Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa
File:                     3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          2hu4qsa0SvMhm82ixy7O9cAw0YFnIEZxh00JYlFqF3I=
Subject key identifier:   D7:70:F3:B7:F3:AD:73:0A:F5:F3:2D:43:9D:41:01:A0:21:93:5E:7C
Certificate issuer:       /CN=9536A4A25799142864EDF97B100393D50D163742
Certificate serial:       195893FCE5A6A9A46E4D84B81DE21ED33BF7E5CB
Authority key identifier: 95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa
Signing time:             Fri 24 May 2024 14:20:04 +0000
ROA not before:           Fri 24 May 2024 14:15:04 +0000
ROA not after:            Fri 23 May 2025 14:20:04 +0000
asID:                     53153
IP address blocks:        138.204.222.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:58:93:fc:e5:a6:a9:a4:6e:4d:84:b8:1d:e2:1e:d3:3b:f7:e5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9536A4A25799142864EDF97B100393D50D163742
        Validity
            Not Before: May 24 14:15:04 2024 GMT
            Not After : May 23 14:20:04 2025 GMT
        Subject: CN=D770F3B7F3AD730AF5F32D439D4101A021935E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:ec:ef:ff:1d:d1:dd:10:12:ba:62:7e:c6:
                    67:63:3d:45:a6:34:ca:6f:97:3c:13:2c:b4:a5:47:
                    e0:4f:d4:11:5d:57:de:5c:64:7e:ff:51:0d:a2:80:
                    bf:ce:9e:6f:eb:c1:29:53:5e:59:9b:04:85:af:70:
                    65:e6:4a:4b:ba:a7:c5:b3:21:87:05:8c:ef:af:81:
                    c4:ac:b3:35:a0:fb:44:14:8c:bf:01:0f:4e:ae:e8:
                    a2:cc:f3:cc:55:b5:5e:00:1d:1e:21:09:d9:92:b1:
                    11:d1:95:59:bb:de:76:fe:75:63:79:ba:1f:b8:0e:
                    77:3d:9c:a6:e0:a4:b2:aa:c5:0e:64:ea:7f:ad:42:
                    5c:24:15:b9:4b:93:c9:8e:75:d0:2f:ae:a8:fa:aa:
                    ac:4a:cb:51:82:8a:93:5f:d1:75:56:89:ef:e0:0f:
                    a8:e6:33:d1:14:84:18:f9:5d:2b:59:60:ca:2a:df:
                    d5:25:38:66:3e:b1:7c:a1:78:2a:4e:8b:f6:25:67:
                    c5:73:06:cc:30:f4:ac:e8:8f:70:f2:33:1c:74:41:
                    eb:99:08:22:80:2d:73:be:48:fd:53:97:3d:7d:42:
                    ab:ae:f7:46:34:fc:50:27:8e:44:8c:52:90:7b:c0:
                    93:a6:e9:ca:dc:b3:ec:63:40:fd:e8:81:3c:cb:d5:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:70:F3:B7:F3:AD:73:0A:F5:F3:2D:43:9D:41:01:A0:21:93:5E:7C
            X509v3 Authority Key Identifier:
                keyid:95:36:A4:A2:57:99:14:28:64:ED:F9:7B:10:03:93:D5:0D:16:37:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/9536A4A25799142864EDF97B100393D50D163742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9536A4A25799142864EDF97B100393D50D163742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:73:c5:ab:d8:e2:f2:52:bf:bf:50:c5:0c:b2:1f:61:9d:09:
         a7:60:2e:64:f4:35:f2:0b:21:7c:ae:97:f8:36:bb:ec:12:ed:
         d8:1d:cd:87:5b:59:c9:42:00:d0:02:ed:ac:17:a8:8d:16:84:
         0e:eb:f9:69:1e:43:bb:b2:1e:58:4f:cd:78:c8:2c:68:58:df:
         5c:4c:29:f2:5c:39:ec:dc:2d:2f:66:b6:68:06:cb:db:2c:05:
         8a:08:65:04:01:2f:a1:23:61:3d:0e:4a:f3:66:49:fb:5e:5e:
         5d:01:a6:69:45:71:a2:4f:cc:7b:95:b6:72:a4:d4:6c:c9:d5:
         7a:fc:0a:ba:2b:22:69:27:a0:f3:8c:93:07:6d:02:23:3c:b8:
         da:66:43:3f:da:bf:41:1e:11:84:c4:0c:79:b1:f1:1e:34:17:
         93:b2:43:6e:ae:3c:10:aa:03:1c:ef:6d:86:6f:f7:d1:79:bd:
         91:f9:4a:e6:e8:db:4c:2e:f5:e4:f9:9c:fb:42:02:1d:de:df:
         c7:7d:0a:24:4c:18:65:6c:f7:e2:6d:41:e7:06:d5:0c:9f:ac:
         13:85:45:ba:e3:3f:51:3e:8e:0d:be:bf:82:a8:dc:4a:f1:4f:
         ae:14:be:bf:bf:e8:ee:1b:fc:36:1a:f5:b9:56:b5:f1:56:ca:
         26:8f:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:04:06 2024 by rpki-client on console-ams.rpki-client.org