Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/3138362e3235302e38302e302f32312d3332203d3e20323637363231.roa
File:                     3138362e3235302e38302e302f32312d3332203d3e20323637363231.roa (raw, json)
Hash identifier:          Y+S3R6zzYS+5bIBJGu5c+tmp1XHshyHEdlY/vdIGwk0=
Subject key identifier:   28:02:6D:5F:EC:91:0E:5B:A3:BC:13:2A:45:68:DB:F0:59:29:2E:81
Certificate issuer:       /CN=DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793
Certificate serial:       0C3FFAF086BF5E145167657A5C9CD0F307367B96
Authority key identifier: DA:9D:BF:93:FD:F0:DA:5C:99:32:6B:EA:5D:06:A5:26:EB:9E:27:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/3138362e3235302e38302e302f32312d3332203d3e20323637363231.roa
Signing time:             Wed 09 Oct 2024 01:18:01 +0000
ROA not before:           Wed 09 Oct 2024 01:13:01 +0000
ROA not after:            Wed 08 Oct 2025 01:18:01 +0000
asID:                     267621
IP address blocks:        186.250.80.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3f:fa:f0:86:bf:5e:14:51:67:65:7a:5c:9c:d0:f3:07:36:7b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793
        Validity
            Not Before: Oct  9 01:13:01 2024 GMT
            Not After : Oct  8 01:18:01 2025 GMT
        Subject: CN=28026D5FEC910E5BA3BC132A4568DBF059292E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0d:1f:f3:7b:2d:45:62:13:0f:a3:96:72:19:
                    6b:ba:10:cc:23:b4:86:cc:05:cd:9a:81:20:70:f0:
                    f7:94:4e:64:92:2f:e4:a7:ad:b4:c4:59:b3:da:c1:
                    2a:2a:57:2c:28:70:5e:a3:76:91:4a:52:82:1f:e4:
                    35:76:7f:75:12:7e:35:80:19:58:95:4d:55:1a:fd:
                    21:34:d2:a2:c1:15:ea:8c:41:a5:4e:66:9f:3f:b9:
                    d4:da:49:b4:f4:ba:58:d1:5f:84:d3:54:cc:7a:71:
                    8c:e1:ea:89:20:09:b3:90:c7:07:e6:96:43:4d:69:
                    33:a3:2e:e9:9b:1d:fa:70:2f:a5:fb:68:e9:13:04:
                    44:5a:48:04:bf:3a:ed:75:60:5d:e6:c9:52:18:3e:
                    87:56:cb:e9:22:ca:79:49:a9:dd:2e:0d:e5:2e:b4:
                    83:38:e8:f7:06:72:6b:4c:c9:5e:fe:4d:e6:d0:df:
                    2f:8f:05:8d:9c:19:a8:7f:5e:e7:5a:1d:c4:46:71:
                    0e:ca:89:a5:00:10:9b:13:8a:61:f7:ae:cb:71:b3:
                    90:1e:c2:f0:8f:c4:83:e3:6e:9f:86:e5:96:d9:8e:
                    5f:33:49:6b:69:2c:c6:c6:19:5e:f3:76:f1:6b:4b:
                    58:bf:3d:52:03:4d:94:b7:6e:c7:9b:87:b0:c5:d5:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:02:6D:5F:EC:91:0E:5B:A3:BC:13:2A:45:68:DB:F0:59:29:2E:81
            X509v3 Authority Key Identifier:
                keyid:DA:9D:BF:93:FD:F0:DA:5C:99:32:6B:EA:5D:06:A5:26:EB:9E:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9DBF93FDF0DA5C99326BEA5D06A526EB9E2793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bis8mA4tWApKZBZ1XRMscFtBgJJy9UnZCm3wL4W2CWUn/0/3138362e3235302e38302e302f32312d3332203d3e20323637363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:79:f9:9d:36:00:0a:0e:fc:4d:53:43:fa:13:4e:aa:2c:b8:
         15:65:36:5a:60:c6:75:76:ce:1f:c9:be:4f:ac:2f:d5:e3:bd:
         1c:38:89:43:bd:99:87:a8:00:a2:67:ea:cf:a0:f0:24:2a:74:
         25:65:3f:0a:fe:92:4c:8c:dc:87:ce:e6:fa:58:33:fd:c9:72:
         ea:06:ec:77:66:90:8f:d8:55:6b:2d:ae:d7:6f:51:e2:f0:cd:
         f2:e2:10:b7:a7:e9:f3:10:24:14:14:3a:82:37:f6:2c:2e:5b:
         21:a7:01:7c:cd:10:ea:32:c3:c7:26:a8:3e:ed:f5:49:fb:9f:
         e2:ed:f9:4b:e8:f7:ca:57:ed:58:83:a8:4d:ce:fe:93:42:fb:
         2a:a9:02:32:ce:08:44:11:08:ad:8b:c1:24:ed:7e:87:ea:d0:
         30:9d:4a:45:0a:d7:e8:05:63:40:cc:63:87:ff:f3:33:44:0f:
         dc:b2:89:97:3f:19:6a:79:7d:09:44:31:8c:7c:8d:e4:72:f6:
         cb:ac:5d:f8:e7:fc:c9:13:62:f1:f6:4e:24:8a:ea:55:b6:69:
         90:d9:75:17:c9:0a:65:87:e6:17:c5:20:a9:82:17:e1:0d:f2:
         ce:5a:fc:05:21:84:d0:d0:13:23:b4:53:18:53:e2:e4:d5:7e:
         cb:d8:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 23:22:28 2024 by rpki-client on console-ams.rpki-client.org