:19:b2:e3:40:1c:2e:df:3f:cb:4b:52:aa:6b:
                    39:7c:d8:a6:9b:8c:65:d0:47:e5:95:7a:8b:f7:90:
                    27:ef:63:2c:40:b3:10:8c:e4:eb:75:6e:7c:3b:a6:
                    90:a8:61:e5:14:7d:23:ed:81:af:e7:b9:21:1c:4b:
                    99:69:45:c1:52:9a:36:b9:77:59:13:99:09:8a:90:
                    fa:c7:dc:70:d0:46:a9:aa:c3:44:e6:3e:19:3d:52:
                    b4:b3:ef:a2:23:c5:1b:d1:34:4c:db:c3:1b:53:f1:
                    f0:50:0c:63:9f:b2:a0:00:59:eb:0b:d5:35:46:49:
                    7c:03:2c:2a:63:50:b2:3a:9a:94:8d:1e:d8:47:9f:
                    9e:2f:8b:08:76:b4:40:16:34:b7:df:ec:c1:fc:84:
                    2e:e3:9c:27:b5:e6:e2:7b:04:56:47:26:4e:2a:16:
                    8f:3c:dd:b8:11:56:ed:8b:7e:c2:11:9a:d2:e7:c1:
                    ba:85:9b:44:ff:20:e1:bb:e5:78:73:8d:33:3e:79:
                    0f:23:42:31:d9:b3:f0:7f:78:4e:76:ba:5a:a0:9a:
                    be:6b:2b:b9:6a:cc:6f:17:2b:c4:b1:d4:2b:bf:af:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:08:BF:F1:FB:D8:50:2B:02:1B:43:F0:F5:B6:9E:A1:1D:A9:41
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:99:51:42:a6:64:13:68:48:08:bc:58:4b:4e:f7:e2:80:
         7a:e9:ab:90:ca:46:91:35:40:04:5a:ac:bd:b5:64:0a:3e:c2:
         db:85:0d:f4:a5:b6:4a:3f:9c:9c:73:4a:8b:53:af:e6:97:34:
         e9:c4:7f:05:0b:6a:eb:67:58:9f:ce:84:74:9e:6f:3e:1d:6f:
         fe:78:58:02:5e:5a:bb:32:e3:f8:8f:73:60:2a:53:9d:9a:17:
         1f:a9:c2:32:c5:15:2b:3e:47:78:04:4e:ed:f0:4d:06:9e:21:
         c5:bb:cf:d1:c3:b8:67:45:75:7e:d9:c5:88:90:dd:bc:af:b6:
         54:d1:22:15:1a:cc:88:d9:84:32:18:aa:3b:d3:14:f1:8b:2e:
         80:77:3a:30:94:9f:f5:76:06:ce:d4:fb:73:04:82:b5:2f:15:
         1e:79:ed:37:a3:b2:eb:40:aa:e3:26:b3:72:ba:2a:01:0e:7e:
         b2:64:00:ea:57:72:ea:fe:a6:27:d5:1b:83:dc:e2:1e:6c:a5:
         80:28:ef:2c:fd:e4:2b:48:f6:a5:b1:34:7b:ef:a2:cc:9e:39:
         b9:06:6c:c1:83:a1:0a:9e:42:46:f7:03:0f:05:3e:3a:41:51:
         89:c9:a9:11:50:33:80:1b:66:5a:c0:f9:4b:1e:71:79:13:da:
         b2:3d:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org