Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa
File:                     3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa (raw, json)
Hash identifier:          jQ93GyWybvQKYpCHHsKHwuz4yK8U750SCZkJVBNbdUA=
Subject key identifier:   C1:48:C4:1E:A3:3E:3E:BC:67:8E:A1:DC:4B:29:21:47:D1:94:D5:07
Certificate issuer:       /CN=935257EB3C9C286B284FF65477D23761A683AD6E
Certificate serial:       62BEC2A4D01CDD7FEE17229EE4BFD829DC02EFEA
Authority key identifier: 93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa
Signing time:             Mon 22 Apr 2024 18:34:16 +0000
ROA not before:           Mon 22 Apr 2024 18:29:16 +0000
ROA not after:            Mon 21 Apr 2025 18:34:16 +0000
asID:                     14840
IP address blocks:        186.211.128.0/17 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:be:c2:a4:d0:1c:dd:7f:ee:17:22:9e:e4:bf:d8:29:dc:02:ef:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935257EB3C9C286B284FF65477D23761A683AD6E
        Validity
            Not Before: Apr 22 18:29:16 2024 GMT
            Not After : Apr 21 18:34:16 2025 GMT
        Subject: CN=C148C41EA33E3EBC678EA1DC4B292147D194D507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:f7:8b:5b:86:a7:7b:9b:3e:b5:49:64:90:
                    c6:1c:11:31:26:4e:60:8b:09:9f:f8:51:b2:b5:dc:
                    df:66:2c:97:55:96:03:ac:fc:2f:c5:2d:9f:aa:45:
                    af:17:55:43:64:0b:12:bb:c0:ee:c4:bf:e1:a5:8e:
                    04:46:cf:7e:de:31:31:ce:e1:9b:a6:3f:c4:b1:10:
                    bd:94:67:f6:df:50:d3:f6:37:6e:48:c3:ad:d5:55:
                    90:7e:b6:8d:3f:62:01:dd:b0:56:bc:86:fe:23:cc:
                    85:da:5f:4e:bf:fd:11:98:21:35:77:f3:e5:b1:62:
                    6d:f2:c1:95:fd:f4:d1:38:32:9d:e2:2b:b1:8a:d9:
                    f7:4b:c3:6f:bd:8a:e2:d1:c2:1b:3b:c7:0f:4a:00:
                    1c:a4:8a:2b:ae:55:0b:18:ef:16:8f:cb:92:eb:6c:
                    29:4e:e4:5c:22:9e:a5:ff:18:7f:af:34:ca:df:ea:
                    f9:82:e3:9c:2a:1f:e0:7a:07:bd:90:0d:56:a4:b7:
                    3b:89:77:04:13:5e:cc:ad:af:fe:e0:0b:85:16:69:
                    74:b7:52:0f:99:93:8d:a8:61:ab:cc:d8:04:52:73:
                    a5:97:1f:f0:1d:f7:77:96:28:1a:84:ce:32:1f:82:
                    25:eb:88:24:d7:03:3c:77:c5:9d:64:7a:0b:3f:6a:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:48:C4:1E:A3:3E:3E:BC:67:8E:A1:DC:4B:29:21:47:D1:94:D5:07
            X509v3 Authority Key Identifier:
                keyid:93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/935257EB3C9C286B284FF65477D23761A683AD6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:08:ff:fb:c4:43:24:2d:e8:6d:c8:41:5c:3a:37:07:40:f2:
         a7:95:e4:bf:c0:07:4f:04:b5:25:7d:21:61:00:a3:69:38:58:
         2a:14:a6:55:be:6c:cc:57:dd:6c:cc:ec:1a:3e:16:10:1a:0d:
         4c:b7:23:4b:89:87:83:91:cb:ce:30:1f:fb:00:46:17:42:87:
         fb:a1:ae:8d:87:e6:9f:52:a7:c5:be:5a:c7:95:ab:5a:30:5a:
         0b:15:49:10:9d:9f:fd:41:80:df:87:98:38:85:af:3a:23:66:
         4b:67:29:58:c0:32:64:91:00:5f:cf:7e:1c:e2:33:ea:72:ab:
         80:3d:f0:72:47:e5:b3:45:e7:c3:f5:fa:53:5c:35:2d:f8:3c:
         d8:70:39:bc:0a:f3:79:74:08:90:8c:de:a6:1e:80:b9:28:21:
         db:39:37:cb:2a:cd:23:83:94:50:4b:5b:1c:61:6c:2c:df:1d:
         0b:85:78:87:8d:ae:84:a6:a8:09:15:6c:c3:e3:15:f3:ae:4b:
         19:b2:fb:ac:55:8f:ec:31:fb:12:c3:d2:34:c6:59:72:04:d2:
         42:87:1b:6b:a0:b2:b4:77:86:6b:7b:76:04:a8:b7:58:24:b9:
         73:73:ba:ce:1b:c7:b9:fa:ab:3e:b5:a7:22:b7:61:73:78:80:
         f0:7d:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:23:38 2024 by rpki-client on console-fra.rpki-client.org