Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33342e302f32332d3233203d3e20323730383633.roa
File:                     3138362e3235302e33342e302f32332d3233203d3e20323730383633.roa (raw, json)
Hash identifier:          Wn+w4u/tjqdmDwf5pj18vjEUML+WHnyo6wl3dZihEbI=
Subject key identifier:   89:27:03:C9:B7:DA:35:2A:D9:D9:8E:4F:3E:42:16:A6:9B:B5:62:38
Certificate issuer:       /CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
Certificate serial:       097A795165B629EFCBB4F024A30587233891C6F5
Authority key identifier: EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33342e302f32332d3233203d3e20323730383633.roa
Signing time:             Fri 21 Jun 2024 12:32:30 +0000
ROA not before:           Fri 21 Jun 2024 12:27:30 +0000
ROA not after:            Fri 20 Jun 2025 12:32:30 +0000
asID:                     270863
IP address blocks:        186.250.34.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7a:79:51:65:b6:29:ef:cb:b4:f0:24:a3:05:87:23:38:91:c6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
        Validity
            Not Before: Jun 21 12:27:30 2024 GMT
            Not After : Jun 20 12:32:30 2025 GMT
        Subject: CN=892703C9B7DA352AD9D98E4F3E4216A69BB56238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:3e:16:65:b8:a9:c0:dc:f3:fe:cb:05:b6:
                    b6:df:1d:40:89:0c:5f:ab:92:ac:92:f2:ca:8b:aa:
                    8c:23:4f:b4:a3:21:de:bc:00:26:8b:1d:c8:99:fb:
                    4b:dd:29:f1:0b:a3:b0:90:d5:3f:31:2a:7a:d6:ae:
                    33:d6:82:5f:b4:59:a4:c9:4d:39:6b:3f:b8:43:f3:
                    49:94:ad:b1:ad:d4:30:ae:0c:67:bd:15:c4:65:20:
                    ac:ec:98:84:e6:80:e5:9b:22:cd:01:32:e6:72:a0:
                    ef:8e:ea:02:9c:3d:37:06:69:53:97:2c:cc:28:d6:
                    6b:a5:89:59:2d:8b:1b:f8:f9:8f:7b:64:41:c2:d6:
                    14:08:2b:82:36:af:b7:ca:5f:9f:9a:ca:6e:4d:2b:
                    e8:f6:ec:80:f7:2e:bc:c4:25:70:40:ca:1b:6f:6f:
                    6e:39:f5:c7:ef:40:92:ad:bd:01:ac:fb:62:43:31:
                    89:50:af:8d:fb:ed:62:05:08:cf:4a:56:4d:15:36:
                    af:d2:7e:52:e1:78:dd:bc:16:c8:73:97:32:87:41:
                    eb:a5:e3:f7:70:66:4d:19:0e:28:5a:89:a8:7e:31:
                    5d:2c:7c:ca:4d:04:93:93:75:dd:8a:95:ce:65:26:
                    51:3b:3c:93:64:af:78:bf:d3:20:ba:01:84:fb:fb:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:27:03:C9:B7:DA:35:2A:D9:D9:8E:4F:3E:42:16:A6:9B:B5:62:38
            X509v3 Authority Key Identifier:
                keyid:EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33342e302f32332d3233203d3e20323730383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:f0:5e:5f:76:d5:e5:80:3b:33:8e:c7:fc:2a:26:3b:cb:ae:
         4e:04:34:db:4b:34:8a:08:be:ae:26:13:fe:48:9f:23:d6:7b:
         3d:0f:46:e3:6f:47:ad:b8:70:24:d7:ab:73:ce:cc:c9:5a:0f:
         ff:43:b8:fe:04:56:9f:49:1d:00:82:9f:e2:90:31:38:03:61:
         2b:80:17:1a:06:5c:19:d3:34:82:ca:37:9e:e8:49:0b:d7:27:
         20:0b:f4:07:07:e3:44:b9:b9:57:92:15:c5:d7:09:41:92:66:
         81:cf:15:3d:52:1b:96:33:7d:26:ea:80:17:56:a0:9c:dc:47:
         96:b5:08:a5:09:f0:d6:b6:48:2c:ee:7d:5c:df:9c:94:df:34:
         6f:48:96:e0:c6:19:d5:9b:69:14:19:04:a4:0b:12:f8:b5:7b:
         34:97:45:e0:9f:76:34:70:28:84:18:87:c7:b0:98:92:15:49:
         cf:39:32:9a:a3:e4:49:d6:29:db:8e:89:53:07:11:ac:5c:a4:
         92:01:d6:6a:41:74:96:01:a7:c3:28:7c:f8:4f:c5:4c:2f:36:
         f8:f8:93:e5:7c:45:f2:5b:0a:a3:bf:31:9e:a4:f6:ca:f3:17:
         e5:ba:c6:8a:4d:ec:8a:d9:7d:e9:7a:e3:be:23:5c:4f:cb:7f:
         32:c2:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org