Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
File:                     3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          cQ8gtuN+oYnhKyXg6mB3wTbHwwhZqPNutgoaIkGuSRM=
Subject key identifier:   08:A7:E8:60:70:60:90:9B:85:65:A3:25:CE:D5:E9:13:F0:C7:3D:65
Certificate issuer:       /CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
Certificate serial:       0BF306153CA45971B305112ADA9B4D73A80B4142
Authority key identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
Signing time:             Thu 04 Apr 2024 18:29:57 +0000
ROA not before:           Thu 04 Apr 2024 18:24:57 +0000
ROA not after:            Thu 03 Apr 2025 18:29:57 +0000
asID:                     53218
IP address blocks:        186.250.168.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f3:06:15:3c:a4:59:71:b3:05:11:2a:da:9b:4d:73:a8:0b:41:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
        Validity
            Not Before: Apr  4 18:24:57 2024 GMT
            Not After : Apr  3 18:29:57 2025 GMT
        Subject: CN=08A7E8607060909B8565A325CED5E913F0C73D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:62:14:59:53:05:53:5e:d1:a1:2e:a7:e3:
                    cd:ea:03:fb:de:d1:77:0a:f9:83:95:91:92:97:5e:
                    36:a4:30:73:f0:e9:db:89:32:71:da:c7:e9:5e:f4:
                    31:5a:b0:86:99:5a:e7:77:31:c2:40:ad:74:95:49:
                    73:89:30:bb:7a:e7:6f:5a:76:7c:82:7a:15:ad:f3:
                    d8:fc:3a:f8:dc:af:83:d2:22:f9:c2:9e:b9:3c:cb:
                    f7:34:17:db:08:49:32:c9:ff:be:41:db:46:56:7c:
                    a2:8a:ab:25:ec:7d:0f:aa:7e:ad:a3:79:3b:9e:e4:
                    91:9a:03:f2:21:67:73:86:35:88:3c:18:67:e9:e7:
                    7c:74:48:a2:8c:ab:d1:b0:fb:69:e4:79:77:ee:dd:
                    25:22:f7:13:2d:cf:03:e8:a1:e6:61:b0:a5:a2:d1:
                    21:63:8c:6e:b9:0d:b2:8a:0b:f5:4b:76:44:f5:76:
                    e0:92:20:5c:2d:cd:d7:97:47:04:dc:64:3e:ea:ed:
                    3b:05:83:33:8c:85:a2:8c:1b:54:ea:64:d5:65:f3:
                    f7:15:18:dd:8f:52:40:8b:8f:60:c6:2a:f7:95:dc:
                    68:51:3b:d8:d6:27:a4:fb:0a:25:74:31:fc:3d:33:
                    68:02:c8:31:4f:cd:2c:f5:46:0a:1c:29:5b:c6:60:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:E8:60:70:60:90:9B:85:65:A3:25:CE:D5:E9:13:F0:C7:3D:65
            X509v3 Authority Key Identifier:
                keyid:2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:51:6c:94:4a:b7:ce:f4:28:f5:d1:2a:52:65:5f:64:93:92:
         ea:e4:4e:47:b0:b6:f7:69:5f:44:47:dd:00:10:1c:20:14:20:
         e3:23:b9:ca:7d:a7:9d:ca:6e:04:85:75:73:5a:0d:4a:13:1f:
         f8:e5:66:eb:67:4d:06:dc:e8:3b:34:05:c9:8b:67:c5:6e:7c:
         4f:92:49:6a:82:28:58:c9:61:2e:9b:ed:f6:8e:32:4d:1a:6e:
         db:f2:90:1f:e5:43:f4:22:ae:9c:ea:7e:6f:70:91:1a:a2:bf:
         af:5b:f6:0d:f9:a3:dd:5b:4e:ef:af:93:19:b5:51:b6:9a:d9:
         4c:ba:e2:b3:76:a5:8f:66:ab:ee:b8:89:06:a9:b6:ef:63:37:
         78:72:84:b0:d6:30:0b:1c:b5:c1:80:85:3f:33:6a:b1:aa:76:
         61:6a:cf:b7:e4:d0:bf:38:cb:e7:1c:c2:82:4b:04:c7:55:27:
         85:92:4e:26:a0:fe:a6:73:02:16:55:8b:d0:f6:6b:9e:06:86:
         19:d2:12:a1:35:2d:25:64:fb:c6:ba:8b:7b:03:a2:af:a7:1c:
         05:47:ac:be:f5:b1:95:8d:25:a6:58:db:5a:5e:b4:7a:09:a5:
         03:8e:48:0c:4d:0e:a9:ef:73:b4:57:57:e1:51:69:77:51:c7:
         0a:a0:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org