Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          k1oNj+/zMf3MeD7wHzo4FRhqrM3Jzs45as2ivXJkq3U=
Subject key identifier:   51:8A:6E:11:3F:81:EC:D5:99:B5:C5:53:68:DB:24:47:9B:12:F8:4B
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       4D4BAF94F3AC3932B57D87A2D90B160C017966E1
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:19:45 +0000
ROA not before:           Fri 24 May 2024 14:14:45 +0000
ROA not after:            Fri 23 May 2025 14:19:45 +0000
asID:                     53153
IP address blocks:        186.209.109.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4b:af:94:f3:ac:39:32:b5:7d:87:a2:d9:0b:16:0c:01:79:66:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:14:45 2024 GMT
            Not After : May 23 14:19:45 2025 GMT
        Subject: CN=518A6E113F81ECD599B5C55368DB24479B12F84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:d1:84:ba:62:cd:fa:89:f2:57:bd:af:72:
                    24:7e:97:24:53:31:a3:bd:d2:0f:35:06:e6:04:2c:
                    ad:6d:6a:3e:f6:73:d1:ba:a7:17:e3:0f:ea:5b:98:
                    a8:e7:c7:13:80:b2:1f:59:c0:ba:b1:fb:55:5b:56:
                    48:cd:57:bf:1d:5a:58:df:ee:e8:b0:2a:82:a9:27:
                    d3:9a:51:61:65:25:dc:19:79:9d:36:fc:fe:e3:f0:
                    d3:76:4c:53:25:a3:20:bf:b1:0a:20:35:e8:39:d2:
                    79:d0:28:a7:42:97:8a:fa:d3:f6:db:bd:22:fa:86:
                    55:72:ee:ac:e6:d1:02:f7:3b:1b:2c:e7:3c:4b:0e:
                    80:7b:19:e1:54:f4:15:93:92:31:7d:ed:82:be:21:
                    d8:10:76:1c:1e:89:4a:43:43:6f:e7:b2:35:f1:75:
                    47:21:69:2b:c9:10:28:99:7a:f1:68:67:d5:a5:64:
                    ca:2e:2b:98:86:6d:c7:34:52:d4:d0:cb:8e:54:ea:
                    c5:0a:0e:5a:fc:58:3e:c9:ce:1e:6e:36:cd:91:9f:
                    26:23:db:a9:30:46:89:f1:d7:af:93:69:7f:22:42:
                    4d:8c:74:be:74:b7:b0:82:11:9e:31:4c:d0:04:f3:
                    2c:00:1a:25:49:d8:bb:9e:37:56:f8:2d:70:31:54:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8A:6E:11:3F:81:EC:D5:99:B5:C5:53:68:DB:24:47:9B:12:F8:4B
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:67:e2:72:61:31:5d:36:a1:1d:d6:b8:42:44:db:ad:00:
         9a:7b:19:d7:ed:f5:1f:98:40:ff:91:b4:b6:0b:57:03:a8:29:
         d7:f4:fe:b4:f8:4d:31:c6:23:38:b8:e9:cf:4f:2a:22:09:d6:
         dd:c6:46:0a:45:e4:e0:d3:1f:b9:5f:52:a4:12:0e:7e:c0:b6:
         ea:54:c0:71:b1:54:48:7f:65:9f:72:a2:5f:db:01:d8:91:f1:
         8f:3d:87:0e:92:86:87:ab:ac:d2:f6:06:84:b2:df:6c:e9:7f:
         4b:f8:57:36:a8:1a:4b:17:23:a2:23:11:8f:90:ee:dc:2a:2b:
         af:3b:3e:b9:23:7d:10:d2:9f:4f:92:56:81:84:2d:8e:1a:d1:
         30:1b:3c:63:8c:7c:6c:67:1d:84:f0:e1:dd:35:26:7e:42:11:
         18:42:9d:26:15:7c:aa:dc:08:6f:ca:ae:52:50:5b:93:93:5f:
         1a:97:e8:51:56:4c:8d:9f:0f:0c:05:4b:eb:e5:87:70:27:ed:
         a1:69:b8:96:a8:b7:b8:73:18:da:b6:1e:97:c6:47:c3:e7:cf:
         85:1a:8e:6a:64:41:c7:df:41:d2:bc:8a:4c:ae:f5:49:53:2c:
         ca:bc:36:de:1e:e8:e2:91:ff:b6:07:be:92:aa:f6:09:d0:d2:
         c1:00:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:59:36 2024 by rpki-client on console-fra.rpki-client.org