Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3131302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          avZVyvCH5p6vjplh9A73mm3MsXkrj8waSoKV6KXf7Wo=
Subject key identifier:   12:37:AE:6D:D9:59:5F:D3:C1:1E:BC:83:61:05:BA:78:52:1E:BF:9E
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       0A5BB811E295F8FB7E0602274F53DDD8720400CF
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:20:28 +0000
ROA not before:           Fri 24 May 2024 14:15:28 +0000
ROA not after:            Fri 23 May 2025 14:20:28 +0000
asID:                     53153
IP address blocks:        187.61.110.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5b:b8:11:e2:95:f8:fb:7e:06:02:27:4f:53:dd:d8:72:04:00:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:15:28 2024 GMT
            Not After : May 23 14:20:28 2025 GMT
        Subject: CN=1237AE6DD9595FD3C11EBC836105BA78521EBF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:7a:cf:be:fa:14:25:e3:40:e4:85:bd:f1:
                    8c:fe:05:d8:9a:f8:69:7d:44:f5:13:76:12:d6:72:
                    6e:b2:78:d7:e3:45:ef:28:7e:10:14:0f:df:0b:38:
                    b9:71:e6:58:15:8d:5c:30:c5:64:85:9c:ce:a8:e8:
                    be:1e:c9:ab:c3:52:a0:6c:04:7e:b5:d7:e7:3a:dc:
                    67:d3:cc:4d:ac:8e:a1:70:9f:3d:b3:c6:11:97:2c:
                    3a:18:68:35:2d:a7:a1:66:1b:81:3b:f4:0e:c9:81:
                    ea:85:e4:56:9d:1d:0e:ae:36:d2:90:1f:8b:b5:28:
                    25:60:0e:47:c7:df:87:9c:47:d5:2d:37:33:52:1a:
                    a3:8c:73:f8:98:7f:05:a1:49:8b:ee:ee:d4:5c:3b:
                    2d:17:26:61:ff:72:d7:a8:37:14:0c:ac:52:58:7d:
                    c8:1a:ff:67:4a:0d:1d:ed:cb:bd:a5:bb:b0:aa:df:
                    11:92:bb:57:72:a6:a9:48:cc:5e:ae:23:df:8a:f7:
                    dd:f5:81:1a:69:38:bc:e8:31:2b:ac:c6:be:4a:eb:
                    fd:c8:53:32:bf:6f:01:2e:e2:46:47:70:f3:fb:9f:
                    4a:c1:ab:90:81:84:46:a3:f9:4b:1d:cb:9b:45:82:
                    1c:48:29:f3:3a:2b:81:d4:3f:7f:37:a6:5d:6e:61:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:37:AE:6D:D9:59:5F:D3:C1:1E:BC:83:61:05:BA:78:52:1E:BF:9E
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:fe:39:db:35:fc:e2:df:c0:7d:96:c6:21:c8:c0:47:f0:
         4b:bb:e8:60:47:1c:9b:57:e6:6a:fe:18:7d:d1:fb:fd:c6:ca:
         a7:dc:5e:d4:d2:72:75:01:5c:68:99:61:e1:92:53:24:92:3f:
         df:a0:8d:1f:7d:1d:2d:ba:3c:e3:2a:f2:e8:34:07:a8:f6:9d:
         8c:af:cd:73:3f:22:a3:ee:c2:a1:6f:15:1c:fa:d8:fd:d5:f7:
         2f:94:82:3c:01:5f:12:d4:16:df:6d:22:a2:a0:91:c2:53:e5:
         59:63:a3:b3:6e:cd:21:68:4a:68:23:4b:6f:5c:34:fe:98:91:
         28:d2:0e:fc:1f:df:38:6c:b3:c5:94:c9:b7:20:45:fd:35:39:
         09:20:20:5a:94:7b:c0:5e:16:24:5a:22:75:a9:0f:79:eb:51:
         d9:20:28:61:85:0d:9d:f9:42:13:b1:f6:37:27:41:54:e1:5f:
         87:5d:90:46:a3:29:0f:b3:8d:58:cc:af:be:33:08:42:f0:a7:
         f3:e2:3e:1d:db:ed:06:0d:c6:f8:3b:2b:32:92:4f:3b:e4:fe:
         8d:e5:48:b3:d6:68:63:29:6a:88:58:1a:f4:b9:0c:20:7d:f7:
         72:08:d2:6e:9f:82:88:c8:5f:36:98:93:10:18:2a:94:63:55:
         41:30:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org