Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa
File:                     3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa (raw, json)
Hash identifier:          mlQV/QLEttcdezVpvSqCml3fvm1VeYj3Ldbjpum9Xec=
Subject key identifier:   47:22:22:80:FE:51:F0:93:CA:F9:5F:9D:50:6B:3F:BD:78:43:9D:67
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       0A49E8ED3503662B5906C5345B9B9244B8E7335E
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:09 +0000
ROA not before:           Wed 23 Oct 2024 17:53:09 +0000
ROA not after:            Wed 22 Oct 2025 17:58:09 +0000
asID:                     264927
IP address blocks:        168.228.186.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:49:e8:ed:35:03:66:2b:59:06:c5:34:5b:9b:92:44:b8:e7:33:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:09 2024 GMT
            Not After : Oct 22 17:58:09 2025 GMT
        Subject: CN=47222280FE51F093CAF95F9D506B3FBD78439D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:ed:a5:41:62:a0:8f:6a:a0:05:fc:07:46:
                    c5:58:56:ad:d8:f4:4a:c0:b8:07:0d:bb:9e:85:ee:
                    f9:43:5e:48:a4:b9:7d:a3:0f:0e:dd:fc:9d:f3:ea:
                    99:94:41:3e:a9:79:ce:d4:dd:65:af:3c:75:0f:d7:
                    22:97:3e:d4:57:ec:b0:55:53:20:76:99:fb:d7:31:
                    10:f8:83:81:c7:c6:b0:78:62:83:47:63:74:dd:21:
                    de:6a:71:1a:ab:35:cd:0e:36:75:0a:9c:ac:ac:35:
                    8d:44:ed:a7:fb:bb:2e:66:5b:52:48:de:5c:85:e6:
                    02:a1:fa:31:ae:1a:c6:07:9b:2b:ae:b5:1e:3b:b7:
                    dd:f4:79:3f:32:62:8d:43:dc:7f:b0:30:ff:94:5b:
                    67:9c:a9:f8:67:58:b5:62:a0:49:60:58:01:b0:e3:
                    b6:e4:e9:b8:83:4d:9a:ec:e3:b5:e5:0a:c8:62:f5:
                    6b:7d:f0:cd:38:66:0a:b7:a6:54:ec:51:7c:d8:ca:
                    f9:e8:45:63:29:91:91:bd:6b:86:61:ee:6e:16:20:
                    7e:e5:a8:ab:e6:4c:93:b2:1b:a7:4a:cb:3f:f0:7d:
                    07:a8:e8:07:7a:f0:6a:21:58:a2:93:4c:a5:a7:14:
                    a8:e8:68:66:4d:7c:bd:c6:b9:ff:f0:3d:b3:4d:b9:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:22:22:80:FE:51:F0:93:CA:F9:5F:9D:50:6B:3F:BD:78:43:9D:67
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:ad:01:00:25:e9:3f:a3:73:16:65:0a:70:1a:c8:ec:3f:
         61:51:ce:84:3e:1b:8a:00:eb:36:a7:dd:65:10:80:fe:0f:e1:
         1b:7a:97:5b:1a:03:d7:56:c9:e4:08:0d:8d:69:41:d9:37:e2:
         0b:5d:37:3c:63:4f:6a:5b:af:e2:0c:30:b5:89:45:19:c9:1f:
         a5:69:7f:3f:7d:84:ea:d6:64:51:6d:b5:f6:2d:0c:2f:40:4e:
         b1:87:19:3f:be:ff:aa:c4:4b:66:25:28:fb:0f:16:58:5a:6f:
         d9:d7:bb:0b:2e:3f:c4:a9:0b:31:55:f9:55:5b:30:7e:13:19:
         9c:6f:d3:0a:5e:56:a5:a5:03:07:8e:ee:40:48:f8:b9:3b:14:
         5e:08:4a:42:a9:65:25:bd:85:af:be:a7:7f:ff:92:b8:11:d5:
         3c:cd:b5:38:7e:f5:44:d8:8c:77:3d:64:03:79:d8:aa:56:f7:
         e4:10:24:23:f6:5d:58:23:37:55:28:93:70:c6:51:c3:b0:d4:
         78:ec:49:fa:d6:12:12:65:51:b4:e9:d8:a8:8b:d7:52:c3:c6:
         b4:f5:43:0c:94:61:37:1a:c3:25:91:46:a4:fd:47:5d:af:64:
         c1:6d:b9:ff:81:43:0b:b2:54:81:ef:43:87:1f:32:5f:71:f5:
         17:25:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org