Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
File:                     3138362e3233362e39362e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          fykPc5Wcs5KHVlAhO1CKn7yCg0Uk1sHDPPj7VmRnGSs=
Subject key identifier:   80:5C:29:3B:E0:AB:21:FD:E8:31:25:1E:08:D2:F9:B5:28:17:FF:AF
Certificate issuer:       /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial:       2F94E46217A45A0A2A162DF13F92F659FF2CBBBB
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
Signing time:             Fri 03 May 2024 20:10:04 +0000
ROA not before:           Fri 03 May 2024 20:05:04 +0000
ROA not after:            Fri 02 May 2025 20:10:04 +0000
asID:                     28667
IP address blocks:        186.236.96.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:94:e4:62:17:a4:5a:0a:2a:16:2d:f1:3f:92:f6:59:ff:2c:bb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
        Validity
            Not Before: May  3 20:05:04 2024 GMT
            Not After : May  2 20:10:04 2025 GMT
        Subject: CN=805C293BE0AB21FDE831251E08D2F9B52817FFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:81:6f:db:b3:46:6f:5b:44:50:54:81:24:
                    f0:16:df:34:3d:f6:f7:5f:56:80:8b:1c:6f:a6:6e:
                    f9:53:66:6d:eb:97:c9:b5:2c:84:9a:99:23:d6:f9:
                    c5:00:a1:e1:0e:b5:6d:32:6c:30:28:a6:07:85:54:
                    0d:7c:0b:97:6d:55:5e:40:a9:3c:9f:b0:ab:07:30:
                    d8:88:fd:aa:f0:15:08:95:f7:92:26:ef:86:fb:5e:
                    63:0e:d7:e2:45:4d:a3:2d:e9:41:d3:3f:d2:6c:2a:
                    9c:3d:e3:d3:e3:20:4d:57:b4:85:b6:d0:0a:a6:fc:
                    45:75:35:cd:4d:b3:e7:3d:c8:54:46:05:b5:84:1f:
                    d3:73:40:98:53:3a:4b:f8:38:2f:12:6d:30:6b:f6:
                    13:0e:8d:e4:cb:b2:e9:b8:ae:94:4e:36:e3:7d:41:
                    12:1b:73:8c:47:e2:4f:a5:b1:7b:96:80:09:c7:0f:
                    9a:72:17:e7:96:a6:2c:4e:4f:71:57:1a:d0:c6:a5:
                    48:32:4c:9b:2d:c5:67:64:e8:43:97:14:72:92:6c:
                    8f:a9:cc:44:1d:42:c7:f2:5a:7d:8e:48:8d:1f:b0:
                    91:64:34:ac:04:44:c3:24:cf:52:5e:25:97:77:6f:
                    3f:a0:b6:13:94:d0:7e:13:a1:8e:4a:26:31:8f:98:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5C:29:3B:E0:AB:21:FD:E8:31:25:1E:08:D2:F9:B5:28:17:FF:AF
            X509v3 Authority Key Identifier:
                keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:df:35:49:74:4c:f6:c5:c5:ea:63:a0:0e:72:65:bc:d3:df:
         1a:e7:6d:72:c8:b5:f2:f0:33:c2:94:c4:fb:2a:f4:b0:0a:9c:
         1b:02:1d:6c:44:e3:b5:52:3a:29:a9:1e:c1:60:ce:5b:4f:d0:
         b6:e6:9c:7a:e5:29:5e:1f:10:69:01:98:16:51:30:d1:75:67:
         ec:4c:bd:25:31:f1:b1:92:d0:cd:0e:2d:5a:34:c7:6b:40:8d:
         29:c9:5d:5d:38:c6:56:f5:59:30:15:01:fe:2f:09:0b:e6:0e:
         f9:f9:c6:bd:f7:06:05:bb:27:1d:69:b2:5d:22:69:d6:db:52:
         18:58:2b:82:92:4a:d0:5d:28:af:79:0e:68:68:ce:5e:82:e9:
         a0:2b:96:55:8b:d5:94:66:8b:db:1a:2b:82:ce:7a:e6:2e:d9:
         94:66:d6:2e:7d:f8:d7:b9:d5:53:83:cc:ad:6a:c6:3b:96:96:
         1d:8e:47:56:8f:f1:91:fd:65:76:84:82:1f:3a:3c:71:b7:dc:
         2b:bd:c6:4c:a5:1d:65:7b:9e:d5:d7:26:1a:4a:f2:dd:bd:7a:
         ad:4a:a8:89:9c:b1:1d:c4:76:09:8d:66:1a:46:24:4a:06:a0:
         e9:72:87:cd:a9:df:b3:ee:ae:75:8d:bb:8a:0c:a7:71:20:2e:
         91:8a:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:21:42 2024 by rpki-client on console-ams.rpki-client.org