Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
File:                     3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          7blkKqZC8tJ37eWKhabj5dpuAyoZ2jWGYxnm1xk9Jrc=
Subject key identifier:   6D:35:6E:26:E8:58:F7:BA:14:1D:10:3F:DB:13:07:92:7E:44:C7:CB
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       209A59C7987954D3FE1D23A812EA9E01B38B9218
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:19:58 +0000
ROA not before:           Fri 24 May 2024 14:14:58 +0000
ROA not after:            Fri 23 May 2025 14:19:58 +0000
asID:                     53153
IP address blocks:        138.204.220.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9a:59:c7:98:79:54:d3:fe:1d:23:a8:12:ea:9e:01:b3:8b:92:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:14:58 2024 GMT
            Not After : May 23 14:19:58 2025 GMT
        Subject: CN=6D356E26E858F7BA141D103FDB1307927E44C7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:44:e9:b1:2a:49:d6:e8:2d:06:5d:58:4c:ec:
                    e2:5e:29:45:94:c9:a9:ec:b8:a9:17:51:ea:7a:de:
                    a7:bb:25:2b:84:ec:55:b5:50:f7:89:d8:0a:b4:8d:
                    b2:c2:f3:a4:30:e3:2d:46:0e:df:11:6e:02:e4:13:
                    58:40:ed:15:ad:f2:9e:62:84:cb:e7:be:0c:86:96:
                    e7:27:f9:fb:10:7c:20:82:21:33:20:8a:b7:e5:31:
                    7c:55:5f:5b:a5:e6:5c:c8:b9:62:17:29:aa:2e:79:
                    6a:15:bf:5e:95:46:0d:df:97:f3:8e:80:40:52:d8:
                    97:ac:6c:2f:76:ff:5d:06:32:b4:a6:62:69:1f:d1:
                    13:dd:bf:e5:ec:79:8d:a9:05:fd:18:ef:a2:df:ef:
                    c1:e9:b9:c2:98:ef:2a:ac:70:63:43:42:5a:22:e2:
                    df:69:3b:08:b4:c6:1a:bd:7b:56:f2:6c:0c:9f:28:
                    99:c1:91:a0:05:db:ad:ac:c2:84:8d:c7:c8:1d:d0:
                    26:ea:b7:73:8f:c1:dc:a3:b7:de:83:48:57:77:9a:
                    3a:38:93:d2:08:0b:4b:50:5c:c1:1a:0f:a8:10:03:
                    f6:90:b2:0d:7a:fa:49:79:78:e8:1e:78:87:df:5e:
                    a9:5d:fe:03:fd:3f:ab:20:a5:3a:a5:cb:3b:5d:f7:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:35:6E:26:E8:58:F7:BA:14:1D:10:3F:DB:13:07:92:7E:44:C7:CB
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:88:a8:d0:23:04:4b:a6:9a:a1:88:d4:bc:af:9a:9b:fb:
         69:04:70:f4:18:8d:4b:72:36:92:82:55:cd:86:4e:fb:36:13:
         10:89:32:9c:88:c0:21:51:c5:d4:6e:9f:2c:d0:1c:03:f0:b1:
         a8:b2:85:8f:8b:7b:42:b1:94:cd:42:21:ab:a9:02:82:af:c2:
         18:b9:29:2c:4c:1c:b4:f7:e0:e7:10:b8:0b:0e:12:68:11:53:
         60:e6:9e:ee:15:ad:eb:bb:a0:01:ec:eb:8e:5c:34:09:3c:0a:
         ca:3b:c0:66:c2:0d:ec:e5:99:7f:e6:6e:4f:06:3f:b2:f3:a2:
         1b:5f:65:cb:a0:cf:fa:93:a2:56:19:b5:1f:ea:63:4d:02:92:
         2f:d7:9b:c0:71:1d:98:19:0a:78:d0:97:37:5a:22:cc:a7:db:
         c0:66:44:12:5f:32:21:ec:0c:30:20:bb:15:8a:35:f3:01:42:
         50:24:9f:ff:e0:22:e6:d5:d3:bb:ce:9b:09:a0:ec:85:6c:68:
         e1:ec:7e:e8:1a:37:67:b8:78:27:ec:d5:dd:ea:e0:1d:fa:a3:
         f3:5c:a3:cc:0e:b6:c1:e3:b4:3e:66:f2:0f:90:4f:98:1d:0b:
         ef:72:a3:f0:e4:03:6c:7e:3b:cc:38:5c:30:bc:be:a8:0f:11:
         b2:48:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:59:36 2024 by rpki-client on console-fra.rpki-client.org