Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa
File:                     3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa (raw, json)
Hash identifier:          NQjzoP486+K2K+w3mTJLfxU/RaAAVkF07Yl/m33vIDw=
Subject key identifier:   E1:DB:D9:14:C9:3A:4A:30:92:1E:4C:9B:A4:A7:48:B2:DF:D3:D2:2B
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       1798FEA33FC5CEC77DE9DB0D929FF3AA1C0EB461
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:08 +0000
ROA not before:           Wed 23 Oct 2024 17:53:08 +0000
ROA not after:            Wed 22 Oct 2025 17:58:08 +0000
asID:                     264927
IP address blocks:        168.228.184.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:98:fe:a3:3f:c5:ce:c7:7d:e9:db:0d:92:9f:f3:aa:1c:0e:b4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:08 2024 GMT
            Not After : Oct 22 17:58:08 2025 GMT
        Subject: CN=E1DBD914C93A4A30921E4C9BA4A748B2DFD3D22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:d4:d0:62:2c:9a:53:7d:f8:da:2a:33:44:
                    83:b3:6d:5d:ae:0b:41:21:5c:f2:3a:a1:fd:c6:6b:
                    83:3c:18:44:32:7f:71:4c:08:d1:c4:22:7a:50:97:
                    9e:29:53:7d:87:b0:e0:6b:eb:a8:91:48:78:e7:40:
                    9a:fe:d0:4c:90:d1:58:69:3f:06:5b:eb:88:4d:1f:
                    f8:e6:82:03:b7:51:74:39:8e:77:4c:6d:99:3d:d3:
                    68:73:81:44:4a:66:39:3c:66:ff:6e:99:68:55:b9:
                    46:a7:2b:0c:16:76:10:6b:46:a6:3f:da:21:5a:a1:
                    e9:43:8b:78:33:ae:78:09:af:f2:a5:0c:fb:97:aa:
                    39:66:4a:4c:92:49:c3:de:6e:ae:1b:04:c0:5b:a4:
                    6d:c5:b6:69:c7:a7:8b:d3:1d:5d:95:c8:31:c2:7f:
                    f9:98:6e:4a:d4:90:25:09:bc:b0:6d:30:ff:27:bb:
                    95:7f:9b:a5:22:a7:da:0a:71:85:64:df:34:35:a5:
                    e4:03:ba:dc:bc:5b:c0:ec:ec:7c:7a:bc:48:5d:fe:
                    ce:f6:86:b3:bf:21:c6:10:db:96:f3:e5:ab:7f:95:
                    77:be:4d:e2:9e:7f:63:0f:ae:b7:fd:15:bf:81:15:
                    cc:bb:12:63:75:07:e6:98:cc:67:a9:64:78:db:88:
                    d6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DB:D9:14:C9:3A:4A:30:92:1E:4C:9B:A4:A7:48:B2:DF:D3:D2:2B
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:5e:68:cd:af:08:b1:27:54:c0:23:21:c5:c3:0e:c1:bb:
         88:2b:c3:04:bc:e2:4a:6d:55:d4:64:67:b0:34:24:bd:37:af:
         1e:c0:ac:cf:72:d2:d1:7a:06:40:4c:82:36:77:9a:35:00:bc:
         ab:4d:a6:e9:c8:6e:9d:0e:c9:d6:7e:09:b7:74:1e:28:8a:ca:
         86:cf:5d:2f:49:d5:0b:5e:0b:88:c4:4c:61:e2:4c:f0:d3:88:
         4c:1f:56:fc:98:91:04:06:b1:96:2c:96:79:69:c8:21:5c:73:
         95:10:b0:40:e2:7d:2a:b3:b1:58:43:46:13:40:8c:ea:df:e5:
         a5:6a:21:e2:0c:bf:5f:3d:77:b9:81:32:e9:ad:78:34:26:18:
         de:ad:99:34:a0:97:8f:e1:96:b8:7d:15:61:a7:e5:a8:7b:09:
         4f:52:9f:ce:31:3f:ee:99:bc:ea:59:f9:61:9e:27:e4:ce:03:
         ea:90:8b:5c:49:aa:51:3e:9d:fe:3b:b3:41:e3:73:b2:d9:7e:
         69:c5:19:43:92:e1:98:87:e1:f5:ec:13:e7:e1:ea:8f:ed:e0:
         75:28:fa:c5:14:2f:47:11:42:76:43:fc:e4:e5:ee:19:45:9f:
         8c:d5:5e:27:8c:a9:2a:db:5e:0e:db:86:15:5f:b9:87:01:77:
         de:64:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org