Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39342e302f32332d3233203d3e20323639303936.roa
File:                     3138362e3233322e39342e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          t1Z3l7U+9334SNqnW8nti3tNZ1YPf4hcpjB+Sv3tlgY=
Subject key identifier:   52:49:81:85:F1:35:AE:50:BF:C5:69:EC:FA:BB:1D:4B:B1:7F:EF:40
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       3A6796BDA9F1BD72E1ADC40367E4455FE00909FA
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39342e302f32332d3233203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:43 +0000
ROA not before:           Mon 29 Jul 2024 15:47:43 +0000
ROA not after:            Mon 28 Jul 2025 15:52:43 +0000
asID:                     269096
IP address blocks:        186.232.94.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:67:96:bd:a9:f1:bd:72:e1:ad:c4:03:67:e4:45:5f:e0:09:09:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:43 2024 GMT
            Not After : Jul 28 15:52:43 2025 GMT
        Subject: CN=52498185F135AE50BFC569ECFABB1D4BB17FEF40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:16:7d:6a:f3:68:0e:4b:ed:df:dc:64:73:
                    5a:9c:dd:f5:a2:c0:e5:59:26:47:65:9a:b5:55:0c:
                    87:1b:a1:9b:1c:87:61:a1:59:b9:6b:93:5a:45:9f:
                    4b:95:bb:aa:20:ce:6c:b1:56:44:58:33:b5:b1:c5:
                    5c:83:1a:5c:0b:12:87:e9:9e:e7:c7:3f:96:dd:a1:
                    8e:3e:79:2c:64:22:01:0f:29:77:3d:2a:7f:09:f1:
                    d9:76:33:24:b6:0e:b8:5d:89:17:1b:0c:26:e2:d7:
                    34:0c:bd:59:76:16:a3:29:5e:4f:e1:7b:71:0e:5b:
                    26:c4:57:80:09:31:cf:72:71:d0:93:60:4f:04:12:
                    2d:cf:4b:d7:9f:62:b4:e6:7f:b0:59:0f:6c:3e:6c:
                    93:b7:e6:45:e9:02:07:13:27:e4:ad:53:18:ee:18:
                    01:39:0f:55:26:7d:41:03:d6:97:13:df:76:ee:d3:
                    6c:2a:2f:1a:04:01:2b:44:c2:23:c7:1c:4b:01:94:
                    15:94:3d:6e:62:b0:57:5e:2d:95:02:35:79:a9:9a:
                    8b:78:64:00:26:b4:4b:98:9d:8b:40:67:60:a6:07:
                    67:95:29:7a:88:a9:88:33:de:21:8e:d0:24:01:53:
                    f6:09:e5:f6:95:e5:44:25:bc:29:59:f4:2e:d2:7a:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:81:85:F1:35:AE:50:BF:C5:69:EC:FA:BB:1D:4B:B1:7F:EF:40
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e39342e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:03:14:20:79:9b:8f:2c:a5:4c:69:91:2a:ad:c0:e2:d2:
         84:f1:d3:1d:19:79:15:d0:83:a7:c7:bc:31:7b:ad:6a:90:cc:
         05:8e:21:4f:5b:04:26:14:4e:dc:6b:80:6e:f4:35:24:6f:9e:
         6e:d2:c7:7e:cd:1a:95:5e:da:93:04:81:32:be:ba:3c:35:45:
         ba:80:94:21:a6:aa:58:13:7e:c7:51:4c:a7:c8:23:ff:09:04:
         3f:a5:97:95:d1:c1:8d:5f:18:15:d5:42:7d:13:53:5f:4c:d0:
         a1:06:db:ab:6d:b4:02:a5:eb:99:91:11:31:5a:e6:fe:35:20:
         e5:68:46:cf:d3:a6:d4:ba:6c:a6:67:0b:dd:ae:a7:0e:0b:b8:
         43:f0:30:1f:5c:d0:3a:9a:be:bb:c4:fa:fb:fd:12:5e:af:c1:
         eb:9e:88:2c:b7:e4:64:88:f3:0e:2b:8a:0a:92:ce:5e:43:18:
         e4:b6:a8:6c:52:6e:2f:da:1f:bd:ec:4f:56:f4:5f:d6:82:39:
         87:73:9a:37:ca:a6:7c:57:22:ff:cc:3b:93:08:8a:bb:62:e5:
         72:0f:be:7a:4c:b3:45:20:ed:a8:9e:57:e9:68:99:bd:66:6d:
         5c:39:e6:1f:76:95:92:c4:22:8d:ae:1e:5f:d8:dd:cf:2e:99:
         c0:00:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org