Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa
File:                     3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          JkesCoa6OTAWp+IgxRumeo5biLuE+BeXuEniD0s7ulI=
Subject key identifier:   9C:51:AD:CF:BE:46:AB:50:B9:BA:9E:10:8F:A6:FB:1B:BC:3E:E9:FE
Certificate issuer:       /CN=FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B
Certificate serial:       4D83D62810AC4EA79326766631837AED964C2302
Authority key identifier: FD:72:CD:09:16:1D:DF:12:B1:EC:EF:73:71:C9:D5:1F:0C:B8:07:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa
Signing time:             Wed 26 Jun 2024 16:53:35 +0000
ROA not before:           Wed 26 Jun 2024 16:48:35 +0000
ROA not after:            Wed 25 Jun 2025 16:53:35 +0000
asID:                     262828
IP address blocks:        186.251.96.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:83:d6:28:10:ac:4e:a7:93:26:76:66:31:83:7a:ed:96:4c:23:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B
        Validity
            Not Before: Jun 26 16:48:35 2024 GMT
            Not After : Jun 25 16:53:35 2025 GMT
        Subject: CN=9C51ADCFBE46AB50B9BA9E108FA6FB1BBC3EE9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:d1:58:01:c8:0a:67:1f:91:9f:2e:eb:65:
                    44:85:1e:3e:85:d7:41:19:23:07:e5:1d:cc:55:16:
                    64:1a:3d:f6:b1:42:05:4c:b9:41:d5:de:d0:ee:0a:
                    40:64:66:63:c3:38:ef:5c:91:02:f4:62:e6:d1:65:
                    b0:25:40:7d:0b:fb:5e:e8:be:9b:06:1c:6c:34:2b:
                    95:1a:1e:f5:df:a6:13:5c:80:fb:bc:95:d0:7e:9e:
                    4c:f2:b7:f4:99:0c:22:0c:39:86:be:d0:09:ca:0e:
                    2a:fb:05:2e:a9:c3:c8:02:c4:92:fc:4f:61:0b:3d:
                    db:ca:15:39:49:da:66:ac:8c:e5:aa:f6:d2:71:c3:
                    0a:8b:12:67:26:39:0c:05:04:01:68:a9:9c:f3:45:
                    10:60:de:b3:2a:14:90:66:27:c2:5a:db:f1:62:85:
                    3b:76:1c:4a:8a:97:a8:d6:a5:b8:07:01:0f:82:0b:
                    64:a1:c9:cc:39:b6:7c:65:e5:01:a7:23:d1:c5:62:
                    48:df:48:1f:31:65:5f:6b:5d:ae:fd:87:ed:5d:65:
                    e7:b0:4d:85:07:0e:62:d8:c5:0c:2d:ec:23:6c:1b:
                    35:53:d8:31:5c:de:0f:23:a2:97:b2:3b:f9:b2:65:
                    59:c3:b8:97:68:4e:81:50:c4:a1:a1:9f:8b:fe:8e:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:51:AD:CF:BE:46:AB:50:B9:BA:9E:10:8F:A6:FB:1B:BC:3E:E9:FE
            X509v3 Authority Key Identifier:
                keyid:FD:72:CD:09:16:1D:DF:12:B1:EC:EF:73:71:C9:D5:1F:0C:B8:07:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD72CD09161DDF12B1ECEF7371C9D51F0CB8076B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:87:80:9a:eb:4c:ba:7c:3b:6c:a3:30:14:67:f2:dd:36:fc:
         50:40:87:33:c1:d0:e9:8f:d5:ca:ae:12:7f:c7:61:c5:41:52:
         19:62:89:85:74:5b:a9:27:14:81:96:ba:0b:97:e7:87:82:48:
         d5:29:94:39:92:c2:ad:2a:8c:c1:42:aa:cb:bc:32:e2:a5:12:
         90:72:92:e9:4a:f2:f0:ee:db:8f:e0:f3:be:b4:d7:a3:6e:a8:
         36:3a:fa:a1:8e:ab:f4:de:31:f7:71:58:b9:fd:ec:6a:36:fb:
         80:b5:9d:d8:1f:62:45:44:de:a0:c3:91:ab:5f:86:06:09:bd:
         ed:47:50:c6:af:8a:ae:b0:28:24:67:53:61:07:1a:da:41:98:
         15:a9:86:db:81:37:64:0b:c9:55:ec:37:f1:90:a7:69:41:41:
         5f:25:f7:fc:60:e9:ae:e5:f9:c7:11:e1:2b:1e:e5:cf:3d:24:
         d3:93:6c:f0:15:40:d9:46:6f:49:00:d5:4b:cf:56:61:c4:4d:
         3c:d8:1e:cb:cb:5b:82:7b:99:c9:dd:0d:be:52:0d:22:ff:4b:
         be:c0:6f:e5:da:37:55:65:c7:3f:e1:68:b1:f8:61:05:bb:3a:
         39:8c:ac:14:9f:03:93:06:77:00:88:9a:3f:9d:2d:32:5b:5b:
         e9:f0:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 00:01:37 2024 by rpki-client on console-fra.rpki-client.org