Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa
File:                     3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          wNP6vso6+BcXvExNmHy9E1tql7jL5zXZne7TptFA1UQ=
Subject key identifier:   D5:67:F3:35:BD:1C:91:8E:45:06:AB:74:13:FC:46:1A:86:DB:FC:79
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       7477C3C02536BA3ABB3D2A78B3EC24052F8826AC
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:07 +0000
ROA not before:           Wed 23 Oct 2024 17:53:07 +0000
ROA not after:            Wed 22 Oct 2025 17:58:07 +0000
asID:                     264927
IP address blocks:        168.228.186.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:77:c3:c0:25:36:ba:3a:bb:3d:2a:78:b3:ec:24:05:2f:88:26:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:07 2024 GMT
            Not After : Oct 22 17:58:07 2025 GMT
        Subject: CN=D567F335BD1C918E4506AB7413FC461A86DBFC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:60:76:89:68:5a:9d:ed:3c:b6:0c:09:b6:
                    47:97:29:6e:49:bb:53:e6:62:d9:3c:da:30:0f:38:
                    f2:43:e9:f9:60:88:67:d7:c3:48:39:39:5f:b9:89:
                    0b:36:e5:38:93:9c:fe:01:50:0d:24:7d:8a:5c:73:
                    52:ce:20:67:89:0c:b8:a7:cb:2a:56:a0:eb:42:41:
                    83:5e:ea:c6:ce:93:9f:ee:45:a4:20:80:e4:03:15:
                    2f:40:f3:50:e7:3f:38:14:21:31:ef:e8:7a:a4:d3:
                    55:11:88:de:f4:9c:12:64:44:52:ed:d8:75:44:5a:
                    13:24:8a:ab:91:54:46:4b:a9:44:b6:4f:fa:e1:0d:
                    ff:97:15:da:64:8e:73:82:9d:dc:cb:7a:15:98:91:
                    a0:ca:14:92:ba:49:c4:e7:e8:16:11:82:80:b7:b3:
                    2f:ed:8f:81:0c:ab:e0:2c:ba:9c:5a:e6:18:45:b2:
                    27:4c:79:65:c9:64:0c:22:40:3d:5a:34:85:71:74:
                    62:b2:34:f6:d6:98:29:45:db:01:e2:60:8f:52:21:
                    ed:a0:3e:93:40:61:75:17:10:65:0e:81:b3:55:e5:
                    21:3a:3d:a7:5b:3c:f4:24:ba:b0:eb:79:b6:8f:35:
                    25:1a:76:73:b0:8a:79:74:fe:98:0e:1a:3d:76:6a:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:67:F3:35:BD:1C:91:8E:45:06:AB:74:13:FC:46:1A:86:DB:FC:79
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:46:1a:6b:d5:67:53:1f:14:0a:de:05:f7:e4:99:28:3a:
         21:c3:52:36:71:81:93:9c:cf:e9:59:5e:9f:16:56:fd:41:47:
         59:17:78:b9:27:75:7d:31:12:89:a9:bb:a3:15:a8:59:8f:03:
         69:6f:ef:f7:53:50:62:7f:4f:3e:08:07:64:ac:bb:d6:87:76:
         20:4c:f6:34:3c:0e:0c:ba:1c:d9:00:d5:22:88:c3:85:38:d7:
         4f:c9:47:fd:45:77:24:b5:3b:4a:17:f1:9d:f9:e6:aa:86:c5:
         a4:40:88:4f:73:48:5c:68:98:47:48:07:35:7b:ab:07:50:cd:
         67:3d:da:04:7e:e4:27:09:47:70:62:bc:72:53:b0:19:f8:b8:
         2c:bb:79:bf:ca:7a:c4:8e:fc:68:cf:bb:6d:5c:53:7c:d4:1d:
         36:29:fa:54:35:02:ac:56:c6:4c:eb:50:7a:49:f5:70:6f:1d:
         b5:3c:45:2a:ff:95:d0:0e:80:05:ab:a0:64:9d:4f:40:fd:0d:
         b8:8b:7e:d7:f2:59:69:d3:e0:e1:1a:33:80:a8:4f:bf:2e:8a:
         eb:9a:d7:ab:a3:22:0d:fc:59:ce:97:a6:df:53:9b:ff:8b:c2:
         60:57:f3:15:66:53:eb:55:04:a6:53:ee:2a:39:a5:1f:73:b5:
         b9:17:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org