Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa
File:                     3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          b5biv7c6j2ceH9/waGa2tsrsMCJVPA2xwydGfR1CoH0=
Subject key identifier:   4E:52:BC:75:E0:07:03:93:56:CB:D1:09:1D:02:D5:5C:8E:35:A1:55
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       257D01319F160FA742E994DA3B873B2990C00DB5
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa
Signing time:             Tue 04 Jun 2024 18:58:23 +0000
ROA not before:           Tue 04 Jun 2024 18:53:23 +0000
ROA not after:            Tue 03 Jun 2025 18:58:23 +0000
asID:                     267420
IP address blocks:        186.209.222.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7d:01:31:9f:16:0f:a7:42:e9:94:da:3b:87:3b:29:90:c0:0d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: Jun  4 18:53:23 2024 GMT
            Not After : Jun  3 18:58:23 2025 GMT
        Subject: CN=4E52BC75E007039356CBD1091D02D55C8E35A155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:bf:b6:80:58:d8:99:96:8e:b2:2b:f7:d2:
                    a8:df:91:48:a6:a4:01:79:67:72:0c:57:06:ad:70:
                    04:f7:b0:32:7e:b7:2b:49:21:2f:b4:c5:cf:02:92:
                    89:f4:a1:c7:25:eb:39:a6:bc:98:66:73:cb:9e:0a:
                    6b:ab:c2:0b:69:cf:85:7e:66:ee:65:ca:e1:24:81:
                    f6:af:b4:2c:92:92:de:43:37:38:82:cc:1b:f8:4b:
                    2b:2c:f4:d8:57:65:e5:2f:cc:85:08:8d:8f:16:dc:
                    5c:18:76:80:36:92:a8:d2:b1:e7:51:85:a4:c7:fd:
                    83:d0:22:4c:49:ab:e0:86:b0:1e:f6:ce:0a:ef:5f:
                    ec:e8:6e:db:22:5a:7a:f7:08:60:44:0e:32:a0:2f:
                    f6:2b:98:44:3e:b1:d3:59:4d:37:e3:4e:f7:6a:30:
                    93:cd:07:9c:f4:a2:5c:67:ea:ca:60:fb:86:45:2c:
                    26:4c:82:79:53:4c:e5:d8:90:ef:c1:d2:af:b8:6f:
                    c4:ac:1a:93:5c:14:05:75:b4:cd:3d:6e:8f:34:cd:
                    d1:77:eb:7b:20:d4:07:18:3f:ca:8d:49:da:2e:68:
                    7e:7b:96:6c:0f:b3:6e:f9:45:01:51:59:f0:59:e2:
                    f9:31:3f:d7:f5:da:4f:4e:01:5b:5c:03:cf:af:27:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:52:BC:75:E0:07:03:93:56:CB:D1:09:1D:02:D5:5C:8E:35:A1:55
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3138362e3230392e3232322e302f32332d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:7e:6a:57:de:a4:fd:ec:d9:8b:96:19:5f:70:d7:f1:01:f3:
         4b:37:df:a7:3c:e4:da:92:5a:bb:17:33:d1:59:be:e2:83:51:
         b5:24:d8:d7:53:fc:09:87:91:d7:6c:30:9e:e5:9f:84:b4:75:
         ca:be:67:56:b2:17:51:10:c5:74:1a:a4:01:d8:52:be:01:02:
         a0:3c:64:93:c0:23:09:4e:65:ad:c6:2b:e8:02:b3:90:fb:62:
         78:a0:cf:e9:dd:cb:34:29:34:be:79:27:bb:b3:5c:73:1c:9e:
         ad:27:34:76:7e:09:da:9b:6a:0e:8c:64:48:c2:ed:f5:c2:dd:
         95:32:16:4a:0f:24:cf:28:28:56:d0:3b:53:6e:81:12:f3:86:
         4c:37:e4:fc:e5:58:3f:a5:db:1c:fc:fd:78:0c:e9:36:5c:75:
         83:cc:c8:41:7e:8e:ee:a6:df:f1:b2:04:9c:a2:d3:c7:ff:c3:
         b7:1f:ed:69:e2:7b:5e:eb:f9:fb:d4:bb:17:02:0a:b3:54:60:
         ae:30:0f:23:69:2c:01:b5:a0:4d:f6:87:67:a2:bc:14:88:99:
         f5:ad:62:a6:f4:13:aa:af:b7:3c:c6:35:95:12:84:5e:5d:33:
         1b:46:07:38:03:a6:79:e1:02:76:a5:6e:b5:85:6e:be:29:f0:
         76:32:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:05 2024 by rpki-client on console-fra.rpki-client.org