Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          J7gtdSvbJj4GJt95X5JMlrR3B3/bzphMopKrjQRhxoE=
Subject key identifier:   08:58:35:9E:B7:C9:12:87:67:2F:27:5D:D3:B0:0B:DB:11:01:27:FA
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       214627483585D0EBF5B24D784551F8ED767A1D3F
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:20:18 +0000
ROA not before:           Fri 24 May 2024 14:15:18 +0000
ROA not after:            Fri 23 May 2025 14:20:18 +0000
asID:                     53153
IP address blocks:        187.61.111.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:46:27:48:35:85:d0:eb:f5:b2:4d:78:45:51:f8:ed:76:7a:1d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:15:18 2024 GMT
            Not After : May 23 14:20:18 2025 GMT
        Subject: CN=0858359EB7C91287672F275DD3B00BDB110127FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:2f:35:65:3f:88:39:5e:db:ab:31:c8:59:
                    3d:a0:7e:b6:96:b2:e2:fe:ad:de:88:87:af:09:d3:
                    24:74:58:82:4f:2b:7b:95:9d:67:23:1c:58:9c:1c:
                    c7:04:c7:2f:26:cf:67:52:ea:8b:f9:c0:75:da:ea:
                    e1:6e:86:d1:9e:e9:5f:54:f2:6f:90:d1:35:a4:a8:
                    82:59:f6:1e:bb:bd:d2:a1:f2:38:91:32:e0:a2:7f:
                    28:0a:aa:32:9f:1f:4b:ab:e6:9c:c5:1f:37:20:99:
                    08:ce:03:27:e1:cd:5b:e3:93:6f:ae:e1:20:d9:28:
                    a9:49:04:59:62:d1:f4:88:64:fd:de:62:e0:62:be:
                    10:8e:48:de:65:74:25:b2:fc:40:a1:70:53:e3:0c:
                    f6:70:96:18:80:9a:57:1a:0b:51:f9:3c:fb:62:2a:
                    37:11:a7:1a:4c:c7:ef:36:ec:1b:33:e2:2e:72:aa:
                    2d:80:2c:9f:4e:86:83:b2:e1:6f:35:4e:6a:8e:c0:
                    04:1d:65:8a:c4:aa:07:67:6d:3d:9b:71:60:09:1d:
                    c4:8d:79:1d:dd:bb:ee:57:cb:f5:b0:6d:ef:bd:97:
                    ee:78:42:f9:a4:73:03:7a:6e:96:44:11:c8:9e:59:
                    5f:e1:ed:2c:57:e5:63:1b:36:60:92:e4:64:c9:da:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:35:9E:B7:C9:12:87:67:2F:27:5D:D3:B0:0B:DB:11:01:27:FA
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:8c:57:85:65:f1:f8:19:e6:d7:7a:a9:8e:c1:c2:40:da:
         3b:e7:10:05:d8:69:7e:cf:65:dc:b9:51:e3:2f:7e:46:9d:bc:
         84:30:fe:ca:56:78:54:70:b2:f7:3f:22:e4:f4:89:7c:62:19:
         bd:8b:92:fa:40:5a:88:6e:91:8f:7f:87:1e:c8:65:33:11:b7:
         a5:d9:c8:17:c3:2e:26:c9:c9:25:0c:39:47:59:be:53:3b:2f:
         9c:a8:74:a7:43:cb:19:00:eb:26:fd:96:68:cb:87:55:d4:d1:
         8d:44:a4:24:23:c7:46:73:e0:2c:e6:b4:c8:73:89:d4:11:28:
         cf:22:17:6c:af:9d:b0:04:51:50:f6:50:7e:2a:36:7f:be:56:
         1f:a6:d2:db:be:30:ad:a0:d0:56:a7:a7:ea:cf:73:3f:36:04:
         2d:6e:b5:f4:d5:71:dc:b8:57:3d:5f:60:13:40:39:ef:3b:f5:
         af:39:df:81:77:1c:ae:59:db:f2:dc:4f:71:e7:bb:92:67:05:
         08:8f:38:f3:88:17:1e:b6:17:80:89:1c:70:2b:21:a0:10:ca:
         ce:ca:28:99:11:42:a4:2b:14:02:fd:a0:19:e3:b5:0e:87:56:
         81:b9:7c:20:0c:f6:01:17:85:2a:5a:9d:36:84:7f:80:d9:f8:
         e9:67:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:59:36 2024 by rpki-client on console-fra.rpki-client.org