Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e322e302f32342d3234203d3e20323633393530.roa
File:                     3133382e3235352e322e302f32342d3234203d3e20323633393530.roa (raw, json)
Hash identifier:          CEdnSAEH/4Ufr5YYVtCGQSbCqNGU1DD5n2H2l53awVQ=
Subject key identifier:   64:E3:1D:36:99:A2:3E:C1:E1:03:35:D5:5A:86:61:B3:A4:F1:0D:C3
Certificate issuer:       /CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
Certificate serial:       11DFE714E1A96BAC6B6D396B69D468BD2AFF503E
Authority key identifier: FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e322e302f32342d3234203d3e20323633393530.roa
Signing time:             Thu 04 Apr 2024 04:42:24 +0000
ROA not before:           Thu 04 Apr 2024 04:37:24 +0000
ROA not after:            Thu 03 Apr 2025 04:42:24 +0000
asID:                     263950
IP address blocks:        138.255.2.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:df:e7:14:e1:a9:6b:ac:6b:6d:39:6b:69:d4:68:bd:2a:ff:50:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
        Validity
            Not Before: Apr  4 04:37:24 2024 GMT
            Not After : Apr  3 04:42:24 2025 GMT
        Subject: CN=64E31D3699A23EC1E10335D55A8661B3A4F10DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:bb:32:dc:9e:00:c9:62:2c:82:1e:34:d7:
                    36:f9:bb:ee:17:df:08:b8:d6:46:96:c2:93:47:e5:
                    86:4c:01:09:43:7a:61:c5:81:6b:80:f2:b4:cf:e7:
                    39:c0:59:04:a3:50:6a:29:71:45:14:88:c2:10:80:
                    56:58:59:23:7e:9f:30:76:62:1f:90:69:a6:4a:8a:
                    96:6e:15:61:93:07:e4:76:c3:72:93:80:f5:05:97:
                    a3:37:9e:35:7e:8a:07:e8:a6:10:24:e8:ed:4c:72:
                    88:78:f1:7f:07:6e:97:45:bd:15:c8:5d:f7:2d:db:
                    ad:79:8c:93:3b:fd:d4:02:07:ec:82:d6:10:88:5d:
                    95:e2:0e:6b:be:87:11:d6:52:c0:42:73:77:35:10:
                    e3:88:8a:68:6b:0c:64:e0:7a:8f:91:db:14:63:9c:
                    5e:8e:b2:7a:ab:a4:78:24:24:a7:05:53:40:d8:bd:
                    01:23:b7:e9:99:b5:e1:0a:ca:5e:e3:41:4a:4f:b9:
                    c7:7d:b6:ff:bf:ec:dd:a9:08:5b:e3:29:47:04:1c:
                    0a:21:cb:1f:ff:1c:86:b2:44:39:94:a6:03:cb:1f:
                    59:59:b9:91:f5:3f:23:c6:98:2f:7f:ac:80:3b:1f:
                    3e:d0:3c:40:8d:95:78:63:02:52:db:24:13:c4:c0:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E3:1D:36:99:A2:3E:C1:E1:03:35:D5:5A:86:61:B3:A4:F1:0D:C3
            X509v3 Authority Key Identifier:
                keyid:FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e322e302f32342d3234203d3e20323633393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:07:b1:d9:3f:6b:4f:8c:b8:ef:be:08:b9:fd:ab:e1:60:
         95:e0:98:e3:ab:82:a3:21:0c:c4:c5:ca:cf:94:aa:1d:b7:30:
         62:8f:9b:ed:e9:ef:6a:fa:58:82:7a:44:1a:e1:78:e2:37:a7:
         55:78:db:64:69:96:94:15:73:75:51:f8:7f:67:e7:87:25:a2:
         51:fd:3a:d2:3b:32:61:75:f7:f5:fe:c7:2b:2e:49:23:63:47:
         26:e2:d2:f2:3f:64:7f:89:d0:1e:01:7b:72:ec:88:f9:21:4e:
         ab:24:44:35:5e:8e:bc:09:64:fc:42:5f:ee:61:71:df:d3:91:
         3f:f3:6c:d3:9e:61:97:3d:71:e4:ab:84:7b:d9:6b:67:38:0c:
         0f:8b:10:bc:3b:59:a4:e1:e2:2c:04:78:4e:73:95:e7:0f:e2:
         19:d6:07:a7:07:80:cc:49:77:47:48:e8:8d:14:b5:42:a9:d0:
         fc:0d:b5:9f:1b:1d:2f:5e:ab:33:2d:ce:23:f4:74:cb:c9:46:
         56:b0:6f:c4:d6:d6:25:be:16:01:80:e6:e6:fe:9f:49:e5:d5:
         17:8b:4a:a7:5b:b7:df:51:85:07:98:1b:d0:b2:19:8a:85:a9:
         e4:77:5e:53:4a:6a:f6:1a:e8:de:f8:f8:4e:1b:58:46:35:19:
         ab:6a:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 04:08:53 2024 by rpki-client on console-ams.rpki-client.org