Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa
File:                     3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          TeV3TtoO+StM339YyAY801c/cDC9O93sSUMomJidi40=
Subject key identifier:   93:65:55:CB:A2:26:31:5C:57:D3:25:E5:96:C0:BB:16:85:B0:16:59
Certificate issuer:       /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial:       1D9BDD5A3C2F436B9E193B343F36D44D5F3C6D4C
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa
Signing time:             Fri 03 May 2024 20:10:11 +0000
ROA not before:           Fri 03 May 2024 20:05:11 +0000
ROA not after:            Fri 02 May 2025 20:10:11 +0000
asID:                     28667
IP address blocks:        186.250.208.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9b:dd:5a:3c:2f:43:6b:9e:19:3b:34:3f:36:d4:4d:5f:3c:6d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
        Validity
            Not Before: May  3 20:05:11 2024 GMT
            Not After : May  2 20:10:11 2025 GMT
        Subject: CN=936555CBA226315C57D325E596C0BB1685B01659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:81:96:20:e5:eb:7f:51:2c:be:73:60:36:
                    02:c1:e0:8e:8e:7d:c6:d8:8e:69:1b:f5:05:12:d8:
                    94:a1:35:34:e9:12:11:24:0e:3f:7d:25:e2:2c:eb:
                    13:3a:3f:bd:ab:a8:73:49:8b:8d:c0:fb:23:e6:ca:
                    ad:9d:f2:ad:18:88:f3:b3:a3:c6:06:a7:8f:28:4d:
                    d9:e5:52:ca:04:25:f8:26:30:66:09:85:86:02:26:
                    ad:b2:3b:0f:01:81:dd:38:8c:24:59:b4:90:24:47:
                    cc:d3:0c:c5:bf:43:66:b9:a0:e9:fd:6c:ad:55:b4:
                    5d:25:29:c9:06:80:88:c2:19:05:c2:a8:93:ce:5a:
                    0c:37:01:a9:01:55:d7:e1:2e:38:9e:59:22:ee:60:
                    78:09:d5:e8:11:b7:a7:96:35:2f:ca:94:9f:94:83:
                    87:ac:95:2d:28:27:91:87:39:09:5e:46:ac:6a:11:
                    04:85:2d:db:c4:a9:11:81:e8:2a:1a:28:15:bf:b1:
                    17:9c:cd:49:eb:d3:b1:e7:e9:15:d3:43:9e:c8:c9:
                    69:e7:34:9b:ab:3a:82:1e:fb:e1:4a:ea:b0:d2:73:
                    50:d3:f8:27:6b:c2:cf:cb:41:be:41:cf:e7:ee:02:
                    98:1e:17:1b:40:69:a3:2f:c8:a3:d0:97:91:fc:cc:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:65:55:CB:A2:26:31:5C:57:D3:25:E5:96:C0:BB:16:85:B0:16:59
            X509v3 Authority Key Identifier:
                keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:d0:d0:04:a2:e9:79:e2:af:fe:73:1a:b5:c1:2a:f7:2d:81:
         6b:a6:38:af:0e:e5:00:c0:1f:da:59:a3:81:50:d7:51:03:32:
         8a:73:a8:38:00:1c:e4:b3:07:9c:67:d6:6a:89:d3:46:bb:e6:
         ae:54:6b:69:49:c6:42:b4:1e:ef:e0:7c:86:f3:ef:cf:7d:1a:
         6b:42:5d:27:cf:36:e4:49:65:ab:3b:de:f1:ff:04:64:66:c3:
         d5:39:34:81:6a:47:01:d2:c7:55:0f:5a:a8:be:eb:f9:20:2f:
         c1:42:db:c8:40:00:55:d4:52:2e:be:58:e3:8c:66:c3:12:2f:
         d5:cb:b8:fc:55:8e:eb:be:94:3f:cb:64:4b:21:fa:ce:a5:ca:
         e2:46:50:d7:e5:4e:48:12:71:5b:6a:bf:32:04:9f:ea:19:b5:
         5b:7f:41:c1:68:2b:d8:e7:d8:95:f0:be:5f:ae:4d:ee:c8:9d:
         5a:92:63:bf:b7:f8:c2:c5:94:2e:31:72:a4:8b:aa:34:d8:d3:
         04:54:6e:5a:30:8e:86:7a:4c:4f:22:1b:ad:3f:18:76:5b:8f:
         60:6b:03:c7:6f:27:d6:ba:39:34:2f:32:ba:de:77:e6:66:5b:
         ef:93:8d:3c:31:5d:e7:a3:a7:31:cb:37:80:e0:26:b0:20:b3:
         3f:c8:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:21:42 2024 by rpki-client on console-ams.rpki-client.org