Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32332d3233203d3e203533313533.roa
File:                     3133382e3230342e3232322e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          eGFiB1k4FB7SL8lDwLcADFwfWpirMTLkK1UTbCxEViw=
Subject key identifier:   48:53:00:EC:C8:E3:FC:A9:F2:8A:4F:E4:A9:1D:41:34:A2:B2:40:56
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       320CF7DB91C07DAE2C4168B047EE0E76FC0CFCD7
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32332d3233203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:19:56 +0000
ROA not before:           Fri 24 May 2024 14:14:56 +0000
ROA not after:            Fri 23 May 2025 14:19:56 +0000
asID:                     53153
IP address blocks:        138.204.222.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0c:f7:db:91:c0:7d:ae:2c:41:68:b0:47:ee:0e:76:fc:0c:fc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:14:56 2024 GMT
            Not After : May 23 14:19:56 2025 GMT
        Subject: CN=485300ECC8E3FCA9F28A4FE4A91D4134A2B24056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:ef:a4:a9:de:91:c7:8d:fe:71:fc:df:a8:
                    b4:ff:51:0a:60:86:e5:bd:8a:68:26:74:45:72:54:
                    6d:69:a0:e9:7c:61:90:2f:21:d3:ae:5a:7e:ca:e3:
                    f8:de:d3:47:f5:52:84:86:3f:40:ac:b6:ba:8d:3c:
                    4c:77:66:fe:cc:0c:81:e3:95:d0:ef:3f:e8:a1:d9:
                    87:e1:8c:d8:c7:6c:47:8c:62:3d:d7:6b:d7:22:1e:
                    4f:c3:ee:b0:03:63:66:ea:4e:d5:5f:29:42:f6:df:
                    7a:50:b9:12:6a:a1:f3:96:d7:cf:4e:53:b2:ca:59:
                    ab:d7:a1:50:74:41:33:90:49:95:6f:b7:f2:0a:fc:
                    a3:e6:df:72:d3:55:0f:8f:80:58:3d:24:bb:a2:80:
                    80:6d:14:86:2d:fd:0d:d9:e1:d5:10:ed:1c:31:6d:
                    cb:fd:e5:8c:9d:c3:8f:f5:55:b6:1e:13:dc:2c:15:
                    e0:fa:1e:8e:f4:6b:a7:7b:e6:a7:a2:38:c2:14:4c:
                    06:ff:47:3f:f6:ed:72:ce:4f:57:ae:3b:fb:ab:ad:
                    d5:2d:f4:f5:e9:3f:25:d7:72:d9:5e:14:bb:ac:f7:
                    2a:b9:59:f3:9f:5b:df:04:c9:29:f0:d7:40:bf:2c:
                    8b:00:dc:27:57:09:f8:66:b7:eb:a4:dc:2f:40:26:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:53:00:EC:C8:E3:FC:A9:F2:8A:4F:E4:A9:1D:41:34:A2:B2:40:56
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:ad:43:d4:3e:a8:3c:d6:d3:92:81:50:e1:69:1b:23:4b:
         cd:65:be:4e:f5:89:e3:72:3e:79:3e:41:47:54:79:d8:09:8e:
         5b:ac:41:f8:a8:5c:f8:8e:53:85:01:6f:a1:f9:4f:31:a9:22:
         a6:7b:9f:f4:30:52:b3:cc:fa:8e:43:9b:b6:6e:a0:b9:24:1c:
         9e:93:57:23:04:eb:4b:c6:b2:46:8f:e1:da:8c:57:e9:f5:69:
         73:d3:e0:e3:b5:4c:6a:71:28:d3:3f:76:82:9f:79:20:25:5f:
         15:11:83:04:bd:50:e8:df:be:fc:e1:bf:5c:77:82:10:88:fe:
         63:f3:24:3b:8a:02:55:e0:76:43:4c:dd:67:47:44:23:a7:8f:
         65:70:0e:49:9a:05:0b:fe:57:1f:da:3a:6d:d7:54:c6:3f:39:
         c9:c6:07:51:54:ee:f4:ac:4a:7e:0c:22:f3:cf:98:78:07:ae:
         48:90:20:78:8f:b5:61:0a:ae:c3:11:bc:e9:3e:2f:66:5b:29:
         83:ac:e8:eb:0d:c1:a8:0f:9a:39:0e:ea:77:78:cc:26:56:a6:
         eb:8b:ab:91:33:8d:5e:45:c0:0c:fe:cd:45:28:95:f8:fa:54:
         67:7b:e0:7d:da:bf:44:4c:ba:d0:ae:37:69:ff:8e:d3:ec:ee:
         d0:ad:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org