Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232312e302f32342d3234203d3e20323633353538.roa
File:                     3138362e3233372e3232312e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          GrgKrboSLtUSQv4WoKLYKoJU7IEWJICu10DwEMQnMgo=
Subject key identifier:   A3:A4:04:5E:C7:AD:28:9B:8C:0C:5F:64:CF:9C:21:D2:31:F0:6E:8B
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       75446C5B872DF21B61558D7DD2B1323FD79791E3
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232312e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:24 +0000
ROA not before:           Thu 04 Apr 2024 07:55:24 +0000
ROA not after:            Thu 03 Apr 2025 08:00:24 +0000
asID:                     263558
IP address blocks:        186.237.221.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:44:6c:5b:87:2d:f2:1b:61:55:8d:7d:d2:b1:32:3f:d7:97:91:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:24 2024 GMT
            Not After : Apr  3 08:00:24 2025 GMT
        Subject: CN=A3A4045EC7AD289B8C0C5F64CF9C21D231F06E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:eb:fa:70:b3:1f:9e:95:3a:dd:16:7d:9a:
                    cc:c3:40:59:22:b8:da:fc:68:76:a1:38:40:95:60:
                    93:f0:e3:d1:69:41:37:b3:96:4c:0a:4f:1a:f3:0a:
                    10:bf:4e:be:a8:6d:fa:87:b1:d0:45:33:65:ba:f8:
                    85:0d:76:ed:eb:4d:21:51:d4:6a:68:8d:2f:5b:d5:
                    15:ba:dd:39:a6:9a:b0:53:74:e8:91:f0:b4:9d:35:
                    4d:71:b9:ce:7d:85:16:b6:bd:5f:d7:07:74:d0:cb:
                    0f:b5:b8:52:47:2f:23:d7:7e:53:6b:47:9f:34:f0:
                    28:e9:bd:fd:c9:eb:14:83:fd:22:d0:45:87:f1:0f:
                    10:0e:a7:02:d8:af:fa:80:bb:93:40:59:64:1f:b7:
                    d0:9f:aa:79:98:a1:07:ae:ee:a6:f6:a6:84:f6:13:
                    83:8c:e0:ae:c5:9f:a0:2a:80:2e:dd:aa:dd:ae:c1:
                    84:ed:d1:13:fd:37:f5:24:ad:26:b4:96:c6:6e:89:
                    41:54:eb:ae:dc:8a:01:d6:d3:80:ca:08:75:54:c6:
                    14:f0:8f:03:aa:35:d0:09:81:03:70:b6:a1:a7:57:
                    b1:e6:f7:ad:9b:c4:6f:f6:d3:b9:71:a0:a0:b4:7b:
                    20:c9:a3:d3:19:36:53:73:b1:95:5f:bb:c0:e3:dd:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A4:04:5E:C7:AD:28:9B:8C:0C:5F:64:CF:9C:21:D2:31:F0:6E:8B
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232312e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:d0:21:05:a5:b2:37:8b:7d:de:99:75:9f:00:21:b2:4b:b7:
         f7:f7:99:b4:9c:68:47:c6:82:b9:94:1f:0b:c0:85:11:50:b1:
         c5:a7:d5:aa:86:ab:9f:0e:c4:87:28:58:98:08:f7:60:77:18:
         22:55:64:71:06:01:0f:bb:47:4b:ce:b7:e8:af:93:08:bb:e4:
         80:83:e2:1d:73:f0:fd:d1:35:60:c5:80:7c:3e:4e:f7:d4:29:
         63:e7:38:a2:63:5f:14:fb:0a:c1:6a:1b:db:34:6b:34:65:53:
         78:61:23:91:47:87:d2:cc:43:79:8d:52:98:ce:e0:3a:07:2f:
         1f:fd:f6:09:1d:2f:aa:a9:7e:d8:52:4c:30:b1:87:2d:17:cc:
         e4:b9:30:1c:e8:ec:08:d4:13:2f:68:50:6d:bf:9d:cf:83:cd:
         6e:0b:b9:aa:ee:2f:fc:f0:56:67:f1:cf:90:75:97:55:2e:f9:
         fe:88:75:1a:fe:35:6e:14:0a:89:fd:05:5e:18:be:58:b7:46:
         5e:fb:1e:ea:be:f7:75:8f:ec:13:95:36:28:e6:0f:ee:6f:7e:
         e0:40:2f:22:4f:f4:48:ab:b3:3d:64:6b:d8:15:bf:ef:80:7c:
         7e:ac:f8:82:b5:96:e7:a8:1c:18:6b:88:a0:41:0d:d1:a6:5a:
         4e:09:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 22:05:17 2024 by rpki-client on console-ams.rpki-client.org