Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39322e302f32332d3233203d3e20323639303936.roa
File:                     3138362e3233322e39322e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          sgsjDkEhrGJHjuzdL0SXaVDiymIgJ8Z8ZHbj5frsSNQ=
Subject key identifier:   17:C6:87:DC:D6:44:F1:3B:A4:FF:7A:E4:19:32:0B:40:01:5B:D1:FE
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       28B4C78873BAC3A53C2F8A378DE034F1823920FA
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39322e302f32332d3233203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:44 +0000
ROA not before:           Mon 29 Jul 2024 15:47:44 +0000
ROA not after:            Mon 28 Jul 2025 15:52:44 +0000
asID:                     269096
IP address blocks:        186.232.92.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b4:c7:88:73:ba:c3:a5:3c:2f:8a:37:8d:e0:34:f1:82:39:20:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:44 2024 GMT
            Not After : Jul 28 15:52:44 2025 GMT
        Subject: CN=17C687DCD644F13BA4FF7AE419320B40015BD1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:6f:7a:62:66:d4:c1:71:de:20:19:46:39:
                    76:84:2b:a2:40:8a:13:75:db:52:60:e1:54:cf:9a:
                    57:33:6c:e1:98:97:06:33:f5:52:e6:2a:81:50:89:
                    d6:d0:55:82:1e:c7:2e:eb:66:92:c3:1e:22:87:ce:
                    84:a9:16:7e:9a:c3:05:21:b8:18:be:6a:70:c1:2a:
                    43:b7:d0:77:e2:5b:a1:e2:1d:59:a0:eb:78:61:fc:
                    a1:24:ae:3a:a4:aa:c7:6d:88:1d:6c:a2:53:a1:e3:
                    0e:e7:4b:00:34:77:d0:5a:ca:c8:08:2c:f7:da:89:
                    53:fe:0b:c3:bd:93:65:d1:4e:89:02:6d:18:ba:a1:
                    20:3d:a3:0a:ce:f6:c5:77:de:92:9a:b3:3c:1e:af:
                    f9:9a:26:e1:fb:94:2e:dd:d1:4d:9f:9d:51:67:63:
                    86:bc:a0:e7:99:d1:98:99:d5:ae:5c:84:98:e5:22:
                    f0:e2:70:bf:83:d9:ec:9f:bf:9a:b3:69:e8:e9:c2:
                    a3:f0:6b:2f:a6:c5:1b:f2:cc:ae:ac:74:8b:bd:2a:
                    1f:b2:b1:c1:bb:93:e6:a2:85:33:43:81:7f:e9:bd:
                    60:80:29:cf:22:7b:1c:01:56:da:e1:ae:ac:de:17:
                    c6:8d:99:14:8a:ea:1d:7d:2a:dd:e1:07:73:06:db:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C6:87:DC:D6:44:F1:3B:A4:FF:7A:E4:19:32:0B:40:01:5B:D1:FE
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39322e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:53:8d:0a:6e:82:3f:da:bd:64:a2:61:6a:37:83:7f:54:57:
         83:50:59:18:fd:fd:77:5e:2f:f5:96:00:90:ba:09:1d:80:b4:
         10:af:60:09:1e:4b:59:52:cf:46:5c:16:88:46:02:e2:02:8f:
         72:0f:e3:b9:35:64:49:cd:db:eb:c1:19:2a:29:7a:61:0d:71:
         72:33:3e:a9:e2:79:c0:c1:e4:42:bf:ae:d8:b9:cc:b6:aa:90:
         ac:74:99:c7:8c:08:b0:55:58:e6:58:93:26:36:01:f1:50:90:
         69:d6:bb:91:8a:fe:5c:eb:97:3d:73:29:75:a4:6e:33:62:1a:
         15:8f:6e:55:e1:18:8b:a6:79:81:4d:12:00:13:09:1f:ca:b1:
         48:b8:0a:ef:3c:30:d5:09:f8:cc:34:89:c7:9e:29:cf:bf:c0:
         2d:f0:76:c2:49:f8:aa:42:08:1b:46:b2:88:9d:41:17:bc:fe:
         5f:24:8a:c4:99:f7:f1:e7:ec:5c:45:e2:4d:2b:26:55:06:58:
         3a:c1:0f:f6:4f:c0:c6:2f:f5:b7:c0:17:2e:33:2a:ef:ae:07:
         40:9f:3f:0e:68:62:73:03:1e:28:e8:26:0e:6a:8a:37:85:d9:
         4a:1e:0f:6f:26:34:c8:98:02:c0:74:6d:39:6c:ed:b2:0e:1c:
         31:84:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org