Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39362e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          V160osslLBxGXU9zGKfASQ0qfrUMmZpNV5ufLAlCxaE=
Subject key identifier:   01:59:B6:43:7D:F2:45:0B:A4:88:DC:27:28:84:46:C9:2F:3F:16:78
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       17467076C38F74290E4E7DAAB7BAD504A5E8DA65
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:20:07 +0000
ROA not before:           Fri 24 May 2024 14:15:07 +0000
ROA not after:            Fri 23 May 2025 14:20:07 +0000
asID:                     53153
IP address blocks:        187.61.96.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:46:70:76:c3:8f:74:29:0e:4e:7d:aa:b7:ba:d5:04:a5:e8:da:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:15:07 2024 GMT
            Not After : May 23 14:20:07 2025 GMT
        Subject: CN=0159B6437DF2450BA488DC27288446C92F3F1678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:f1:e0:6f:a9:77:d6:3f:02:08:bd:10:70:
                    11:29:ce:99:25:5c:f2:e1:6c:f7:05:59:6d:95:c6:
                    9d:8c:3e:c0:4b:f9:f3:21:f0:db:b4:79:89:58:24:
                    7f:cf:26:9e:78:a8:72:9c:51:3f:13:20:79:63:ed:
                    10:ce:92:2c:cf:b8:50:99:f7:77:45:ab:30:0e:55:
                    5b:36:bb:ce:46:8e:c5:b0:99:a9:00:44:3a:fe:b3:
                    d9:d6:d9:6f:b5:3c:98:c1:ee:3b:aa:4b:5b:07:e4:
                    46:51:73:fe:b8:38:f1:24:ce:14:e1:a1:4d:97:9f:
                    04:3d:f7:8c:69:e4:2a:32:07:97:d2:71:7f:ff:07:
                    39:e1:14:a7:c4:6a:be:42:9e:24:53:55:f4:f4:e5:
                    e9:6a:a5:27:2f:a2:d9:f1:b9:21:65:84:a5:39:d5:
                    83:3c:da:b7:02:c0:84:64:bf:22:53:55:92:4d:79:
                    57:c4:03:90:6a:3c:01:65:e4:f1:99:74:27:0e:9b:
                    ba:80:ef:83:4f:c2:ba:50:15:68:38:2f:b8:9a:0b:
                    be:5c:f9:fe:d3:54:4e:80:b5:50:d8:4c:bf:95:09:
                    2b:84:74:e8:64:d4:99:86:82:33:78:51:0c:fd:b8:
                    ab:2c:04:fe:4d:5b:a3:92:c6:42:05:16:d5:69:8e:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:59:B6:43:7D:F2:45:0B:A4:88:DC:27:28:84:46:C9:2F:3F:16:78
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:d9:06:ca:19:28:f3:6e:ba:89:62:7f:24:22:6a:69:e0:
         b0:b2:aa:ff:3c:b9:fd:15:97:85:98:b1:16:70:1a:6d:d6:c8:
         eb:e7:87:90:d3:39:80:0e:a7:79:9a:52:b4:64:21:b3:ff:66:
         eb:21:6e:6d:3e:82:4e:8a:fa:f2:33:d7:b0:2d:9c:4b:dc:5a:
         68:f6:6c:4d:8b:0a:5f:af:a1:fa:a6:a0:aa:aa:cb:1e:5c:ba:
         a3:61:0d:b4:eb:c9:65:d2:8d:be:03:0b:43:39:c7:dd:1e:d0:
         37:4b:a4:0c:95:23:43:0a:a0:96:33:7f:6b:89:cc:48:f4:f7:
         a6:7b:3f:2e:7e:3e:76:59:fb:ce:14:c5:fd:77:ff:2f:d5:91:
         91:bd:3c:3a:7c:ad:bd:23:0d:e1:6f:77:34:88:3b:80:9f:23:
         33:c6:f7:c4:d0:62:06:3c:da:66:2b:89:44:69:29:0f:29:68:
         af:78:60:2b:76:12:85:29:a9:f0:1c:9d:3c:5f:a1:a3:50:86:
         2a:d2:4f:09:74:b7:b1:07:f4:70:56:d0:a0:74:89:01:f2:52:
         2a:ec:e2:ef:85:70:55:35:66:85:f6:6e:a1:a9:0a:ac:9f:93:
         b3:05:9f:15:a2:dd:80:81:71:47:9d:06:52:32:cc:c1:1a:a1:
         f1:3e:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:59:36 2024 by rpki-client on console-fra.rpki-client.org