Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e322e302f32342d3234203d3e20323632373235.roa
File:                     3138362e3139322e322e302f32342d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          v7gs/X6V7qsjJfzcT+3YPH/1yrHdmnhlBx6x3BrhPUw=
Subject key identifier:   36:7A:77:29:43:1D:1B:83:C9:FF:DA:84:B8:9F:21:AB:93:45:A0:D7
Certificate issuer:       /CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
Certificate serial:       1C07ADCED649B9D5C069F02FE5F70CBFB885FA88
Authority key identifier: 93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e322e302f32342d3234203d3e20323632373235.roa
Signing time:             Tue 10 Sep 2024 18:13:15 +0000
ROA not before:           Tue 10 Sep 2024 18:08:15 +0000
ROA not after:            Tue 09 Sep 2025 18:13:15 +0000
asID:                     262725
IP address blocks:        186.192.2.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:07:ad:ce:d6:49:b9:d5:c0:69:f0:2f:e5:f7:0c:bf:b8:85:fa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
        Validity
            Not Before: Sep 10 18:08:15 2024 GMT
            Not After : Sep  9 18:13:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:10:96:b5:7d:a1:c1:9c:cf:9e:01:f3:78:
                    9f:4f:0e:fa:73:a8:20:32:5e:53:28:7e:66:33:dc:
                    e3:4f:39:84:32:ef:f5:ee:bd:9a:7d:a8:8c:40:74:
                    ec:5e:a4:97:49:67:18:0b:76:a4:88:72:7f:e3:14:
                    e8:11:1c:e5:bb:b8:7a:ff:d9:1a:b9:29:3b:a0:5b:
                    1f:a4:8c:64:43:cd:31:d8:4a:f5:e5:d7:54:de:61:
                    8e:d0:ca:84:bd:7e:70:ff:39:0c:f1:97:a0:bd:cd:
                    cf:fc:23:dc:76:81:d7:16:a6:38:e0:8c:50:78:34:
                    d2:c6:27:39:c9:a3:6b:f9:f7:c3:4f:b8:1f:81:29:
                    6a:09:c5:1f:2d:ec:82:4e:c8:dc:48:cb:e6:e3:0a:
                    1d:a7:59:87:88:1c:77:a4:a8:d9:41:7a:2d:29:12:
                    41:6d:cc:cf:d4:8a:25:ea:fb:3c:54:4d:a2:2b:f7:
                    b7:0a:75:24:31:74:c2:02:d9:56:da:81:2a:9c:c0:
                    a5:ac:7c:2c:42:0d:d1:ce:16:df:f0:65:67:a3:54:
                    b4:33:0d:60:50:d7:51:1d:24:a2:9b:37:1f:6c:1c:
                    e6:40:67:f4:76:98:f4:7b:41:86:fe:ce:dd:cd:87:
                    db:11:41:7a:1d:6d:2d:c7:fc:94:71:5a:46:4e:6e:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:77:29:43:1D:1B:83:C9:FF:DA:84:B8:9F:21:AB:93:45:A0:D7
            X509v3 Authority Key Identifier:
                keyid:93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e322e302f32342d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:82:1e:f3:9e:2c:48:56:f5:81:3b:1e:05:02:08:2d:52:76:
         e0:43:02:8f:e6:30:eb:b6:58:c5:d1:9d:ba:d8:c4:e5:48:e5:
         7d:4b:d7:3b:9c:c7:f0:c6:44:24:b2:78:5f:31:79:1c:cf:e5:
         c0:65:bd:dd:15:1c:1e:19:82:9c:5a:37:db:7f:d5:fa:ee:40:
         f1:7a:29:3b:37:da:f6:4b:40:55:72:3c:78:16:8e:44:f0:82:
         18:bd:a3:64:c7:0b:c6:89:9c:24:67:e0:ea:6e:ee:a9:59:dc:
         05:67:78:9e:cf:ac:76:20:b7:72:a6:c4:a8:09:43:7e:11:dd:
         4f:f7:70:71:c3:94:a5:b8:b8:97:2b:eb:7f:92:89:dc:68:00:
         be:59:0f:9d:58:02:87:69:e9:6d:f5:0a:d9:f6:ee:d6:06:d6:
         f0:80:46:45:f9:e1:e8:3e:09:6d:f4:60:25:d0:6a:fb:4f:17:
         57:15:07:42:a6:19:fc:90:d2:01:8e:e3:79:f7:52:2d:00:f3:
         c8:d2:d5:b7:ae:b3:43:29:20:c6:a9:f2:79:a9:c2:3c:8a:45:
         c1:a5:05:16:f1:37:7f:e8:14:97:ac:02:b1:c4:14:ef:bd:e4:
         53:75:f3:e8:ae:fa:7a:e0:e8:cd:12:55:d7:81:40:1f:ce:df:
         d4:95:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 04:44:23 2024 by rpki-client on console-ams.rpki-client.org