Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33342e302f32342d3234203d3e20323730383633.roa
File:                     3138362e3235302e33342e302f32342d3234203d3e20323730383633.roa (raw, json)
Hash identifier:          /BRRERbzQl77smBrEAIWjKFSJdCCbU2kIYYI/tODHkc=
Subject key identifier:   A4:93:A8:0C:81:4D:37:E2:B8:ED:29:43:62:CE:4E:1D:FE:CB:9B:F7
Certificate issuer:       /CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
Certificate serial:       2A640E76A01D21B3207A9C0876792B1ECFEA26F9
Authority key identifier: EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33342e302f32342d3234203d3e20323730383633.roa
Signing time:             Fri 21 Jun 2024 12:32:56 +0000
ROA not before:           Fri 21 Jun 2024 12:27:56 +0000
ROA not after:            Fri 20 Jun 2025 12:32:56 +0000
asID:                     270863
IP address blocks:        186.250.34.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:0e:76:a0:1d:21:b3:20:7a:9c:08:76:79:2b:1e:cf:ea:26:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB9F57CA405F998D2A0E85C0BB05EE66B9040677
        Validity
            Not Before: Jun 21 12:27:56 2024 GMT
            Not After : Jun 20 12:32:56 2025 GMT
        Subject: CN=A493A80C814D37E2B8ED294362CE4E1DFECB9BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:51:11:3f:50:57:08:d1:37:1d:1f:dc:41:
                    77:b8:85:e1:8c:a9:61:d8:49:59:bb:a7:f7:b2:7f:
                    d5:62:6e:be:c5:b0:04:98:15:77:f1:b2:ab:31:6e:
                    64:fb:86:b6:8b:45:b6:05:27:7a:02:1a:33:c5:08:
                    10:69:d0:80:7d:d3:d2:71:ce:d4:aa:64:41:1d:e2:
                    8b:ee:f6:1b:38:83:8c:e0:be:db:5f:39:91:3b:65:
                    15:a1:e9:f4:e7:68:48:3b:a9:92:b2:78:28:fd:dc:
                    47:15:ce:91:e0:dd:d5:34:45:b3:c5:8d:48:b1:d6:
                    49:68:d6:bf:bd:cc:28:28:45:01:89:3f:f0:12:c0:
                    fa:35:1d:7f:ca:96:97:a1:7d:bc:20:0b:e5:43:6c:
                    80:6a:7b:e9:a8:67:65:5c:d5:55:23:08:b8:a1:66:
                    9d:d1:8e:7b:65:c1:dc:d1:7e:ad:f5:01:eb:1a:f7:
                    7e:1d:30:92:4f:8c:b7:98:ec:f1:13:43:12:bf:37:
                    4f:37:c9:1b:3d:b6:bc:e4:5e:28:0a:99:55:6e:a0:
                    7b:ca:c7:bb:a0:75:4f:51:8f:ff:20:79:7d:e8:b0:
                    ed:14:d6:56:ae:a0:3d:aa:8d:58:75:14:27:d9:a5:
                    d4:cb:29:67:e7:53:1b:b7:a7:3d:52:5d:86:11:72:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:93:A8:0C:81:4D:37:E2:B8:ED:29:43:62:CE:4E:1D:FE:CB:9B:F7
            X509v3 Authority Key Identifier:
                keyid:EB:9F:57:CA:40:5F:99:8D:2A:0E:85:C0:BB:05:EE:66:B9:04:06:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB9F57CA405F998D2A0E85C0BB05EE66B9040677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33342e302f32342d3234203d3e20323730383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:63:23:16:0a:86:3b:ed:5a:93:6d:40:58:02:dd:61:9a:
         37:ba:61:90:5e:02:15:11:e8:ea:55:f8:4e:89:c0:3a:73:75:
         5d:1c:a0:c0:e2:39:ce:e8:40:9c:a4:b8:86:98:cb:c7:56:11:
         be:7d:fe:27:43:96:3b:d8:4e:52:d4:7f:3b:c3:f6:ca:f2:84:
         32:be:26:91:b9:53:63:d0:43:58:83:49:d3:b5:db:66:dc:20:
         42:e9:ae:d8:fb:ae:90:63:6b:12:8e:89:d5:8a:1c:38:64:5e:
         fc:d0:1b:15:ee:94:1c:6d:d0:26:c6:05:07:23:86:eb:7f:e7:
         c5:c4:e1:df:de:f1:2e:08:35:7a:c8:ff:f9:39:04:7d:14:57:
         05:8e:3f:14:b5:46:eb:0d:07:67:b1:ee:7d:d9:ce:94:c7:c6:
         7d:14:42:96:60:0c:41:08:29:bf:cd:9a:02:08:6b:2e:c7:b2:
         63:7f:3c:3b:db:ec:f4:b0:86:78:31:46:ce:b5:5a:c5:07:58:
         f1:bb:74:da:1f:00:25:54:86:08:b8:f1:a6:42:c0:4a:39:ef:
         9b:48:94:42:6e:e3:6e:01:4e:ed:44:a0:95:d6:db:de:f9:c9:
         4e:cd:64:17:3f:a7:9e:89:a5:81:4e:ae:5d:90:2b:dd:7d:d8:
         aa:97:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org