Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e39362e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          ynu/bYQmPxhD4+AJ+qY7d4UQm58NKbcxW9xTVYQ32CI=
Subject key identifier:   F5:D2:0C:0F:6B:7F:D5:22:0B:4F:A6:85:2D:9E:2B:32:5F:C5:B5:52
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       02D1189E2F7691C531553B5AF3B3D4CF5B4332EF
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:19:06 +0000
ROA not before:           Fri 24 May 2024 14:14:06 +0000
ROA not after:            Fri 23 May 2025 14:19:06 +0000
asID:                     53153
IP address blocks:        186.209.96.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d1:18:9e:2f:76:91:c5:31:55:3b:5a:f3:b3:d4:cf:5b:43:32:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:14:06 2024 GMT
            Not After : May 23 14:19:06 2025 GMT
        Subject: CN=F5D20C0F6B7FD5220B4FA6852D9E2B325FC5B552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:81:60:26:1f:86:ff:b2:79:f1:cc:62:c2:
                    ff:e5:9f:48:6b:2f:fb:ca:8a:c4:ce:6f:22:c4:25:
                    87:78:35:12:82:b5:32:21:14:14:76:86:63:7e:78:
                    1b:26:9a:84:ae:51:fd:2c:2c:8f:04:66:39:04:e7:
                    a4:23:47:75:89:51:49:bc:67:c0:74:08:30:d5:0d:
                    91:c8:19:87:12:39:3a:d1:0c:67:87:79:6c:ac:6e:
                    11:73:44:3b:36:99:cb:e4:af:72:42:5d:41:79:76:
                    10:ce:9c:29:be:ce:ed:39:ed:a8:2e:d8:91:ef:91:
                    fd:5b:24:65:fa:14:51:96:5b:ae:fc:a0:34:00:95:
                    89:9c:e5:26:5a:2e:ea:3b:8c:86:f6:6d:98:04:dc:
                    0c:02:fe:ca:3d:2a:a6:b4:78:e4:86:ed:e4:5a:5e:
                    d3:11:e2:8a:4c:76:f6:97:45:6c:76:55:d6:90:ad:
                    e1:42:95:d4:07:fc:ef:5c:f9:89:9b:30:f3:11:45:
                    7b:cc:f5:80:66:4f:f2:f1:39:e3:20:08:5e:bd:bf:
                    6d:25:be:8f:f1:fe:8d:2b:d1:63:2a:3f:95:0a:2d:
                    e1:7f:68:0a:5c:93:d9:11:97:b5:d9:7e:60:4a:ab:
                    15:44:f3:b2:9f:34:54:44:7c:44:cb:f6:98:3d:0a:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:0C:0F:6B:7F:D5:22:0B:4F:A6:85:2D:9E:2B:32:5F:C5:B5:52
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:69:55:30:57:88:52:2f:a3:ec:0f:c3:0e:a7:e3:44:08:ae:
         b3:7b:98:40:a3:ab:cb:32:0b:85:5e:17:2c:22:94:4a:56:8c:
         b8:26:0e:b1:ef:71:85:c1:0b:c5:ec:af:b3:08:6b:77:ec:3c:
         6f:f7:a7:21:ee:c9:c1:fd:50:a5:fb:2c:dc:70:ff:06:7e:c6:
         8a:71:80:c5:65:73:ab:3d:ab:49:8c:87:0c:a9:92:32:96:13:
         49:6e:f2:76:94:f5:2b:52:cc:36:f2:9c:56:10:77:61:f7:39:
         57:88:5b:55:14:7f:19:1b:cd:31:46:d6:4a:70:1a:73:d0:3b:
         a7:df:68:10:89:2c:36:59:c2:cc:8c:3b:90:72:f9:41:15:2b:
         0d:77:f4:6b:4c:c9:fe:61:c6:3e:da:a5:1d:6e:43:0d:a5:81:
         c3:9a:bd:8d:bf:8c:e4:a9:2a:e5:a8:88:68:75:ad:90:78:f5:
         84:44:50:10:02:87:48:20:2e:a3:03:14:52:31:b1:05:bb:16:
         f8:fb:51:61:2a:de:c0:45:e0:11:20:63:7a:83:f5:d1:c8:25:
         d0:54:71:6a:c7:2d:db:92:b8:1c:c0:b8:33:86:63:6b:2c:8f:
         a2:ea:cc:be:5d:83:85:e9:79:00:fd:b4:2f:80:f9:dc:d7:3d:
         ed:49:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org