Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa
File:                     3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          QcR5X8zoT+cKHM5/5/puNOCH7HSVQGjwV8TdHgOlbo8=
Subject key identifier:   D1:F6:9F:2F:74:70:42:72:95:11:91:08:BF:81:18:AE:25:1C:E9:1D
Certificate issuer:       /CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Certificate serial:       5546C962D20A4ED9D8013755039FFFAD38084F73
Authority key identifier: C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa
Signing time:             Fri 05 Apr 2024 01:07:59 +0000
ROA not before:           Fri 05 Apr 2024 01:02:59 +0000
ROA not after:            Fri 04 Apr 2025 01:07:59 +0000
asID:                     262769
IP address blocks:        186.232.56.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:46:c9:62:d2:0a:4e:d9:d8:01:37:55:03:9f:ff:ad:38:08:4f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
        Validity
            Not Before: Apr  5 01:02:59 2024 GMT
            Not After : Apr  4 01:07:59 2025 GMT
        Subject: CN=D1F69F2F7470427295119108BF8118AE251CE91D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:e4:e9:0c:a7:89:0d:2b:70:76:74:3b:0f:
                    f3:c2:cc:63:5e:46:8b:1f:aa:d0:5d:54:b2:0f:e9:
                    f7:cf:36:40:5b:38:66:e4:6e:33:0e:62:35:9c:57:
                    de:57:19:27:4b:d5:7c:11:f9:f7:11:03:a8:3f:84:
                    57:4b:93:29:5a:af:7d:7b:8c:2e:8c:14:c0:40:9f:
                    23:23:0c:9d:75:f5:d3:f3:96:df:05:33:38:a6:78:
                    bc:51:7a:8f:ce:7b:94:2c:6a:f1:13:e7:61:04:72:
                    3b:86:1c:1e:9a:45:f5:cb:0a:23:cd:9b:7c:13:d5:
                    6c:d3:8e:4e:d7:66:ee:0d:9d:d8:2d:c7:f9:a9:48:
                    d3:07:ee:ec:78:c9:15:9a:96:7f:fd:88:17:de:6e:
                    98:21:d6:3c:43:1e:e4:d5:21:d4:e0:c1:41:85:c5:
                    46:5a:64:98:61:5e:31:55:83:cf:ef:74:83:f5:90:
                    5c:f9:93:4d:b1:78:8a:64:73:e8:ea:20:09:1c:6a:
                    22:06:95:7c:cb:e3:b0:01:e8:97:54:b4:61:20:47:
                    fa:26:b5:4b:df:8e:21:de:53:90:a7:8c:60:6d:36:
                    75:8d:1c:1a:03:78:04:c6:d7:54:a9:cb:d4:fe:43:
                    2e:98:f9:4e:55:58:c2:46:8f:e0:b1:b1:5d:50:96:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F6:9F:2F:74:70:42:72:95:11:91:08:BF:81:18:AE:25:1C:E9:1D
            X509v3 Authority Key Identifier:
                keyid:C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:63:03:c8:a8:55:3d:24:0b:e0:64:c5:56:d8:3a:11:ca:13:
         41:9f:5f:8c:b6:36:d6:25:15:ab:3e:58:47:8f:30:55:09:6a:
         69:e6:d9:1c:56:e3:b6:09:bc:3b:ca:f0:87:9f:e2:a4:7b:f8:
         bb:1d:58:4f:45:4a:dd:35:17:80:d6:43:46:8e:d2:f2:a3:e7:
         78:d1:0d:43:07:bc:de:24:9a:61:0d:34:7c:5a:c5:b0:24:42:
         42:74:cb:f9:56:f1:ae:00:64:05:c5:8d:da:00:cb:18:3a:03:
         e6:19:a0:19:b2:a2:52:16:87:6f:6c:cf:98:02:8f:79:e4:e9:
         5a:4a:af:2a:ea:c2:93:1c:c8:84:fb:c2:58:77:46:d8:00:c1:
         78:00:88:ea:69:c7:59:35:43:9a:19:cd:eb:cd:72:e1:fd:c6:
         a3:e8:a6:3d:b7:d3:12:57:7f:55:47:a1:8c:6d:a7:69:62:fc:
         c4:00:0d:48:73:2c:95:89:01:56:ad:cd:4f:56:8e:36:92:1c:
         c5:95:80:fa:55:10:c0:bd:cd:31:45:cf:e4:7b:7a:0a:f1:89:
         b7:79:80:5c:25:c3:69:65:48:ee:8e:3e:b0:2b:a0:eb:97:40:
         56:07:57:c5:6c:eb:29:72:cf:fe:ee:06:f1:67:12:70:a0:1c:
         08:a7:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 06:34:34 2024 by rpki-client on console-fra.rpki-client.org