Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e392e302f32342d3234203d3e20323632393838.roa
File:                     3138362e3235312e392e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          9qC6OWFGSgrTfYbe5OG49zm16QDhxNUE+wqJX0wJrDQ=
Subject key identifier:   60:F8:25:0B:01:7C:8C:35:AD:58:B0:A6:83:3C:77:A7:D7:3B:DD:53
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       5D77B7A7D8B06D761B0DD3E246C9F37AFD38D8A5
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e392e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:48 +0000
ROA not before:           Mon 15 Jul 2024 15:13:48 +0000
ROA not after:            Mon 14 Jul 2025 15:18:48 +0000
asID:                     262988
IP address blocks:        186.251.9.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:77:b7:a7:d8:b0:6d:76:1b:0d:d3:e2:46:c9:f3:7a:fd:38:d8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:48 2024 GMT
            Not After : Jul 14 15:18:48 2025 GMT
        Subject: CN=60F8250B017C8C35AD58B0A6833C77A7D73BDD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:a4:a9:df:55:a3:0a:9e:59:1d:af:a3:73:
                    16:f8:13:c6:90:fa:9d:24:b9:ae:c2:c2:39:11:44:
                    69:d4:b3:1f:01:7f:28:db:09:56:b3:c4:43:d1:86:
                    7e:c2:4c:2c:bc:25:e2:9a:f3:94:1d:2b:c7:f9:aa:
                    10:cf:a0:bd:2a:4e:2b:ae:ee:fc:97:fe:a0:5f:65:
                    2c:9e:57:85:ce:24:62:02:99:7f:cd:5c:e4:ef:66:
                    e3:c5:e2:a8:0c:17:df:40:91:3b:f6:a7:c2:86:e3:
                    11:29:b3:97:c9:aa:0f:94:31:96:f7:b3:54:de:ce:
                    90:4f:31:8f:e8:14:d7:94:9d:8f:95:62:c7:08:5f:
                    26:79:a2:97:f2:fb:1b:22:46:3f:0e:25:76:3f:88:
                    43:e2:e3:94:36:4a:00:4d:5d:d2:ce:33:f5:07:73:
                    ba:2a:24:3c:e5:fe:e0:48:12:79:10:91:ee:12:83:
                    58:e3:d5:89:83:90:81:a6:24:73:35:8a:6f:ec:6a:
                    9f:70:87:b6:75:9c:19:0d:8e:7d:a9:ff:32:88:3c:
                    c9:bf:bc:c5:26:75:53:c9:9a:6f:8d:a3:ef:9e:16:
                    bf:e4:3f:69:4c:7f:25:4e:5b:14:a4:cd:2c:08:81:
                    bc:f6:d4:8c:62:cb:e5:f5:66:e6:f2:87:57:6f:3d:
                    ce:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:25:0B:01:7C:8C:35:AD:58:B0:A6:83:3C:77:A7:D7:3B:DD:53
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e392e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:cf:49:44:03:f4:fd:a7:2a:df:f7:e0:bc:3f:6a:13:a0:67:
         80:59:68:88:ab:b7:d2:7c:03:00:69:25:a7:f4:e2:2b:f4:32:
         d6:f2:cc:fb:92:92:bb:a7:af:2b:a5:b9:6c:86:66:86:44:a1:
         f4:cc:9f:71:58:46:af:18:7e:6e:6f:b1:ce:a5:a3:11:4b:fb:
         d4:d1:d5:e1:37:f5:21:12:ec:85:0e:8f:5e:44:cc:7b:09:da:
         f0:d4:af:3a:75:0b:f4:23:50:b0:28:25:6a:e1:b9:ee:b3:59:
         3a:c6:65:79:6d:5b:e2:cc:42:1f:6f:a5:b7:d0:97:51:f5:47:
         49:1f:2d:42:b9:1f:70:fe:57:04:6b:6c:bd:d0:52:e4:8c:4d:
         a8:3d:58:50:09:09:96:51:3a:1f:95:02:bb:89:88:a9:b4:67:
         9a:a1:7b:2d:49:f0:9a:17:8c:6c:b6:f8:79:ee:b4:d1:0c:13:
         fe:a7:36:39:3f:07:1f:62:a6:4d:21:33:75:73:fa:3c:82:84:
         06:4b:39:79:11:ff:12:b9:d8:b9:71:e9:97:97:f1:83:c6:a6:
         98:4a:2b:92:a5:56:d2:cd:ce:d3:42:2f:eb:3a:5f:35:93:e2:
         84:d6:0b:01:95:26:fd:a3:1e:9c:76:84:46:f5:c1:2d:de:4c:
         94:08:3b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:59 2024 by rpki-client on console-ams.rpki-client.org