Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32332d3233203d3e203533313533.roa
File:                     3138372e36312e3130342e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          sQNBUu5Q56HPKjD67ud6sielvIecsmc39aJqKaa9KlM=
Subject key identifier:   8A:17:90:9C:34:07:63:5E:D2:A2:B5:89:3D:0B:88:C1:89:8C:7B:64
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       245CD87CFFBEB5CBB4D585C675F92EE9A38D7859
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32332d3233203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:21:24 +0000
ROA not before:           Fri 24 May 2024 14:16:24 +0000
ROA not after:            Fri 23 May 2025 14:21:24 +0000
asID:                     53153
IP address blocks:        187.61.104.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5c:d8:7c:ff:be:b5:cb:b4:d5:85:c6:75:f9:2e:e9:a3:8d:78:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:16:24 2024 GMT
            Not After : May 23 14:21:24 2025 GMT
        Subject: CN=8A17909C3407635ED2A2B5893D0B88C1898C7B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:16:76:e3:8f:25:91:af:97:11:d6:9e:7c:
                    0e:3d:8f:a4:45:6b:bf:81:ab:b1:a9:f4:8a:65:03:
                    0b:0b:ad:73:64:88:12:a6:04:4f:1d:05:74:19:e1:
                    0d:55:8a:f6:4d:37:70:30:2a:03:01:15:bf:52:d0:
                    39:69:2e:d4:3c:8d:d3:90:a5:bd:08:ac:bd:bb:c8:
                    13:67:41:01:2f:63:32:0e:d8:11:e5:25:72:00:47:
                    04:89:5c:61:37:15:eb:a5:30:88:4d:c8:f1:d1:dc:
                    aa:c9:c0:cc:b8:89:13:8e:59:46:0d:5b:f6:bd:40:
                    3b:17:85:50:b7:c6:9c:0a:26:6c:4d:2f:23:44:a3:
                    7c:81:06:c1:fc:69:a0:75:6e:9d:47:27:c9:e7:a2:
                    94:b5:20:57:a2:64:61:d1:19:50:1a:02:4f:70:42:
                    1b:bf:2f:de:b4:37:25:ec:ce:db:a8:57:62:b5:b9:
                    17:35:9a:95:12:de:c3:53:37:4a:71:bc:02:be:42:
                    e5:98:2f:21:4c:2c:97:f3:a5:e1:86:bc:0f:8c:0e:
                    82:33:88:ef:1c:c0:30:a8:86:b5:f1:4e:72:9f:67:
                    c8:00:e7:24:32:9a:46:20:59:07:66:20:4e:6d:a2:
                    a9:fc:b4:14:ca:5f:f4:9c:fc:05:9e:ad:5c:8f:8d:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:17:90:9C:34:07:63:5E:D2:A2:B5:89:3D:0B:88:C1:89:8C:7B:64
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:af:b2:c1:4e:94:67:b9:84:7b:46:22:2b:05:e5:f9:dd:09:
         63:46:31:f4:99:b3:54:83:76:bd:11:7b:e2:46:7d:18:1d:c8:
         44:54:4a:39:11:15:9b:91:a8:4c:04:13:d3:dc:ff:bc:d1:7a:
         df:5e:09:5c:8a:29:10:a5:b8:37:52:be:cf:4d:36:bb:0d:05:
         ad:83:c2:c3:6e:a3:5a:ba:aa:01:f4:cc:ca:da:55:b2:95:d9:
         0c:ed:5a:86:27:b6:2f:48:5a:af:54:64:89:d5:95:86:4c:08:
         f2:41:87:01:3e:e6:67:23:a6:07:b5:66:ae:35:13:77:4f:27:
         9c:2d:37:8b:df:ea:bf:4d:c8:ab:0c:b5:ef:ae:99:e0:4b:8c:
         57:13:c6:b2:8f:9a:48:64:8b:47:a9:57:df:5e:72:30:7f:26:
         ad:d3:dc:ba:a3:33:f3:67:92:7d:e3:52:20:37:a2:40:dd:5c:
         4b:24:24:e3:62:a2:71:77:9e:99:d9:1a:34:e4:73:28:dc:05:
         ed:36:62:dd:b8:84:91:ce:ba:31:43:7b:42:58:41:ce:97:8f:
         35:4f:f2:8a:21:f4:fd:7e:68:b8:e1:03:89:31:8d:de:8f:2d:
         5e:b1:94:34:75:08:a1:01:7d:a7:fa:00:34:0c:13:51:f3:7c:
         73:5a:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org