Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          aQOiOcFdEuUIjJGeQPchXf7Ol7qlqQb4ciMv/V7RQLI=
Subject key identifier:   F7:18:2F:79:59:39:10:EA:EB:3A:E5:BB:09:DD:B3:F0:41:6A:A1:E3
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       51A276D895703B7FB72ADDF7B139B8896925DC69
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:20:32 +0000
ROA not before:           Fri 24 May 2024 14:15:32 +0000
ROA not after:            Fri 23 May 2025 14:20:32 +0000
asID:                     53153
IP address blocks:        187.61.109.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a2:76:d8:95:70:3b:7f:b7:2a:dd:f7:b1:39:b8:89:69:25:dc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:15:32 2024 GMT
            Not After : May 23 14:20:32 2025 GMT
        Subject: CN=F7182F79593910EAEB3AE5BB09DDB3F0416AA1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:a9:73:92:36:d5:cf:b9:e4:6c:df:9d:3b:
                    92:72:88:b8:af:14:07:59:78:21:7d:04:82:70:f5:
                    e9:17:aa:fa:65:dd:3c:a8:1d:4a:58:c2:a9:95:72:
                    b1:48:17:12:3d:ab:ec:21:1d:eb:7b:f1:f6:05:db:
                    2a:0b:fb:84:0d:4d:1c:89:e8:92:36:9f:33:47:78:
                    77:05:4c:28:7b:4a:9e:cf:a0:cb:f7:36:a0:6c:48:
                    01:ea:d4:e8:8f:4c:60:dc:0d:e2:cd:88:a8:f7:c8:
                    19:eb:61:f8:65:ce:77:6c:1e:26:55:14:6c:a0:ed:
                    8c:74:3c:be:38:5f:e8:0e:20:d3:5b:b8:74:8f:ce:
                    86:d8:79:18:99:0b:61:29:54:09:18:85:e3:aa:5a:
                    92:81:48:bb:d5:3d:87:f9:9d:95:4b:8e:3e:f5:ed:
                    95:99:99:27:cd:80:0f:3f:0a:21:39:12:31:20:96:
                    7b:68:45:22:e2:22:04:8a:08:be:bc:46:8e:7e:93:
                    b1:c2:52:42:2a:37:f5:78:6d:2c:d3:e5:fa:07:37:
                    8e:a1:52:85:81:9e:92:86:7a:a2:69:62:51:b7:56:
                    ab:95:e4:24:ff:7e:90:70:c3:d8:92:29:91:7d:55:
                    a2:b0:5e:ab:46:4d:f6:05:0e:a5:9a:de:4b:15:4e:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:2F:79:59:39:10:EA:EB:3A:E5:BB:09:DD:B3:F0:41:6A:A1:E3
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:2b:ae:24:21:74:88:39:9a:a3:ed:74:ed:78:4d:cf:b3:e4:
         a4:1f:89:b3:a6:b4:00:91:23:a7:89:9c:b1:7b:78:4f:f5:82:
         c8:30:88:5e:c5:a5:85:5c:c4:98:9b:bc:67:b1:a3:2f:6e:6c:
         f7:18:6f:9f:46:10:c3:fa:e7:61:e5:50:76:2b:6e:bb:4f:44:
         cb:fa:3b:b4:2a:65:c1:6f:1a:82:63:f0:3d:74:48:5d:de:b3:
         40:1a:01:52:8e:9e:0e:3f:5a:98:53:fc:fe:c0:02:8c:18:20:
         26:c6:33:23:8b:2d:fd:80:a0:02:ae:ec:df:aa:97:76:d9:04:
         69:22:f1:7e:b7:b4:1f:b8:b4:c2:35:b1:f8:62:fe:60:63:2c:
         75:d6:68:4b:ce:8c:da:15:47:c4:62:f0:69:46:95:38:d1:8b:
         87:d3:f9:03:e5:aa:53:8e:61:14:af:60:52:b3:a6:a9:b0:de:
         20:d3:d2:91:0f:f9:4d:2a:fb:6a:49:61:d8:bb:f3:1c:88:3d:
         96:bc:56:57:e4:7e:21:58:47:e6:c0:7a:e1:a2:e3:58:45:0a:
         5b:c3:3c:42:29:9e:14:2a:01:3d:71:3b:43:69:e8:c5:ba:b2:
         21:72:3c:cf:66:56:65:05:18:ba:00:22:24:9a:43:c9:1a:b3:
         ec:6d:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org