Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/3138312e3138392e39342e302f32332d3233203d3e20323731333737.roa
File:                     3138312e3138392e39342e302f32332d3233203d3e20323731333737.roa (raw, json)
Hash identifier:          RcDza/xsjQ/3d5S6M0lC88AXSpD/qFrli8YvnhoQeUU=
Subject key identifier:   08:AE:E5:CC:C9:51:5C:71:9F:86:1F:84:26:FE:79:1E:D4:C9:60:C9
Certificate issuer:       /CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
Certificate serial:       73702B1BC3905A9CC1D301A2B3B55ED78D457A5C
Authority key identifier: 9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/3138312e3138392e39342e302f32332d3233203d3e20323731333737.roa
Signing time:             Sat 08 Jun 2024 13:47:38 +0000
ROA not before:           Sat 08 Jun 2024 13:42:38 +0000
ROA not after:            Sat 07 Jun 2025 13:47:38 +0000
asID:                     271377
IP address blocks:        181.189.94.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:70:2b:1b:c3:90:5a:9c:c1:d3:01:a2:b3:b5:5e:d7:8d:45:7a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
        Validity
            Not Before: Jun  8 13:42:38 2024 GMT
            Not After : Jun  7 13:47:38 2025 GMT
        Subject: CN=08AEE5CCC9515C719F861F8426FE791ED4C960C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:16:c0:db:f1:bd:2a:3b:12:8f:1b:fe:57:
                    bd:7f:36:de:0a:a8:2f:da:56:48:76:ad:fd:19:7f:
                    8d:7f:e8:75:af:95:fa:29:7f:53:67:0a:d8:33:96:
                    27:39:1b:00:3c:ba:3d:e5:75:57:21:21:55:e7:86:
                    27:44:d4:6d:d5:32:bd:27:cb:d9:c7:e5:cb:95:e9:
                    ee:d3:71:64:69:2b:d1:56:94:80:06:76:6d:19:ef:
                    4a:1b:e6:52:28:1f:17:4f:0d:ef:6d:27:39:77:ab:
                    89:94:69:5e:e8:50:5e:4d:86:f8:b1:05:2f:97:3d:
                    9f:aa:1c:1a:11:91:3a:2e:a2:b0:c4:31:f9:cf:98:
                    c3:2d:05:73:35:66:b3:09:b1:6a:8c:f5:b7:bc:b0:
                    3c:2f:0f:b9:31:7f:06:0b:55:01:c0:57:16:0f:48:
                    c0:a5:54:aa:75:d0:7c:d8:f3:db:5b:4e:21:3c:43:
                    56:8e:69:1a:ce:db:19:1b:18:10:dd:3f:a5:2c:ec:
                    9c:c2:ad:df:c1:64:e0:73:4c:a8:d1:0c:d2:07:45:
                    33:36:b3:1d:e0:a3:5d:fa:4e:60:ba:94:59:7a:5a:
                    46:17:1b:bb:41:16:e8:b0:9a:1b:ea:84:d5:40:68:
                    6e:4b:43:4a:3c:a7:b6:db:b8:d1:a5:73:97:66:43:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:E5:CC:C9:51:5C:71:9F:86:1F:84:26:FE:79:1E:D4:C9:60:C9
            X509v3 Authority Key Identifier:
                keyid:9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/3138312e3138392e39342e302f32332d3233203d3e20323731333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:c6:0d:c6:f9:54:ce:09:51:b0:88:c2:65:e8:a8:40:90:
         bc:eb:47:ba:48:f2:62:dd:12:1b:fa:18:d2:65:b1:ca:28:aa:
         fc:7f:ce:f3:3d:d3:7a:21:23:0c:c8:38:1d:16:36:7b:cf:b7:
         f5:c5:59:b5:71:45:5d:e7:e4:ab:01:c6:00:33:a5:25:92:1e:
         cd:32:ec:8f:40:35:a7:db:df:91:2b:10:4e:e2:27:bb:71:0a:
         ac:a8:49:66:f9:a5:88:00:d9:ac:96:40:24:0d:29:73:de:a0:
         1e:d6:71:f4:c1:7c:ed:1d:66:b9:dd:49:4b:e3:23:9b:87:90:
         07:79:b2:eb:6a:9e:d0:d3:d3:e3:8d:3a:55:33:d2:97:6b:81:
         e8:cf:b8:5b:7a:b7:8e:ec:42:3c:99:98:32:6d:2c:85:e9:7d:
         62:b9:ab:38:05:fd:c9:e8:cc:54:71:ef:fc:d2:f9:0b:3b:af:
         a9:12:ad:6d:be:c6:b1:d8:25:c5:ad:4e:cb:d4:45:51:9b:7d:
         da:26:12:5e:11:26:dd:53:c7:f0:1b:f8:29:09:e7:9f:84:4d:
         ba:7f:5b:c0:ae:50:8e:52:f0:19:93:ed:c1:2a:c3:a9:81:11:
         30:c4:58:9a:2d:72:2d:d5:1c:3e:23:9e:9a:0d:0d:de:2c:5d:
         a6:a5:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:05:27 2024 by rpki-client on console-fra.rpki-client.org