Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          R17sAkfHqwt3hH2Qj+XdxWvIqfCZl4CYDujFBSbY9tw=
Subject key identifier:   5B:33:48:D2:A0:AA:7F:99:2F:CD:8E:8A:99:11:04:A5:CA:6F:6A:93
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       66889641214F017419164900F25ABF0645EB0053
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:19:48 +0000
ROA not before:           Fri 24 May 2024 14:14:48 +0000
ROA not after:            Fri 23 May 2025 14:19:48 +0000
asID:                     53153
IP address blocks:        186.209.111.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:88:96:41:21:4f:01:74:19:16:49:00:f2:5a:bf:06:45:eb:00:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:14:48 2024 GMT
            Not After : May 23 14:19:48 2025 GMT
        Subject: CN=5B3348D2A0AA7F992FCD8E8A991104A5CA6F6A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:2e:28:d6:0c:5d:52:02:23:00:2d:b2:d2:
                    4d:f2:d9:2e:89:15:97:f0:74:14:b4:e9:30:f6:4b:
                    6d:1c:d5:85:7d:b8:25:56:21:40:a1:05:4b:c5:a2:
                    32:79:c8:ec:53:60:cf:f9:ba:56:3c:bf:a5:bf:68:
                    3c:5c:cd:04:02:e8:14:05:1a:b6:0c:39:5f:d5:45:
                    01:56:1f:c6:da:da:ed:bf:83:14:8d:5c:9c:31:68:
                    88:5c:73:2b:b9:63:c9:46:46:5f:8f:f3:33:1d:b8:
                    08:68:55:77:6d:8a:62:98:c4:02:a8:82:91:cc:ff:
                    54:63:04:2b:fd:7f:ce:f1:e4:8e:11:a0:b2:58:80:
                    be:88:cc:8d:20:87:8c:6e:ef:a9:bc:05:95:8b:23:
                    b0:d0:96:8b:e2:b1:c5:68:d7:59:72:b2:cd:a9:6c:
                    6b:55:18:83:66:54:20:3c:f2:ba:f1:2c:95:95:9b:
                    64:62:7a:cd:ec:26:a1:d6:22:e7:95:a0:84:88:88:
                    b7:b7:98:ef:41:8d:6d:33:73:3f:2f:5c:c7:dc:6b:
                    9a:0b:87:66:87:bf:0a:9c:c9:f0:cd:b4:db:c8:db:
                    64:07:ff:c9:0e:c9:12:a9:0e:c5:93:fa:e9:cc:13:
                    7f:26:07:30:32:87:14:1d:b0:e2:f6:ed:54:61:27:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:48:D2:A0:AA:7F:99:2F:CD:8E:8A:99:11:04:A5:CA:6F:6A:93
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:94:13:55:ec:d9:bd:83:31:3d:b2:12:77:97:16:f8:2a:61:
         08:a6:52:e5:52:20:0d:f0:e6:e4:e3:1f:6e:3c:44:52:4e:3b:
         c4:db:e6:75:48:8b:0b:ed:fc:53:64:06:d9:89:20:22:f3:16:
         e0:03:49:bc:85:7b:f7:d4:ae:c4:78:b5:9c:00:19:bf:75:75:
         0b:03:d0:64:17:76:4f:d9:34:22:ac:7d:11:29:50:b3:56:f6:
         bf:b9:5f:00:90:f7:e8:b8:15:11:1f:d4:fb:b0:ff:7f:f4:16:
         77:9b:9b:cf:4a:09:32:72:8d:55:81:53:48:c8:89:f1:a6:88:
         11:cd:98:66:ca:f4:0d:5b:fc:5d:f5:fa:d1:a0:b0:ee:13:65:
         0a:d2:8e:a3:01:b1:33:c7:bd:fe:cb:7a:8b:e8:89:11:9f:af:
         df:5a:73:b3:db:8f:6f:99:6f:f3:07:ff:34:98:a3:68:ce:36:
         6d:57:e5:98:4f:5e:7b:27:a9:d2:cc:50:3b:2b:39:8d:79:8d:
         1d:04:e2:13:b7:ef:1a:16:43:59:f1:c4:f7:1c:47:59:92:9b:
         9c:d0:e6:64:cb:40:e4:d5:98:62:79:8b:83:52:e1:73:1e:85:
         b5:7b:4d:51:11:9f:7b:d7:97:7f:6e:c2:b9:10:2c:05:e4:e1:
         e0:e2:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org