Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa
File:                     3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          wetxq7OnKu8ESdGP16R/sKbB898vf35pjjOJDU1RlhY=
Subject key identifier:   5C:7D:CF:09:33:CC:D9:B3:92:1D:90:8E:C2:34:E4:A8:DC:B3:71:35
Certificate issuer:       /CN=4A37933AEC7393FFCE6E23DD1727255F75948217
Certificate serial:       158AB7E01DD4F4DB2FA2D2D0727CBA7922C6EDB9
Authority key identifier: 4A:37:93:3A:EC:73:93:FF:CE:6E:23:DD:17:27:25:5F:75:94:82:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A37933AEC7393FFCE6E23DD1727255F75948217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa
Signing time:             Tue 27 Jun 2023 20:46:19 +0000
ROA not before:           Tue 27 Jun 2023 20:41:19 +0000
ROA not after:            Tue 25 Jun 2024 20:46:19 +0000
asID:                     262316
IP address blocks:        138.117.192.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8a:b7:e0:1d:d4:f4:db:2f:a2:d2:d0:72:7c:ba:79:22:c6:ed:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A37933AEC7393FFCE6E23DD1727255F75948217
        Validity
            Not Before: Jun 27 20:41:19 2023 GMT
            Not After : Jun 25 20:46:19 2024 GMT
        Subject: CN=5C7DCF0933CCD9B3921D908EC234E4A8DCB37135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:d4:02:74:96:7c:69:a5:6e:ce:1f:49:57:
                    61:d7:b1:a2:4c:ca:dc:cb:89:84:d8:d9:77:87:4b:
                    05:fe:c9:bf:e9:65:f1:da:49:f1:92:ec:f8:70:8d:
                    16:e9:68:c2:de:db:dd:4a:91:c8:af:e9:66:48:08:
                    2d:eb:30:ea:3b:ed:97:1c:48:19:4e:44:3d:d7:14:
                    4b:33:04:3a:de:b8:8e:41:d6:61:ad:b2:ef:40:3c:
                    42:46:3e:72:91:61:ae:f8:1a:e7:ff:5a:a8:2f:b1:
                    2a:15:fd:8e:c1:59:7f:72:dc:54:00:7c:97:22:62:
                    96:a3:66:68:6a:13:2f:f9:8b:f1:d2:bc:ab:e6:15:
                    74:0d:db:df:31:8b:2c:7a:f9:02:c5:a3:10:eb:a9:
                    7b:2c:6b:fd:0f:95:61:90:e2:ba:6c:4b:77:f8:14:
                    7c:a3:b7:7a:e6:9e:97:31:4a:9b:e9:1c:61:55:c6:
                    ea:19:7f:73:53:3b:72:69:c6:ee:56:82:8b:19:f0:
                    d2:7a:ec:bc:df:94:56:66:e2:6e:20:44:52:b1:2c:
                    05:63:72:28:bb:c4:83:dd:c6:dc:ca:f8:ca:72:cb:
                    7b:62:43:c3:87:af:83:68:9f:35:88:6c:17:9a:0e:
                    79:f2:26:e6:76:8f:06:74:7d:f3:95:a0:d1:69:a4:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:CF:09:33:CC:D9:B3:92:1D:90:8E:C2:34:E4:A8:DC:B3:71:35
            X509v3 Authority Key Identifier:
                keyid:4A:37:93:3A:EC:73:93:FF:CE:6E:23:DD:17:27:25:5F:75:94:82:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/4A37933AEC7393FFCE6E23DD1727255F75948217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A37933AEC7393FFCE6E23DD1727255F75948217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:8c:fb:d5:ea:f0:d0:33:59:a0:11:5c:63:be:86:ae:52:9d:
         b8:29:a6:b3:b9:81:e5:25:7d:2e:be:04:06:9f:dc:a8:70:ca:
         63:28:ac:61:e1:9b:ef:31:b0:f5:1e:35:44:86:07:b9:5e:ca:
         bd:48:65:a5:60:9d:09:84:0f:3a:12:2f:59:76:9b:72:0d:1d:
         b5:f9:30:10:f9:dd:e0:4a:e2:8d:a7:9f:03:10:da:86:f5:8c:
         e3:73:02:d5:c9:57:c2:e1:54:dc:22:6b:03:8b:c1:72:28:89:
         55:79:e4:41:5b:f0:f9:bc:08:d4:c2:4b:af:93:bc:de:c5:1e:
         85:10:bd:fb:15:b2:db:c2:76:da:c6:9f:95:f1:5f:08:e1:57:
         f9:60:ca:5b:f6:e0:2e:c6:18:98:8c:23:90:07:1c:7f:e7:bd:
         2b:e4:3f:00:44:df:85:79:16:ab:86:8b:21:19:01:b9:b7:f0:
         1d:58:be:d3:4a:3c:0d:48:8e:a7:62:86:ea:7f:a5:8b:91:d8:
         9a:4f:fd:5a:d9:a1:6c:c3:66:de:1a:23:80:5d:5e:f0:7a:1e:
         af:97:14:aa:58:c2:91:f2:e7:8c:dc:22:fe:cb:07:31:ba:03:
         40:4e:8e:71:d8:3d:3e:3a:e1:50:e1:ab:01:c8:43:32:e7:d6:
         35:1f:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 07:49:35 2023 by rpki-client on console-fra.rpki-client.org