Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa
File:                     3133382e3132312e36382e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          nGrN+zg0v/xS4jPNBIZbkRertg93Kl323yxLWE+rEAA=
Subject key identifier:   B8:29:DC:38:D2:2C:DF:0A:36:53:74:E2:FA:99:BF:D8:23:87:B6:2D
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       163DE8F70EA92776718C78E3B79DF53F338E9F9C
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        138.121.68.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3d:e8:f7:0e:a9:27:76:71:8c:78:e3:b7:9d:f5:3f:33:8e:9f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=B829DC38D22CDF0A365374E2FA99BFD82387B62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:89:12:70:08:19:7f:ab:aa:ff:b1:6f:cd:
                    52:11:c1:2a:6b:37:a6:81:b8:54:b5:ea:cd:ed:56:
                    63:b9:63:54:92:30:67:f7:e6:d5:af:7a:02:73:f6:
                    97:8b:01:56:06:f6:6f:cc:fa:9c:fe:f4:0d:a9:16:
                    49:e9:f7:d4:9c:ba:bf:0e:9c:bc:d2:4d:7b:5e:74:
                    fa:f0:d6:5f:b8:8b:bc:28:6a:3c:d9:8c:20:7b:1c:
                    38:d7:3f:c4:b3:b8:68:61:f4:ae:94:b4:b6:51:32:
                    bd:2c:13:51:8e:ed:1c:8e:d1:90:73:24:43:5f:e5:
                    bd:d1:31:b2:b8:a8:81:0c:5c:c2:85:6e:da:5b:86:
                    48:39:41:2a:03:58:dd:14:e5:63:57:75:43:92:5a:
                    25:b4:fa:63:ca:26:ed:50:c5:3c:03:c8:0d:6e:69:
                    04:a1:d6:0f:a0:c8:2d:0c:25:00:9b:06:7c:38:3b:
                    24:45:9d:50:8d:29:0a:70:9a:10:13:83:86:e5:ff:
                    bf:18:fa:37:be:3e:99:28:bb:92:52:64:a4:d5:8d:
                    4e:ee:6a:2f:dc:b1:f5:7b:89:0f:cb:1e:7e:b5:4f:
                    71:18:1f:2d:5b:9c:fd:21:dc:ec:b6:dc:27:5f:f5:
                    30:83:49:9a:e0:99:53:a8:94:03:d6:1a:52:88:c1:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:29:DC:38:D2:2C:DF:0A:36:53:74:E2:FA:99:BF:D8:23:87:B6:2D
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:da:f9:35:d3:cf:4a:24:c5:ce:14:c8:c6:63:af:45:8b:e0:
         eb:6f:8d:69:73:d2:e7:51:e7:b1:b2:0b:c9:c0:04:65:54:24:
         41:4a:a9:76:3b:c4:6a:ac:ca:2e:2a:d4:04:e2:b0:9a:9f:aa:
         49:78:af:9a:c7:14:96:5a:88:3e:c6:61:22:7d:97:31:72:31:
         73:26:21:ad:7b:6d:1c:58:24:17:27:13:eb:84:61:e8:8b:db:
         a0:0f:3d:b9:09:a9:ba:24:84:77:62:51:1b:d0:0c:36:af:bf:
         84:bf:6d:04:2e:3d:42:f2:b2:f9:d4:5e:aa:02:38:27:98:42:
         e7:a0:ae:77:c4:86:92:e8:bb:bc:f7:e0:e9:8a:72:58:1a:cf:
         1f:f3:fe:02:87:75:1e:39:7d:66:c0:9d:e3:78:a9:fb:a8:c2:
         a9:2f:4d:76:d2:9b:6f:aa:a0:ee:0f:56:ff:24:c0:a8:0b:50:
         be:f8:e0:9f:db:04:64:8b:39:c3:08:70:de:1a:68:be:cc:22:
         d6:d8:d1:93:40:3e:80:6f:d1:6f:0e:38:6e:c1:7a:4d:68:8d:
         67:00:6e:e3:2f:be:ee:8e:1c:b2:3b:aa:1d:96:36:64:8a:73:
         cf:7d:c0:7d:3d:f0:40:99:dc:d4:e1:dd:14:9c:2c:84:fe:42:
         a2:98:4d:d4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFj3o9w6pJ3ZxjHjjt531PzOOn5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDJaFw0yNTA4MDcwMzA5MDJaMDMxMTAvBgNV
BAMTKEI4MjlEQzM4RDIyQ0RGMEEzNjUzNzRFMkZBOTlCRkQ4MjM4N0I2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YokScAgZf6uq/7FvzVIRwSpr
N6aBuFS16s3tVmO5Y1SSMGf35tWvegJz9peLAVYG9m/M+pz+9A2pFknp99Scur8O
nLzSTXtedPrw1l+4i7woajzZjCB7HDjXP8SzuGhh9K6UtLZRMr0sE1GO7RyO0ZBz
JENf5b3RMbK4qIEMXMKFbtpbhkg5QSoDWN0U5WNXdUOSWiW0+mPKJu1QxTwDyA1u
aQSh1g+gyC0MJQCbBnw4OyRFnVCNKQpwmhATg4bl/78Y+je+Ppkou5JSZKTVjU7u
ai/csfV7iQ/LHn61T3EYHy1bnP0h3Oy23Cdf9TCDSZrgmVOolAPWGlKIwW6nAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuCncONIs3wo2U3Ti+pm/2COHti0wHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzEzMzM4MmUzMTMyMzEyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMTM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAop5RDANBgkqhkiG9w0BAQsFAAOCAQEAUtr5NdPPSiTF
zhTIxmOvRYvg62+NaXPS51HnsbILycAEZVQkQUqpdjvEaqzKLirUBOKwmp+qSXiv
mscUllqIPsZhIn2XMXIxcyYhrXttHFgkFycT64Rh6IvboA89uQmpuiSEd2JRG9AM
Nq+/hL9tBC49QvKy+dReqgI4J5hC56Cud8SGkui7vPfg6YpyWBrPH/P+Aod1Hjl9
ZsCd43ip+6jCqS9NdtKbb6qg7g9W/yTAqAtQvvjgn9sEZIs5wwhw3hpovswi1tjR
k0A+gG/Rbw44bsF6TWiNZwBu4y++7o4csjuqHZY2ZIpzz33AfT3wQJnc1OHdFJws
hP5CophN1A==
-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org