Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39302e302f32332d3233203d3e20323639303936.roa
File:                     3138362e3233322e39302e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          U0cVxHFDgFwR1xhyrSc5x6anftRYlX84EKWwtLxz3W0=
Subject key identifier:   F3:13:D0:6B:0B:21:8C:17:1C:24:17:A8:49:D5:59:B5:69:06:6B:00
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       7E24B6953251F3314CCC42D472EBB2E844592FD0
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39302e302f32332d3233203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:44 +0000
ROA not before:           Mon 29 Jul 2024 15:47:44 +0000
ROA not after:            Mon 28 Jul 2025 15:52:44 +0000
asID:                     269096
IP address blocks:        186.232.90.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:24:b6:95:32:51:f3:31:4c:cc:42:d4:72:eb:b2:e8:44:59:2f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:44 2024 GMT
            Not After : Jul 28 15:52:44 2025 GMT
        Subject: CN=F313D06B0B218C171C2417A849D559B569066B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:8d:b3:01:2e:0f:f9:2b:91:07:23:50:43:
                    42:20:b4:df:9a:0a:af:0d:7d:fa:da:1b:87:77:b4:
                    23:e5:7b:c2:1d:9f:8f:5e:d5:25:dd:38:84:04:74:
                    5f:bf:b9:3a:3b:6b:a4:34:de:d4:b9:f6:aa:f4:ef:
                    4b:f0:89:60:5c:01:2e:d9:ea:48:ef:98:c2:8e:3a:
                    f3:67:cc:91:f0:75:ee:b0:86:18:e6:b8:81:e9:a1:
                    03:36:fe:3e:41:8d:1f:d5:1e:ad:ba:86:97:89:4f:
                    d1:02:55:3a:8c:92:e1:8f:d2:76:b4:7e:44:3a:25:
                    5f:ba:f5:64:f1:6f:98:90:7f:ce:eb:b2:72:13:af:
                    89:d4:0d:09:97:35:02:7b:11:58:c5:9e:e2:8f:9d:
                    b9:63:b1:fd:d4:41:f7:35:2d:e3:4b:dd:41:a4:a6:
                    a3:c3:34:57:88:80:da:79:94:90:02:30:f0:75:07:
                    f8:ee:81:57:56:5c:c7:4d:44:75:53:8f:ec:17:93:
                    9b:11:cb:15:e5:d6:dd:7b:85:d6:68:8b:82:df:72:
                    4d:4a:48:e4:46:57:ef:1b:f8:99:2a:ab:7e:c7:9f:
                    ee:a4:cc:dd:03:a4:77:02:cb:dd:78:a4:e7:00:1d:
                    85:7a:96:68:a1:ae:78:c4:23:3a:e1:22:4d:f3:a5:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:13:D0:6B:0B:21:8C:17:1C:24:17:A8:49:D5:59:B5:69:06:6B:00
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39302e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:3f:bc:13:52:32:04:2d:3a:e1:9f:c0:86:74:16:61:16:
         5f:1d:a1:fb:d4:58:5e:32:2a:24:c1:dc:41:a6:77:d0:99:b0:
         40:76:fd:4c:33:33:3e:77:84:97:52:fa:8e:8b:ab:7a:45:b6:
         c7:67:e2:7f:91:f4:5f:01:3e:91:7d:1d:52:84:da:ff:8d:1f:
         b0:e7:95:ff:22:b7:10:fa:77:a4:c1:6f:b1:13:02:93:90:b4:
         54:7c:3c:64:7c:fa:3e:fc:5b:e5:24:77:4b:87:6d:97:b0:13:
         16:b2:05:1f:82:b1:6e:79:f5:cb:76:31:03:63:0c:b7:d0:06:
         62:a5:e0:72:56:96:f8:29:55:b6:45:2c:27:be:cb:76:96:d2:
         ad:50:44:4d:f4:06:92:00:06:f3:a6:5c:b8:7d:ca:c2:07:63:
         b1:0f:0b:e0:c0:3c:54:e2:9c:0b:98:a2:a6:4f:89:79:dc:53:
         40:c1:98:a9:5c:0d:14:15:28:eb:78:f9:c6:a6:f0:1a:3d:06:
         91:8e:03:83:d7:4b:6c:21:e1:ea:23:a6:9b:29:64:79:68:95:
         ba:40:17:67:d7:e9:b8:f7:9b:a1:84:bf:60:3a:03:e0:1a:4a:
         a2:53:c9:a0:16:86:8e:24:65:ba:25:bf:b8:8f:fd:a2:5f:16:
         bb:35:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org