Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa
File:                     3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          LL6vSlXWm3a0lU/TDwzcZJVlN7woVxjOcg2w1d0L+Uw=
Subject key identifier:   13:04:7E:BE:06:30:9A:BE:D3:D2:0D:1C:F9:9C:19:98:62:E4:5B:C8
Certificate issuer:       /CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
Certificate serial:       3F57F563705DC9B6BB364FE7B7A3969E6F2BE572
Authority key identifier: EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa
Signing time:             Tue 03 Sep 2024 13:28:28 +0000
ROA not before:           Tue 03 Sep 2024 13:23:28 +0000
ROA not after:            Tue 02 Sep 2025 13:28:28 +0000
asID:                     267420
IP address blocks:        186.209.222.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:57:f5:63:70:5d:c9:b6:bb:36:4f:e7:b7:a3:96:9e:6f:2b:e5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
        Validity
            Not Before: Sep  3 13:23:28 2024 GMT
            Not After : Sep  2 13:28:28 2025 GMT
        Subject: CN=13047EBE06309ABED3D20D1CF99C199862E45BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:49:a0:1a:89:63:a5:26:31:0e:ea:29:76:
                    d0:50:b6:5b:9b:2e:67:ee:d1:d4:c8:4f:ec:37:81:
                    79:02:76:41:a6:7c:8e:5b:7e:81:47:0c:91:5d:b5:
                    7e:33:50:43:1d:df:1e:ce:ec:47:0f:69:84:9e:3f:
                    1f:91:cb:83:e0:52:e6:12:6e:91:90:59:28:28:c7:
                    9a:ce:5a:bb:ce:73:95:02:0b:35:4d:2a:ee:20:94:
                    4d:99:fb:ea:a9:88:08:35:69:56:35:77:c5:a0:47:
                    6e:96:0b:a2:6f:0b:67:af:fb:e5:35:e6:1c:e7:00:
                    cf:77:76:bc:38:ea:33:eb:39:d2:d0:32:29:14:02:
                    ce:51:2a:e8:95:0f:5b:85:e0:fd:f0:7f:35:d3:37:
                    17:31:fc:8d:a5:c7:5f:ae:97:1e:15:33:66:a9:bf:
                    67:5a:7d:0f:fd:29:36:63:be:e5:5b:1a:cd:96:cf:
                    f1:10:5d:80:6f:a6:d4:3d:79:af:b9:2f:19:db:14:
                    4a:72:c5:ad:20:8c:fe:61:c8:8a:64:13:a7:43:89:
                    36:a5:66:a1:53:2c:7d:c7:9f:5d:ce:71:6e:24:11:
                    bd:08:eb:c7:1b:8e:21:6c:ef:ef:4f:82:0d:b2:87:
                    cf:ed:09:a2:a0:07:b1:4f:5a:d0:02:eb:c9:9c:84:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:04:7E:BE:06:30:9A:BE:D3:D2:0D:1C:F9:9C:19:98:62:E4:5B:C8
            X509v3 Authority Key Identifier:
                keyid:EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:ed:7e:8e:eb:98:11:d7:37:ca:a3:da:54:d9:c7:44:03:
         ef:72:84:ee:3c:51:1f:d7:a2:97:7b:b9:7b:64:b2:9f:f4:4e:
         7e:65:01:78:69:20:1c:a2:0d:31:d2:6e:c1:31:fd:91:b6:4f:
         e1:65:1d:63:59:43:4a:be:d5:46:4c:b9:12:c1:3f:7b:5c:62:
         fd:2e:99:a2:a7:ef:4d:6f:10:eb:b6:62:46:8f:29:2e:1f:64:
         27:31:64:a0:b1:8d:55:94:3f:e0:68:7f:65:29:76:ba:f3:98:
         8f:5d:a8:15:f0:1f:f2:bc:c3:78:a3:0c:9f:34:45:2e:98:ee:
         c2:36:7d:8d:66:4f:1c:fe:f1:d8:80:ef:19:20:aa:e3:3a:08:
         a6:aa:82:2d:fe:6f:a7:5b:48:88:cd:1d:33:c1:10:1b:c8:e9:
         e9:82:46:3d:bb:75:9e:72:db:09:7e:33:29:02:74:99:25:97:
         ab:21:ee:23:77:a5:b8:57:bc:47:a1:03:46:55:93:ea:1d:29:
         cb:0e:45:5b:d4:b2:d4:e4:7f:ad:9d:9b:f7:aa:bf:cc:e1:04:
         d7:cc:7b:3a:c8:f4:51:8c:9e:bc:22:68:3b:d0:b4:3e:c9:1e:
         5c:a7:52:f0:bf:81:27:c4:c9:8c:67:d0:38:76:fc:fb:34:93:
         f8:68:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 13:33:04 2024 by rpki-client on console-fra.rpki-client.org