Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32342d3234203d3e20323632373235.roa
File:                     3138362e3233352e36342e302f32342d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          gWx5SAfSf8d+tcgva2vx78boEzbxdysNf/EyAtw1VXg=
Subject key identifier:   FD:BF:39:D6:F0:FA:1E:FF:E2:0D:2A:86:42:93:81:33:16:90:4F:A1
Certificate issuer:       /CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
Certificate serial:       62F9F1645A6A9370F0099B8D127C84C4A27500F4
Authority key identifier: 93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32342d3234203d3e20323632373235.roa
Signing time:             Tue 10 Sep 2024 18:13:13 +0000
ROA not before:           Tue 10 Sep 2024 18:08:13 +0000
ROA not after:            Tue 09 Sep 2025 18:13:13 +0000
asID:                     262725
IP address blocks:        186.235.64.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f9:f1:64:5a:6a:93:70:f0:09:9b:8d:12:7c:84:c4:a2:75:00:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
        Validity
            Not Before: Sep 10 18:08:13 2024 GMT
            Not After : Sep  9 18:13:13 2025 GMT
        Subject: CN=3082010A0282010100DEA7458820ED7AE011839ADF2E7C0B2FE41659B7555393B4FC3A9FAEF966F77D8F72C42BBEF9F8F8A13AE9301985EBDEA7D233AD3C88AE385719BA842D9335F02B93D4EA17D0AA4375505294548939D61E38D0178395A270B22B68F69F6B0F70C2CDA73267BCAF1C8C0E5334EFC96ACEACEAEC4AB8B797B3733A1C8151FF23ECDF3E38E0EDA6F3BBA0A4E777402E93E5F46512D061C4A6780006C5AA733CDAD3E240966CC149CFEE9357E18C14A586F35BB323E763FE2594657F778B9AB244DBFD4463FA79C4EA8F5DD0666E89A02C926B24963E6BAF07231F7E013EE87707AA48034EC800AB01E317EA498977A82E7E23448A1EC4712528290167F74CD1FFCD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:45:88:20:ed:7a:e0:11:83:9a:df:2e:7c:
                    0b:2f:e4:16:59:b7:55:53:93:b4:fc:3a:9f:ae:f9:
                    66:f7:7d:8f:72:c4:2b:be:f9:f8:f8:a1:3a:e9:30:
                    19:85:eb:de:a7:d2:33:ad:3c:88:ae:38:57:19:ba:
                    84:2d:93:35:f0:2b:93:d4:ea:17:d0:aa:43:75:50:
                    52:94:54:89:39:d6:1e:38:d0:17:83:95:a2:70:b2:
                    2b:68:f6:9f:6b:0f:70:c2:cd:a7:32:67:bc:af:1c:
                    8c:0e:53:34:ef:c9:6a:ce:ac:ea:ec:4a:b8:b7:97:
                    b3:73:3a:1c:81:51:ff:23:ec:df:3e:38:e0:ed:a6:
                    f3:bb:a0:a4:e7:77:40:2e:93:e5:f4:65:12:d0:61:
                    c4:a6:78:00:06:c5:aa:73:3c:da:d3:e2:40:96:6c:
                    c1:49:cf:ee:93:57:e1:8c:14:a5:86:f3:5b:b3:23:
                    e7:63:fe:25:94:65:7f:77:8b:9a:b2:44:db:fd:44:
                    63:fa:79:c4:ea:8f:5d:d0:66:6e:89:a0:2c:92:6b:
                    24:96:3e:6b:af:07:23:1f:7e:01:3e:e8:77:07:aa:
                    48:03:4e:c8:00:ab:01:e3:17:ea:49:89:77:a8:2e:
                    7e:23:44:8a:1e:c4:71:25:28:29:01:67:f7:4c:d1:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BF:39:D6:F0:FA:1E:FF:E2:0D:2A:86:42:93:81:33:16:90:4F:A1
            X509v3 Authority Key Identifier:
                keyid:93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32342d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:14:99:8f:56:3f:ba:59:b7:a6:ff:d3:f2:b0:7c:2a:a3:
         6c:2c:a7:e2:75:b8:cc:cc:a2:ad:0d:40:24:56:b8:79:c4:04:
         db:70:ba:88:ab:a9:7c:d4:e7:f1:6c:c3:f4:e8:dd:c0:46:43:
         22:cf:8b:e1:cc:fb:24:bf:aa:b8:6d:79:17:92:61:6b:63:59:
         46:71:49:e4:f0:6d:4f:5c:b9:82:a9:49:6e:09:69:18:66:cd:
         3c:c3:3e:0a:43:c9:0d:89:41:04:49:f8:d2:c0:f0:e0:0b:1a:
         3b:d9:3d:d5:18:f6:73:93:dd:69:e0:69:8e:5c:85:58:07:9a:
         73:e2:24:12:19:74:d8:da:d5:b4:dd:66:d3:e2:1c:f2:ec:4b:
         45:9f:49:2c:a3:c6:77:d6:d2:9e:07:cb:f1:d6:60:94:89:c5:
         4e:56:1b:1c:55:52:c1:be:49:de:d5:36:d3:76:da:90:09:0b:
         5f:29:6e:aa:d0:4a:0e:41:00:9b:62:93:0a:fb:4a:60:76:64:
         d2:7b:24:d4:74:66:23:61:4f:0e:77:ba:f7:05:68:0d:d6:c1:
         97:de:0a:cb:b1:3c:d7:1b:1d:b6:d5:03:3d:8a:3c:b1:dc:e5:
         3c:62:13:ce:95:0f:e5:82:09:49:29:be:2b:af:24:14:74:fe:
         1a:6e:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 04:44:23 2024 by rpki-client on console-ams.rpki-client.org