Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa
File:                     3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          mQJuTDXrEnQlhXsStW0fa4n07SDLFAdtls6+R6fE7Rw=
Subject key identifier:   EA:D2:FF:E3:99:6D:22:97:7D:23:DA:30:B7:48:4A:98:FC:AB:1E:DB
Certificate issuer:       /CN=64E4B884F01FC9DC0000E111AE283F356C137547
Certificate serial:       1F4A66ECD53972B58FA49745D33B60D6B1264255
Authority key identifier: 64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     262952
IP address blocks:        186.233.172.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4a:66:ec:d5:39:72:b5:8f:a4:97:45:d3:3b:60:d6:b1:26:42:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E4B884F01FC9DC0000E111AE283F356C137547
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=EAD2FFE3996D22977D23DA30B7484A98FCAB1EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:ad:aa:e1:4a:9a:68:4d:bf:24:4b:41:5d:
                    79:96:5f:06:5c:02:5b:b2:3a:14:8b:a9:0e:fb:e1:
                    95:c0:4a:34:cf:3f:c4:73:64:33:45:ff:62:34:37:
                    3a:52:de:48:71:7a:c8:38:fb:57:ba:24:36:d4:93:
                    8b:ea:b9:82:eb:b7:41:2d:83:e9:7f:34:78:a2:a5:
                    2f:92:90:f9:0b:ec:f1:a5:89:c6:82:69:33:f7:f7:
                    09:a0:40:64:33:dc:09:a1:2c:57:d6:d2:4f:bc:1f:
                    f7:63:e1:36:fc:ee:d3:0e:a3:30:18:f7:7a:7b:ed:
                    81:ae:c0:0e:8b:b8:be:40:f9:f6:2c:8a:f9:9d:03:
                    0c:a7:5a:39:79:85:66:a7:b0:88:43:9f:c4:66:f9:
                    ea:c8:b5:96:47:c5:1f:2a:6f:c3:a2:d3:32:c3:c9:
                    6a:b6:0b:1b:7e:75:ae:a3:96:69:72:08:59:25:fe:
                    28:12:ee:0d:5d:5a:6e:a8:af:26:36:1a:d8:fb:ee:
                    0c:08:82:d2:e2:1d:ae:48:ac:71:38:b6:81:a1:af:
                    aa:f7:3f:e5:19:3a:41:99:92:da:6c:99:33:10:b8:
                    f3:5f:ff:27:68:6d:b7:14:62:6b:1d:54:45:62:50:
                    63:b4:3b:93:9a:58:65:00:80:84:42:8a:08:f2:bc:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:FF:E3:99:6D:22:97:7D:23:DA:30:B7:48:4A:98:FC:AB:1E:DB
            X509v3 Authority Key Identifier:
                keyid:64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:a9:04:ff:71:1d:5a:19:77:f5:9b:71:dd:d8:d8:a1:8c:
         06:86:11:11:89:35:1e:e4:08:a3:87:68:8e:d3:38:a2:9e:05:
         91:f5:ff:80:53:c1:40:8e:66:86:64:fb:d9:01:b8:90:37:47:
         38:5d:b4:d3:8b:f3:25:c5:eb:cd:32:9a:c3:d2:a4:89:bb:ff:
         b0:19:7e:c4:f9:6c:9d:61:02:d0:bd:0f:6d:3a:c2:d1:79:1a:
         3a:30:0e:0f:7d:08:f9:70:72:05:0b:d2:3f:2a:8c:12:1e:0c:
         02:d2:3e:89:1d:35:8f:c2:21:b0:9c:f4:14:0c:a6:5a:ad:0b:
         f7:50:f7:64:a1:c2:87:ef:ea:7a:64:6b:92:1b:72:42:70:cb:
         40:5c:d9:5f:37:c3:4a:f5:68:a3:61:53:6f:01:c2:db:e5:fe:
         aa:b2:c1:47:26:30:5e:0d:9e:1f:42:0d:6c:ac:30:f7:4f:2f:
         6e:7f:89:f9:49:be:cc:43:d8:d3:d6:07:28:4d:f7:9d:d1:3d:
         5c:55:24:39:b9:bb:e6:00:e5:86:35:ac:35:da:6e:e0:95:53:
         80:69:ec:71:96:1d:b5:91:bc:78:18:97:5e:bb:bf:10:dc:e2:
         77:09:62:f4:74:14:2b:fa:b7:98:22:32:5b:c7:f9:3c:15:3f:
         0d:71:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 04:24:08 2024 by rpki-client on console-fra.rpki-client.org