Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231362e302f32342d3234203d3e20323633353538.roa
File:                     3138362e3233372e3231362e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          vV+uVP8tuGzO62PabLPjmi+Fg2+mulBAtNmMkv2kQk8=
Subject key identifier:   E6:49:BF:35:2B:C2:37:1C:26:7C:AB:21:5D:EB:DB:B2:A6:E6:C1:B7
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       3684F30027EAB7905B7BFAE7C72A2184A3993955
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231362e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:24 +0000
ROA not before:           Thu 04 Apr 2024 07:55:24 +0000
ROA not after:            Thu 03 Apr 2025 08:00:24 +0000
asID:                     263558
IP address blocks:        186.237.216.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:84:f3:00:27:ea:b7:90:5b:7b:fa:e7:c7:2a:21:84:a3:99:39:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:24 2024 GMT
            Not After : Apr  3 08:00:24 2025 GMT
        Subject: CN=E649BF352BC2371C267CAB215DEBDBB2A6E6C1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:8f:c9:f9:36:e4:a0:d7:a4:ec:f1:42:ea:
                    9a:d7:8a:06:47:c6:62:81:ac:a4:24:49:a6:01:5f:
                    df:12:2c:00:ab:fb:2e:88:48:a5:69:b8:d1:e2:57:
                    8d:b1:be:bd:5c:f9:ea:59:9b:b4:e4:80:cc:fa:2d:
                    56:bd:c2:29:7a:d4:b9:f8:2d:35:35:46:13:07:43:
                    d1:d2:27:41:7b:99:6e:99:8f:aa:42:01:ac:52:84:
                    ea:e5:87:93:8e:3e:52:4e:a8:dc:17:e7:e4:95:67:
                    af:35:4f:c0:25:97:7b:ae:94:61:cd:6e:3b:b8:3e:
                    a7:cd:eb:1e:ca:3f:dd:07:ba:ed:77:8d:ca:30:15:
                    f9:25:fc:23:63:c6:ca:6e:a4:0c:a3:5e:c1:07:a4:
                    d3:b8:d4:db:39:65:4a:be:78:17:04:6a:b4:68:2d:
                    77:86:17:af:d9:d1:a6:f8:f6:5a:a8:20:8d:8f:d9:
                    5d:c2:90:27:de:c6:92:b4:aa:36:f5:7e:03:c5:96:
                    df:6c:ad:80:32:79:1e:61:98:6e:a4:05:1b:a7:fc:
                    a3:0f:b7:c0:fa:c8:63:81:49:a0:1b:90:83:bf:d6:
                    74:10:81:21:72:e1:6c:11:73:22:f4:e8:fa:a2:1c:
                    58:f6:98:26:d6:89:bb:45:00:0e:dd:aa:be:c8:d9:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:49:BF:35:2B:C2:37:1C:26:7C:AB:21:5D:EB:DB:B2:A6:E6:C1:B7
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231362e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:d3:2a:4c:f8:b8:56:44:e7:b4:35:3a:d3:55:ea:d7:7a:
         bc:bd:7d:44:9a:de:31:db:6c:b7:46:07:fa:c9:42:cb:48:7b:
         f5:44:6f:45:f8:a6:58:8d:fa:46:92:4a:fd:47:c9:58:84:2c:
         7f:13:7c:3e:ca:91:e6:7f:9e:e3:3d:6d:bb:69:0f:45:8b:28:
         ce:ac:37:fe:8e:08:80:46:5a:0b:60:a3:29:2e:f7:d2:39:9f:
         48:a9:03:66:50:37:f2:35:62:b5:f0:5e:d9:ad:08:cc:04:ba:
         17:2c:a1:78:ff:9f:08:e5:16:e3:2d:62:6c:3a:b4:49:2c:25:
         ed:4f:a7:4e:4f:fb:91:e4:dc:98:82:32:9a:2d:57:b1:23:ef:
         a7:fa:fa:19:8d:fc:bd:a7:63:cc:89:8d:3e:1d:8d:2b:b6:ba:
         39:8e:f5:11:79:84:5b:cc:a1:45:71:06:ba:1e:1f:d8:a9:b7:
         5a:90:c3:af:c1:be:2d:a8:11:e2:38:31:59:43:9b:72:e0:a2:
         ec:d7:ed:8f:0f:3e:41:52:f8:f3:30:65:fc:4b:fd:ea:b9:58:
         36:19:5b:bc:b2:60:fe:df:47:75:de:34:36:ad:8d:28:e8:55:
         d5:90:95:91:92:14:f8:77:6f:f5:33:d1:40:12:b0:74:ea:6a:
         25:25:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 21:37:44 2024 by rpki-client on console-fra.rpki-client.org