Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231392e302f32342d3234203d3e20323633353538.roa
File:                     3138362e3233372e3231392e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          LOsMfD/+PMU1/xDqbwY3gX1dWjGGBx7SqdhMH2tnffg=
Subject key identifier:   E4:EB:25:44:56:CE:05:92:44:B9:7D:5B:DD:CB:5A:E3:FD:2F:54:05
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       3F327C744FAF2BFDE706555E51580A546F89A378
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231392e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263558
IP address blocks:        186.237.219.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:32:7c:74:4f:af:2b:fd:e7:06:55:5e:51:58:0a:54:6f:89:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=E4EB254456CE059244B97D5BDDCB5AE3FD2F5405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:29:32:44:d2:aa:23:1f:1e:51:4b:21:ff:
                    2c:07:19:16:b4:09:0f:50:85:7e:7b:24:79:da:4a:
                    7c:79:4a:70:5f:60:95:63:a8:d6:fa:77:42:b9:8b:
                    af:1d:76:fa:e6:46:e0:db:1e:41:01:08:8f:ea:ac:
                    6d:68:be:c3:f2:cc:a6:a0:5d:10:ea:43:f5:6e:d6:
                    af:95:12:bb:86:28:6f:ce:2b:79:a5:e4:ab:4b:e9:
                    3b:5b:2d:d4:9f:43:88:23:6f:e0:33:b4:6b:b7:4a:
                    63:11:18:cb:f2:84:6d:9a:06:1b:d9:79:0c:05:c4:
                    2d:98:7c:96:26:9d:3d:1e:75:01:ed:1a:d1:b0:13:
                    56:6b:a4:47:5a:76:21:a2:da:06:fc:1f:3b:65:6d:
                    c3:34:7c:b2:b8:31:78:64:29:91:46:28:11:f9:66:
                    38:3b:5b:c2:c5:e4:44:b9:97:0c:3a:6b:37:c0:1c:
                    48:a8:39:4f:c6:11:35:9e:86:33:9f:e3:9f:e4:37:
                    02:f7:d3:c4:c3:b6:38:db:9d:9a:be:3e:97:1a:6d:
                    11:ed:c7:4f:d8:2c:fc:72:d3:63:4b:9f:4f:b3:f1:
                    76:f6:2f:6a:77:f6:84:bf:7b:32:67:81:8f:cd:0f:
                    d7:22:fb:30:71:70:39:64:ef:cd:ed:66:d8:3f:4e:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EB:25:44:56:CE:05:92:44:B9:7D:5B:DD:CB:5A:E3:FD:2F:54:05
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231392e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:a0:fa:9d:f5:0c:9a:3a:35:cd:43:b2:fd:7f:c9:f4:a8:
         4a:7d:9e:da:2a:ff:e5:38:fb:ea:25:ff:27:b8:74:a7:62:42:
         fc:ce:08:75:5d:66:5e:35:d4:4f:c8:41:7f:df:e3:68:6b:8e:
         92:b5:5c:c0:8c:7f:e4:b6:e8:f0:12:d9:60:92:08:f3:c7:32:
         5b:88:7d:b2:a7:06:ea:22:48:f7:67:63:9e:6a:ca:cd:9c:b1:
         da:18:59:31:cb:c4:27:2f:c8:b8:a0:c4:97:31:08:eb:8b:a8:
         f9:91:b2:74:2a:28:25:6b:05:62:a3:a0:2e:50:9b:0c:fd:63:
         70:de:b4:6d:56:5a:ff:d8:0a:b9:e1:8e:fa:b5:72:72:ae:cc:
         6d:fd:5c:49:68:1f:cf:50:ea:e7:21:f2:68:1c:58:94:13:67:
         c3:8f:b9:0d:6c:5c:89:d4:37:99:73:05:8e:8d:38:e9:43:19:
         b1:7a:33:33:34:f5:23:02:48:32:b4:0b:96:53:c1:d9:a2:e4:
         8a:7a:3e:c1:68:f9:a8:ac:4c:d1:58:71:bc:84:60:f3:27:5c:
         69:1c:fd:cf:b6:32:e7:f0:87:fc:88:ef:1f:94:a3:d7:cc:3d:
         7c:b2:2c:b9:be:1d:23:41:1b:38:e9:bc:a4:db:ee:82:ce:fc:
         56:94:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 21:37:44 2024 by rpki-client on console-fra.rpki-client.org