Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33332e302f32342d3234203d3e20323730383633.roa
File:                     3138362e3235302e33332e302f32342d3234203d3e20323730383633.roa (raw, json)
Hash identifier:          CIT7OGCQfF4BIWTEAwsGUN6HCzrrL8vqvfGHJuwn6I8=
Subject key identifier:   83:B9:9F:1A:FE:25:BB:CD:E3:46:58:3B:D9:7B:FA:9B:FB:AD:DF:B4
Certificate issuer:       /CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
Certificate serial:       45BFC3F42C5AD747BD5586B78C307B87A3CA99E7
Authority key identifier: EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33332e302f32342d3234203d3e20323730383633.roa
Signing time:             Fri 21 Jun 2024 12:31:21 +0000
ROA not before:           Fri 21 Jun 2024 12:26:21 +0000
ROA not after:            Fri 20 Jun 2025 12:31:21 +0000
asID:                     270863
IP address blocks:        186.250.33.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bf:c3:f4:2c:5a:d7:47:bd:55:86:b7:8c:30:7b:87:a3:ca:99:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
        Validity
            Not Before: Jun 21 12:26:21 2024 GMT
            Not After : Jun 20 12:31:21 2025 GMT
        Subject: CN=83B99F1AFE25BBCDE346583BD97BFA9BFBADDFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:c2:c6:e9:40:f6:39:13:cf:16:a7:25:a0:
                    e6:9f:dd:e4:06:32:c6:10:20:d4:b5:5a:cc:2b:a8:
                    b2:38:c4:33:dd:a7:fa:52:0c:e6:89:1a:35:ec:58:
                    d1:0f:6b:77:a6:f5:27:cf:c9:2f:ae:9e:57:22:e6:
                    14:8b:bc:f6:35:34:eb:96:da:d6:bb:6b:c8:6d:32:
                    52:65:3b:e4:3d:8f:f1:5d:3d:30:5d:de:f2:ac:59:
                    a3:20:5a:94:04:4b:d7:62:11:f8:6f:08:ef:ee:0a:
                    74:89:1a:29:d4:a8:b7:40:93:67:09:fa:29:fc:9d:
                    2e:20:22:73:ce:c3:2c:54:65:6d:a5:9b:45:24:b2:
                    e6:48:21:27:c1:e9:6c:15:ea:2c:2e:c3:f9:92:e8:
                    56:17:e7:01:92:f9:87:21:8f:c2:1c:3b:62:59:5f:
                    4a:f9:42:b0:a9:2c:da:b0:20:87:f8:a0:cd:77:93:
                    f2:ab:df:83:cd:28:1f:57:4b:7b:6c:61:a0:e5:65:
                    a2:3b:05:6a:69:39:6d:d1:e1:9c:6a:03:27:f4:45:
                    fd:37:e8:7b:3a:7e:ae:ec:23:cf:ef:d3:90:5c:fe:
                    ee:c0:e0:5c:93:b9:e6:36:52:5b:3d:6c:6a:50:34:
                    46:f0:a1:b2:1e:07:b4:95:24:6d:14:46:f9:f2:8a:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B9:9F:1A:FE:25:BB:CD:E3:46:58:3B:D9:7B:FA:9B:FB:AD:DF:B4
            X509v3 Authority Key Identifier:
                keyid:EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33332e302f32342d3234203d3e20323730383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:3d:bf:fd:94:97:30:06:f8:56:bf:eb:13:3f:b7:48:15:
         80:9e:47:a0:08:71:b4:a7:ca:f9:e5:5d:30:42:45:03:bd:f4:
         b1:32:18:47:f0:7c:3d:cd:75:11:0c:d5:0b:c7:f6:be:d4:30:
         36:fd:62:f4:dd:ff:57:16:7b:54:9b:71:cd:be:a3:16:59:5d:
         62:26:26:d8:09:a0:7c:07:14:01:6b:02:0b:35:a5:e2:10:fc:
         ff:09:ff:43:4e:69:da:4b:02:b5:90:44:0a:64:00:4b:99:39:
         fa:10:75:9a:b8:e0:99:b2:5b:fc:b6:24:c6:ee:d4:cf:35:49:
         0a:59:7e:70:b3:1f:74:ef:b3:74:89:13:0f:bd:9c:a0:87:20:
         51:67:7c:4d:58:15:f0:20:3a:d5:1e:e1:2a:f0:a4:2f:b5:aa:
         67:b9:ce:ce:5a:ee:8b:e3:cb:52:6a:53:13:c1:ab:9f:a6:75:
         83:8e:0b:8e:15:40:82:8a:8a:10:1c:c2:4d:18:72:10:00:f6:
         f2:d7:db:77:51:d4:a9:c0:66:f3:3d:c2:d6:d7:90:f9:54:ca:
         da:84:1a:e3:c1:a2:f1:10:90:62:92:68:f9:2a:de:7a:2e:c5:
         d1:81:dc:f6:76:a2:e6:32:9f:81:b9:d0:8f:51:e6:85:28:ac:
         ae:63:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org