Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa
File:                     3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          w4dvPCJr24+5y9gGDVa41dJeki5yvYEImMYC8XYV6+A=
Subject key identifier:   A8:27:CA:99:B0:79:1A:5D:EB:CC:7D:29:19:65:01:DD:72:4C:EB:24
Certificate issuer:       /CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
Certificate serial:       6FEE981F99BDA140C41A78BB1A2256C9AD0DD06B
Authority key identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa
Signing time:             Thu 04 Apr 2024 18:29:57 +0000
ROA not before:           Thu 04 Apr 2024 18:24:57 +0000
ROA not after:            Thu 03 Apr 2025 18:29:57 +0000
asID:                     53218
IP address blocks:        186.250.172.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ee:98:1f:99:bd:a1:40:c4:1a:78:bb:1a:22:56:c9:ad:0d:d0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
        Validity
            Not Before: Apr  4 18:24:57 2024 GMT
            Not After : Apr  3 18:29:57 2025 GMT
        Subject: CN=A827CA99B0791A5DEBCC7D29196501DD724CEB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:6b:61:06:18:4d:df:b4:3a:8f:6e:d5:02:
                    5f:42:dc:21:e8:e1:85:08:91:8f:1e:8e:19:61:cc:
                    a9:b9:d5:60:8a:5f:df:40:60:44:c9:86:97:20:f5:
                    99:03:47:e5:e6:82:ed:14:b7:fc:23:f5:a3:f0:26:
                    e1:27:ab:cc:d5:a6:54:0e:07:7d:ef:3b:60:5f:a5:
                    bd:56:38:1f:a7:44:6d:68:62:f7:c4:f8:04:7e:cd:
                    73:aa:bc:fd:3d:d3:5b:6c:f6:13:3a:f2:d8:1c:e4:
                    9b:32:c5:e9:f4:77:0b:47:b7:51:c0:73:52:e8:6c:
                    9e:1c:7e:5c:d7:7e:82:f9:80:25:cf:11:4c:10:b1:
                    7f:af:21:10:1b:75:3e:97:97:25:1e:05:dd:7b:50:
                    3c:aa:c7:27:14:2f:c9:f5:6d:ac:96:49:cc:01:00:
                    0f:ec:28:b4:a8:1b:7a:6f:f9:97:c0:0c:61:bb:06:
                    d8:52:cf:cc:59:c8:49:71:96:41:57:fa:e0:ea:0e:
                    03:9c:3c:8d:b8:46:88:a4:df:e3:91:f7:67:c6:e9:
                    cc:4f:13:78:44:d6:f6:32:89:28:6b:49:3c:8b:a1:
                    54:f3:df:71:27:f4:04:29:21:1a:45:8f:da:b5:5c:
                    15:52:15:f6:49:d1:0a:4e:76:e3:81:0c:cc:b6:4b:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:CA:99:B0:79:1A:5D:EB:CC:7D:29:19:65:01:DD:72:4C:EB:24
            X509v3 Authority Key Identifier:
                keyid:2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:a2:29:08:b8:ee:11:6d:fb:1e:22:45:74:88:ba:d4:c6:
         b3:29:97:64:32:b5:c3:6c:ca:2f:7c:95:4e:34:02:da:d1:0c:
         f8:6b:f5:92:07:07:f4:af:61:63:d7:4e:98:5a:9d:ae:a6:b3:
         3d:f3:41:b7:82:d3:fb:0b:72:9b:7a:3a:e7:a5:c4:3e:8f:71:
         63:75:e2:76:46:c5:16:c8:d6:d4:57:a9:67:13:ad:bb:2a:b1:
         a9:00:82:1e:02:05:c1:e8:84:7a:0a:c0:cd:e6:71:03:bf:14:
         d3:08:c6:52:84:7d:1a:e5:b2:a9:ed:8c:90:78:87:6f:95:51:
         c4:22:92:9d:64:26:46:83:70:6f:a1:f0:6f:96:56:75:36:b8:
         c5:ed:a3:55:ac:93:fc:7a:69:2f:10:50:fb:30:be:23:d5:10:
         5f:bf:99:71:54:37:ad:33:c1:1b:45:e7:0a:d8:e7:e1:c6:07:
         64:fc:df:db:0e:af:7a:ea:96:92:a8:00:5a:ea:18:00:37:dc:
         1e:77:17:e2:78:70:88:fe:e4:08:d3:be:34:fb:ac:ee:1e:fb:
         ef:f6:98:80:0e:fd:26:76:8b:8b:81:fc:87:8d:f7:99:0b:ee:
         57:b5:1a:46:0f:f5:a3:12:ca:b8:12:f1:bb:8a:97:10:33:b3:
         6e:f3:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org