Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3234203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32322d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          GZTkwBXSqiMb/KlhzDu/6ie1WdqMur1rGgFpXKJk7Gw=
Subject key identifier:   7D:DD:DD:EA:5E:63:33:D1:86:D5:83:6E:D4:8C:E3:CC:0B:FD:D5:8A
Certificate issuer:       /CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
Certificate serial:       2A0E3061A7414E45E216D81C04A73E307C178524
Authority key identifier: 48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3234203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:19 +0000
ROA not before:           Wed 10 Apr 2024 00:15:19 +0000
ROA not after:            Wed 09 Apr 2025 00:20:19 +0000
asID:                     264550
IP address blocks:        138.0.136.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0e:30:61:a7:41:4e:45:e2:16:d8:1c:04:a7:3e:30:7c:17:85:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC
        Validity
            Not Before: Apr 10 00:15:19 2024 GMT
            Not After : Apr  9 00:20:19 2025 GMT
        Subject: CN=7DDDDDEA5E6333D186D5836ED48CE3CC0BFDD58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:11:d3:24:f6:ce:aa:19:f5:92:10:c4:f6:
                    4a:36:98:d0:3f:09:bd:73:d1:b0:1b:1f:52:56:25:
                    0f:db:91:4c:cf:85:fa:8c:48:3b:3c:a6:eb:3b:e6:
                    42:6b:df:f8:48:e0:c1:16:33:75:34:2d:9f:15:68:
                    1e:34:66:90:b0:4d:c4:fd:7e:a5:5e:73:51:50:98:
                    57:3a:1e:16:19:78:e3:71:e5:4c:c0:5b:ef:72:25:
                    7f:8d:fe:b5:17:fc:a1:ae:9a:50:28:16:5d:ce:84:
                    fd:09:67:52:bc:db:77:66:30:2d:e5:23:56:af:65:
                    19:48:aa:d6:2a:71:a8:4e:e0:f4:4c:1d:18:3c:d4:
                    93:a3:69:1f:93:ef:47:40:bd:bb:0c:06:65:0f:8f:
                    14:75:0b:e5:a8:28:10:e3:bc:fe:66:af:0d:54:51:
                    95:80:67:6b:dc:86:1c:42:e1:41:7a:6b:db:f5:9b:
                    d5:af:bb:a2:ed:b2:da:0f:19:d1:5b:34:df:72:84:
                    a7:b8:69:4f:68:48:e1:d4:99:de:b0:08:8d:21:2e:
                    84:3a:e8:b9:9d:b5:cf:ce:46:96:e6:1a:62:6e:89:
                    29:2a:87:87:08:61:8b:84:9a:ca:90:41:bf:33:40:
                    f3:74:17:04:42:7a:87:1f:03:ce:8f:58:53:21:fa:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DD:DD:EA:5E:63:33:D1:86:D5:83:6E:D4:8C:E3:CC:0B:FD:D5:8A
            X509v3 Authority Key Identifier:
                keyid:48:C4:A4:D4:7D:62:0E:AF:C5:B4:14:45:9B:CC:5A:20:DE:6B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C4A4D47D620EAFC5B414459BCC5A20DE6BEDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:7e:c2:d2:11:7a:23:64:68:2b:21:06:d2:6b:45:89:4f:
         2e:e7:0d:1a:1e:a6:87:a0:f4:a5:d8:da:db:8e:b7:8c:7f:f5:
         9d:a0:85:d7:ae:42:85:95:4b:38:86:a3:a0:06:43:9d:ca:ff:
         f5:e9:e1:9f:e3:a0:17:3c:3d:9d:b2:42:e4:b3:f7:ea:98:e5:
         70:ed:65:c7:0f:ad:38:b2:fe:79:6e:6a:d0:97:b0:0f:d8:11:
         8b:ff:b6:7a:f1:2a:56:1a:a7:24:41:1a:6e:6f:7d:bc:1e:e7:
         59:c3:69:cd:bd:d2:01:64:35:97:70:54:73:4b:49:f4:f6:70:
         86:6d:1b:fd:b5:ee:a5:07:93:d4:bf:37:1c:ac:8c:a7:52:11:
         5d:d5:d8:5e:80:cb:4a:df:9a:8b:1c:e1:96:91:cf:82:6a:0e:
         05:a3:5c:c5:4f:95:8e:42:4c:55:6a:e1:a6:a8:1c:2c:64:b5:
         dd:59:9f:db:2c:46:f9:4c:44:5b:24:e8:fc:b8:ff:79:9f:4e:
         a2:cb:79:58:e4:75:2a:a4:e3:35:3a:0c:1f:46:33:40:10:1e:
         ad:14:0d:3d:26:30:b1:98:aa:90:eb:56:fb:dc:6b:6c:74:37:
         e6:77:f7:d6:9a:21:10:15:cb:13:95:1a:b9:eb:ad:a4:b7:2b:
         5b:a1:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org