Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          UAJ/4+WK8zruo3m+h9+DsOcaJgUj+XMzZ/AmDPG9ZI4=
Subject key identifier:   E8:BC:76:3F:3E:90:9C:EC:7D:0E:48:09:2D:85:09:52:74:0F:66:73
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       45D13054ACB483163921F9188EB1E1EDF9860157
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:20:25 +0000
ROA not before:           Fri 24 May 2024 14:15:25 +0000
ROA not after:            Fri 23 May 2025 14:20:25 +0000
asID:                     53153
IP address blocks:        187.61.98.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d1:30:54:ac:b4:83:16:39:21:f9:18:8e:b1:e1:ed:f9:86:01:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:15:25 2024 GMT
            Not After : May 23 14:20:25 2025 GMT
        Subject: CN=E8BC763F3E909CEC7D0E48092D850952740F6673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:d2:a4:9f:25:64:c8:b3:d4:30:98:5c:e3:
                    c8:fd:b7:0e:f2:88:fd:5b:f1:de:30:d8:2e:6a:eb:
                    86:b1:e4:20:0f:66:9c:58:8f:01:2a:f5:5d:1e:2e:
                    64:67:4d:ea:cf:1c:35:88:a3:b9:c1:8f:d7:d2:b8:
                    36:cd:a9:b8:ee:9f:19:f5:f9:b8:c9:74:99:9d:2e:
                    ce:e8:94:3b:c7:77:be:6c:c6:ef:a8:cb:3e:64:9e:
                    b5:e9:9b:5c:2d:1a:3e:39:e2:2c:3e:1b:78:1f:19:
                    67:f0:31:78:82:0b:29:44:d9:9a:af:1d:fe:f0:2e:
                    38:ec:85:30:1b:a6:80:ec:44:bf:6c:83:d4:01:b1:
                    31:09:b8:f0:bd:82:8b:da:a1:36:30:7b:c1:0b:9b:
                    2f:db:12:ad:fc:9e:4e:2e:d4:fe:fb:60:de:dc:09:
                    17:6a:1f:b3:e4:e5:6a:ff:27:a1:fd:15:ca:b9:7a:
                    9c:70:80:ef:d5:96:f9:62:80:33:a2:23:cf:36:b3:
                    17:53:42:92:0e:9d:5f:06:c8:0e:cc:19:dc:88:03:
                    39:0e:98:49:a2:f3:5f:a9:ef:d0:c7:0e:18:55:d7:
                    71:4b:a3:ba:75:19:ee:1e:1a:dd:69:7c:d5:f4:78:
                    81:45:db:8f:2e:9d:b1:ac:dc:4d:9a:0e:47:38:a6:
                    06:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BC:76:3F:3E:90:9C:EC:7D:0E:48:09:2D:85:09:52:74:0F:66:73
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:24:3a:6c:a0:3c:02:c3:70:94:5b:82:e4:f0:f6:e6:f7:7c:
         a8:59:0f:3d:d7:8d:26:64:41:cf:b8:bf:9e:31:df:3b:35:6c:
         a1:b3:2a:89:cf:d1:4e:57:f0:6b:82:5c:5e:da:65:16:b2:53:
         0a:cd:b0:ac:10:7a:04:f8:f9:50:df:d7:44:e3:9c:2c:ac:05:
         95:e8:24:98:92:28:05:a5:ab:f2:e7:da:00:ac:61:c9:52:b2:
         67:b7:95:f1:41:df:44:d4:08:86:77:f7:3e:7e:ae:f4:a2:c5:
         b4:b0:e0:a5:b3:fb:ca:c6:4d:1e:15:41:a9:ad:b8:95:29:f3:
         0b:f4:8a:fc:f8:54:be:3b:ee:1f:09:df:71:c4:d0:5a:e1:ba:
         85:2b:ae:fa:58:8a:76:81:54:b2:b1:14:78:82:30:ba:dd:08:
         90:47:46:5d:8b:2e:7d:67:21:1f:73:ea:ee:49:93:a2:af:db:
         2d:81:25:9e:d0:7e:c7:a7:c9:8e:e1:39:a5:dc:24:09:83:99:
         69:20:9c:3a:cc:97:a3:b8:46:cf:72:4b:92:f7:2b:2c:8f:b7:
         24:f3:3d:3b:6e:dc:57:fc:7d:e5:8b:66:15:2e:6d:85:4a:76:
         f5:54:57:05:1f:ae:d2:ce:ec:e4:56:f7:c7:12:6d:33:9c:02:
         54:ce:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org