Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32332d3233203d3e20323639303936.roa
File:                     3138362e3233322e38382e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          25Yi1boSlo8hZQ47t2pltwI6DlBDqQYy+xMZUadJkgw=
Subject key identifier:   4C:28:98:BD:AB:5F:C9:7E:0F:02:F4:CB:D9:87:6C:6D:27:C6:47:B8
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       042FB91B4EBB6F5260AD80C32C4CDC90357C0479
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32332d3233203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:42 +0000
ROA not before:           Mon 29 Jul 2024 15:47:42 +0000
ROA not after:            Mon 28 Jul 2025 15:52:42 +0000
asID:                     269096
IP address blocks:        186.232.88.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2f:b9:1b:4e:bb:6f:52:60:ad:80:c3:2c:4c:dc:90:35:7c:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:42 2024 GMT
            Not After : Jul 28 15:52:42 2025 GMT
        Subject: CN=4C2898BDAB5FC97E0F02F4CBD9876C6D27C647B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:b4:18:17:7d:be:2d:c3:85:75:a0:66:2f:
                    7e:c6:b4:6d:24:6b:f2:8d:0d:93:ca:0b:21:51:91:
                    e7:d5:b9:db:22:32:2a:cb:ca:ea:3d:41:74:87:7a:
                    e7:9b:23:b2:1d:11:4e:c7:4a:62:2f:b3:27:e3:9d:
                    01:d1:8c:b3:06:0f:9d:bd:ed:21:6d:3b:bd:50:7d:
                    07:88:a1:e1:db:83:8a:5a:ed:04:3c:ca:71:57:0e:
                    ab:2d:d5:e4:10:6b:73:b4:27:4a:3a:01:e3:55:3e:
                    a6:82:cd:6c:cf:52:7f:f8:52:f9:73:b6:c5:ae:cf:
                    54:40:5b:fb:e6:73:2d:a3:21:30:6a:97:60:eb:9b:
                    9f:38:ca:99:7f:98:30:de:c9:dc:ec:b0:a1:74:59:
                    ec:36:ea:a1:3f:f4:93:10:5e:f4:5e:b7:0f:84:91:
                    27:84:a3:9d:4f:3d:e0:e7:4c:9d:6f:59:49:59:a1:
                    fb:4a:ba:1c:af:d4:3d:1a:b1:5d:8c:70:d5:69:ab:
                    1f:fd:67:73:d2:58:2e:1b:4e:ae:71:cc:97:94:bb:
                    4f:4b:43:fc:5d:46:81:63:02:61:10:20:10:cc:44:
                    85:35:ac:7c:3b:36:a2:ac:61:3c:4a:c8:a0:4e:c8:
                    5f:65:48:95:5c:f4:05:1c:5e:00:02:62:8a:ed:4f:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:28:98:BD:AB:5F:C9:7E:0F:02:F4:CB:D9:87:6C:6D:27:C6:47:B8
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:76:b3:26:f0:37:51:ab:0c:8d:ab:c3:ed:df:2a:36:36:a9:
         1b:27:e3:42:fe:12:33:85:ad:4e:cc:63:48:c5:17:ad:41:81:
         e4:74:eb:7e:be:ec:53:2f:70:a7:bc:d3:4f:ec:ee:0c:14:ca:
         aa:7b:c4:35:3d:66:ca:fa:1c:e9:c0:e0:57:a1:a5:b5:c4:17:
         2a:5e:42:12:04:e2:7b:5b:d0:e9:47:b5:0d:ba:23:1e:3e:c8:
         12:f4:17:e5:7f:3d:ee:60:2d:ca:79:94:12:56:c1:3c:97:9f:
         93:e6:34:d6:59:ba:98:6e:c8:d8:a6:3b:ab:b6:43:d0:60:9b:
         21:4c:62:88:7f:7f:0a:8d:5a:16:0f:b5:93:5a:2c:2e:ba:b5:
         ba:bd:fe:e4:00:24:01:3b:3c:46:9b:93:27:c8:cf:ba:92:ca:
         c7:c4:54:28:a6:4c:c1:9b:27:c7:a5:9f:c7:84:a5:3c:e2:be:
         81:dd:26:21:cf:41:d7:3f:9b:fc:57:6f:29:38:6e:d1:6e:cd:
         5b:57:21:10:9a:2f:6c:7b:a4:1d:ec:0a:15:f3:87:ae:4f:de:
         4a:31:17:d7:97:2f:08:d6:6d:8c:84:78:1f:c1:3a:57:46:c8:
         a7:5a:8a:a4:9f:4b:43:68:a3:96:aa:4d:d3:06:c5:45:35:e6:
         b3:43:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org