Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa
File:                     3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          7+lHRM6ePKSa5KAi8Dzgv/yBltIga6F7uU49HtQionc=
Subject key identifier:   E7:FA:87:85:D8:96:34:3D:10:D6:6C:15:75:0E:2B:01:04:D2:95:94
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       432B16E4E733F084107840678759DE26FAE61115
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:09 +0000
ROA not before:           Wed 23 Oct 2024 17:53:09 +0000
ROA not after:            Wed 22 Oct 2025 17:58:09 +0000
asID:                     264927
IP address blocks:        168.228.185.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2b:16:e4:e7:33:f0:84:10:78:40:67:87:59:de:26:fa:e6:11:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:09 2024 GMT
            Not After : Oct 22 17:58:09 2025 GMT
        Subject: CN=E7FA8785D896343D10D66C15750E2B0104D29594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:31:34:4a:ee:ec:e1:da:01:30:b5:95:87:0e:
                    4b:2b:4b:94:98:02:47:45:b5:b6:ab:76:29:73:d2:
                    8f:80:03:7a:d3:56:1e:3b:d5:26:33:73:3f:1e:97:
                    d9:b6:c2:8c:2c:af:0f:46:46:30:3f:c3:fd:d7:7d:
                    62:55:45:b3:2b:41:2f:0b:f4:4d:99:2c:9b:73:88:
                    7d:c2:29:57:45:fc:75:ed:11:25:04:d1:bc:d6:ff:
                    0d:c9:2c:72:3d:69:a7:c2:20:61:cc:d3:51:9e:b5:
                    ca:8e:d6:e5:ad:f3:72:ce:cf:37:d0:aa:f8:44:34:
                    43:d8:3c:04:3a:38:3a:19:dd:8a:dd:e1:71:1b:b0:
                    a2:b7:d5:a4:04:04:f1:0e:d9:8e:c8:82:c3:e1:81:
                    ea:e7:8b:68:d6:3b:1f:12:30:1f:8e:2f:c6:5f:73:
                    6f:c6:cc:ae:15:93:5b:4b:7e:08:d4:93:11:b2:64:
                    ac:16:c3:1c:98:73:2c:b4:55:7b:21:d9:57:b7:f0:
                    81:5d:4d:b3:b9:51:72:0a:57:3a:aa:fd:8b:e7:4c:
                    60:e5:2c:c8:a9:d8:f6:6e:d3:c7:7e:8f:9f:a0:d5:
                    3e:a9:b3:e7:5c:b6:53:14:98:30:ef:c8:c7:32:ec:
                    e6:77:48:82:d9:12:f9:80:f5:95:93:f8:ae:84:25:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FA:87:85:D8:96:34:3D:10:D6:6C:15:75:0E:2B:01:04:D2:95:94
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:c8:a0:d1:c6:54:62:4b:7c:2f:6d:f0:88:87:ad:50:01:
         e4:3f:31:29:5d:29:4a:47:7c:77:4f:7e:90:fd:5f:3e:23:80:
         4b:86:e9:57:3e:a0:cc:e0:c0:49:cc:56:44:3e:4b:d4:04:e6:
         19:1a:69:b5:97:49:2a:59:77:41:73:40:6f:a8:45:3e:24:ce:
         49:68:db:9d:3d:dd:8a:3e:11:55:0a:cf:22:85:db:c3:09:3b:
         5d:4a:bc:13:75:d7:f7:e9:47:21:b4:5c:72:5a:e8:5a:76:23:
         a2:b0:d4:a2:65:0a:6b:1d:9b:09:b3:c8:de:42:dd:b5:0b:d8:
         4b:4c:b5:23:81:b4:e7:85:7c:25:61:f5:90:f3:de:1f:ac:c6:
         63:8a:31:fb:a7:d7:00:d0:61:ce:af:90:da:e7:04:d0:e0:47:
         41:64:14:5e:14:fa:42:7c:e0:dd:f9:df:c6:33:f7:dd:5e:38:
         62:bd:86:fd:4c:c3:05:b3:95:09:4a:60:30:8c:c5:21:6f:a0:
         bd:7d:48:9f:4e:10:7d:37:f6:fe:50:16:cc:2a:69:9a:cb:3b:
         00:f5:77:04:60:75:10:81:78:94:c4:5b:9d:26:69:64:a2:d6:
         1f:19:5f:cb:24:eb:7a:0e:6a:a6:b2:ca:9c:7e:ed:66:ea:bc:
         18:15:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org