Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa
File:                     3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          gpIqwcPhhBHqqZbtZmB5azT6o9XPMYlx6jsHa+rDzJs=
Subject key identifier:   28:C0:9F:7D:2C:53:71:1F:B5:1A:3A:91:42:4E:3B:73:91:82:11:02
Certificate issuer:       /CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
Certificate serial:       76A6F79EFD7EF26008C30AE4EB381CF948C97158
Authority key identifier: F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa
Signing time:             Wed 17 Apr 2024 18:17:05 +0000
ROA not before:           Wed 17 Apr 2024 18:12:05 +0000
ROA not after:            Wed 16 Apr 2025 18:17:05 +0000
asID:                     262669
IP address blocks:        138.94.224.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a6:f7:9e:fd:7e:f2:60:08:c3:0a:e4:eb:38:1c:f9:48:c9:71:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
        Validity
            Not Before: Apr 17 18:12:05 2024 GMT
            Not After : Apr 16 18:17:05 2025 GMT
        Subject: CN=28C09F7D2C53711FB51A3A91424E3B7391821102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:33:ae:18:ad:e5:ec:49:2d:06:ef:50:bd:
                    77:e8:a2:8d:4b:4d:0c:83:8b:9d:95:bc:d4:72:37:
                    e4:e3:ad:98:78:88:67:00:4b:c3:94:7b:76:cf:49:
                    d6:47:e1:9d:bf:a9:ec:15:5f:e5:5c:63:b5:40:06:
                    1b:ec:c7:ee:a9:0f:e9:34:cf:aa:66:e4:4f:52:38:
                    77:b7:3b:03:72:52:ac:fd:0e:2c:04:70:6c:33:e4:
                    e9:81:a7:00:66:5e:8b:6a:e4:9e:cc:ed:a8:15:9d:
                    7c:8e:a6:8e:0b:87:1b:88:7f:2e:be:ee:37:4a:a3:
                    58:9b:cd:21:65:ab:94:14:6a:aa:a9:34:47:92:30:
                    d4:1c:fe:ad:1e:b9:76:be:8a:08:2a:e3:78:3e:2c:
                    ee:44:24:e3:e8:4f:58:07:f2:36:57:1d:44:11:c3:
                    9c:09:7d:b7:85:b2:fe:f1:0a:39:b1:57:0d:cc:2b:
                    36:d3:14:d2:cd:f1:bc:28:bc:57:1c:b1:78:33:8e:
                    ed:4c:c5:a7:c4:bf:cd:95:22:36:39:68:a4:cf:39:
                    51:10:93:e6:57:56:7b:ff:a0:88:e8:29:09:27:74:
                    7b:38:08:da:77:28:76:1e:38:75:d1:69:88:4f:a7:
                    f0:d1:83:86:b1:78:39:50:d7:4a:25:b9:a5:1f:6d:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C0:9F:7D:2C:53:71:1F:B5:1A:3A:91:42:4E:3B:73:91:82:11:02
            X509v3 Authority Key Identifier:
                keyid:F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e1:64:83:63:59:93:6c:e6:51:52:c6:c4:ce:e8:d3:26:09:
         30:89:7c:59:b8:58:e4:3e:be:f8:28:f5:5b:6e:56:cc:53:31:
         9d:e9:48:2f:76:2f:9b:50:89:da:17:60:4f:35:b6:83:f8:09:
         41:f7:9b:90:26:58:65:8b:67:6a:d2:73:41:78:da:82:74:fb:
         fd:d5:e6:e3:74:1a:6d:06:5a:de:c8:5e:72:1e:a5:a1:42:2a:
         10:e9:90:77:e7:c6:b9:7c:8b:c1:4c:13:f6:f9:de:17:4d:5e:
         5d:62:39:76:31:9b:01:b1:f6:63:be:4d:1d:9a:58:39:3b:68:
         67:00:da:25:95:4c:98:88:1e:cb:d8:37:0a:a3:5f:95:7b:7a:
         3f:51:6a:e0:fc:cd:b0:c5:fa:c4:ce:e2:1e:47:fc:4b:31:7a:
         b1:10:12:f5:16:72:ad:e9:f1:5a:4e:28:41:66:5d:9b:b2:2e:
         a6:1d:35:bf:47:54:5e:64:b0:e8:5b:78:dc:55:7c:bf:71:08:
         46:b4:b7:30:25:2b:25:61:c6:0c:85:6e:f0:ec:24:0a:5b:0d:
         f2:23:97:b3:89:27:23:1c:a9:b2:e3:9f:59:8a:c9:18:c8:b0:
         26:92:ff:ad:29:f7:ef:32:b7:c5:27:01:78:d4:f4:4d:6e:f3:
         68:b4:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:12 2024 by rpki-client on console-fra.rpki-client.org