Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231372e302f32342d3234203d3e20323633353538.roa
File:                     3138362e3233372e3231372e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          Kivn4UVTaOrOmg8K0AoH5YMMlBiDxqVegHDgkCdTRqM=
Subject key identifier:   4B:1D:9F:D7:7D:C0:4F:1B:5F:CE:79:55:04:62:EF:6D:61:B0:3C:9D
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       1F0FFD240E2714B1BDA6A9AAB065682AA2254D74
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231372e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263558
IP address blocks:        186.237.217.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0f:fd:24:0e:27:14:b1:bd:a6:a9:aa:b0:65:68:2a:a2:25:4d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=4B1D9FD77DC04F1B5FCE79550462EF6D61B03C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:68:f2:26:87:f1:b6:c6:6b:1d:37:1f:a3:
                    cd:cc:4f:c3:c9:10:2d:7b:97:04:1f:ce:34:b1:17:
                    03:7c:c8:e4:6f:05:95:28:2c:f5:19:77:82:64:9a:
                    05:2a:47:c7:65:ad:59:1e:d9:99:5e:1d:41:93:5d:
                    cd:09:44:e8:d1:bf:a2:33:ef:04:26:e5:40:97:4c:
                    f7:5f:9f:e7:79:f4:bb:aa:1f:d4:cf:f1:5d:eb:24:
                    29:1b:f2:d5:34:0c:fd:d0:b6:90:96:eb:4f:7b:65:
                    d6:3b:52:10:2f:10:88:92:aa:9d:36:8d:e5:c2:16:
                    89:1c:ea:d7:33:fb:b3:2b:84:b4:8e:77:f0:c7:ce:
                    cb:60:da:d1:9a:9d:ee:cf:15:c1:6b:b5:d2:de:19:
                    f5:52:61:4d:fb:66:6f:a4:87:3f:fd:e8:60:94:39:
                    a2:50:10:ec:44:38:e0:1b:b8:92:8a:66:e6:af:db:
                    b6:f2:fd:c5:4f:af:b3:71:54:40:12:27:e3:11:b4:
                    16:0a:5c:54:fc:db:3d:0f:37:99:d5:43:f7:98:6e:
                    73:10:24:2b:66:bc:b7:05:65:24:f4:e0:cc:db:2f:
                    17:d1:a4:73:09:04:85:81:b6:ee:97:92:25:f0:6f:
                    6d:fb:0d:9d:4b:93:bc:a8:87:fa:da:74:44:4f:0f:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:9F:D7:7D:C0:4F:1B:5F:CE:79:55:04:62:EF:6D:61:B0:3C:9D
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231372e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:aa:a0:8b:15:43:eb:e8:d0:8e:23:71:ef:3a:34:09:18:
         00:2a:28:a4:d1:f8:8d:69:b1:24:5f:63:26:54:e2:4a:a8:dc:
         d4:6e:f8:e0:9e:d0:41:d6:4d:88:33:e4:89:30:82:83:27:41:
         d5:c4:e7:34:76:39:24:e4:c3:2b:73:23:3d:fe:cb:80:bc:a3:
         38:90:da:5b:f3:83:ee:da:98:ee:23:d7:fa:58:2a:c2:c0:8b:
         dd:9b:7d:f2:14:ba:f1:a8:65:ad:da:2f:8f:cd:c7:b4:c4:e7:
         09:71:11:de:6b:ca:ca:9f:92:0f:6f:d6:b3:e2:d8:ff:f5:3d:
         91:fd:c3:d8:3e:bf:bc:c5:c1:52:04:ec:e9:e1:cf:e1:da:94:
         e9:a0:2b:47:ae:8e:37:bb:e6:07:c9:7e:9c:c7:2a:8e:18:dd:
         2f:dc:f4:10:b8:c1:1d:72:e1:b1:47:15:d8:06:99:0b:19:ba:
         04:7e:cc:1e:da:b9:a1:50:ca:25:0b:0c:95:64:f8:47:f8:aa:
         9a:d2:97:18:36:07:ac:33:68:3e:df:69:28:94:bf:c6:72:04:
         f2:49:29:70:b3:e6:16:2a:7b:ac:8d:62:28:ff:af:60:25:f1:
         bb:05:ba:e1:05:a2:2a:53:68:f3:0c:47:f2:62:44:00:a7:29:
         a0:fe:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 21:37:44 2024 by rpki-client on console-fra.rpki-client.org