Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130322e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          YAeCJucBdahHtRGk4O7vYGvOiHFTr/D6M4+eDK65UFM=
Subject key identifier:   14:F7:43:DE:0B:AA:05:9B:C0:1A:28:4A:AE:16:3C:F0:89:8D:78:A9
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       575C2984D459B5771EF249ABA4440E3D3446ED43
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:21:18 +0000
ROA not before:           Fri 24 May 2024 14:16:18 +0000
ROA not after:            Fri 23 May 2025 14:21:18 +0000
asID:                     53153
IP address blocks:        187.61.102.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5c:29:84:d4:59:b5:77:1e:f2:49:ab:a4:44:0e:3d:34:46:ed:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:16:18 2024 GMT
            Not After : May 23 14:21:18 2025 GMT
        Subject: CN=14F743DE0BAA059BC01A284AAE163CF0898D78A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:c3:cd:48:6a:0f:01:f1:97:86:7b:9d:e2:
                    a4:ca:b3:ae:5a:65:36:ce:b8:b3:92:4c:3f:1e:0b:
                    94:f5:5c:29:82:d6:59:35:75:4b:65:50:82:66:38:
                    26:c3:2b:f2:93:88:07:6d:cc:9e:ce:7f:7c:b8:ad:
                    e4:ce:2e:d7:eb:8f:8a:41:54:05:e9:23:b0:d8:5e:
                    86:00:d5:be:13:eb:ee:a5:35:ac:fc:06:1b:d3:f4:
                    56:9f:d5:68:c6:66:22:78:8e:d9:8f:ab:ed:26:d4:
                    3d:fa:83:b3:48:3d:70:53:20:e1:29:29:eb:44:47:
                    5e:f3:c7:94:1d:27:57:b8:0d:49:9a:3a:a9:09:2c:
                    4e:19:f9:c5:fe:f7:01:e5:5b:e5:70:76:be:f8:97:
                    d9:7e:b2:46:3f:10:95:e0:dc:bb:9a:8f:75:03:d6:
                    99:8c:f8:c6:56:b2:21:0f:1a:b7:f6:2e:6c:fc:63:
                    64:3f:0d:67:3e:ae:68:14:81:8b:be:02:1f:8d:49:
                    8b:68:2c:45:69:e8:e0:31:6e:c1:93:db:d7:82:48:
                    00:5e:3a:e8:32:d6:22:d4:7e:f2:70:ca:e6:8c:54:
                    52:08:c6:a3:ad:4b:94:bb:0c:d4:6d:0c:41:af:d5:
                    7a:b9:16:12:fe:12:c8:9e:37:b1:1a:e0:4c:4f:e6:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:43:DE:0B:AA:05:9B:C0:1A:28:4A:AE:16:3C:F0:89:8D:78:A9
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:9e:ec:66:e8:17:5d:5a:0b:31:c8:80:dc:c6:47:61:aa:
         ca:97:12:f9:c5:8e:65:e8:60:3f:dc:89:8d:e1:08:8b:97:1c:
         52:e3:40:35:88:dd:ea:d4:ce:99:32:d0:7a:5a:25:f4:f9:fd:
         52:13:28:ee:9c:30:40:74:1f:c3:68:35:d9:49:75:75:4a:fe:
         ae:41:b9:b1:9a:38:ca:df:e0:42:c2:3e:24:e0:2c:2f:fd:03:
         a1:df:0b:a4:25:6c:6c:92:06:63:55:8d:17:b0:62:5a:d7:9c:
         21:80:bb:04:73:3d:53:00:03:d3:14:90:48:e5:98:94:e6:4c:
         ce:93:de:99:b5:dd:4b:62:57:f0:d6:6c:e0:44:4f:6d:51:3f:
         09:3b:1c:39:33:3d:65:6e:c2:7f:fa:b0:5a:c8:f8:3f:63:9c:
         3e:6c:93:61:f8:05:d5:26:a4:fd:0b:71:3b:0e:00:df:56:30:
         bc:a5:15:b6:0b:c0:f9:43:b0:e4:2c:35:e6:fc:96:af:43:75:
         9f:30:e5:4c:3f:a0:03:53:a5:48:ce:f6:e8:5e:39:d9:03:31:
         7e:7b:6f:8f:d8:02:a3:ec:52:a2:d1:84:9e:11:4a:cd:9c:5b:
         2e:2f:9f:b4:4a:7c:89:b2:25:ab:ad:42:cc:36:1d:53:13:ac:
         94:14:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:59:36 2024 by rpki-client on console-fra.rpki-client.org