Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa
File:                     3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa (raw, json)
Hash identifier:          lYrEscOJgQ/kiLV8zhiaq4SEowmeFljq2BnILs/ldM0=
Subject key identifier:   33:E0:65:52:09:EC:6B:49:DA:95:D6:27:C6:25:3A:2A:A5:BD:D6:E8
Certificate issuer:       /CN=61439C6B374499CD367F3A3160983AD24FB789C1
Certificate serial:       49F7DBDFFC41ABAF1473CFE82AC3DD167B619813
Authority key identifier: 61:43:9C:6B:37:44:99:CD:36:7F:3A:31:60:98:3A:D2:4F:B7:89:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61439C6B374499CD367F3A3160983AD24FB789C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa
Signing time:             Tue 06 Aug 2024 14:05:23 +0000
ROA not before:           Tue 06 Aug 2024 14:00:23 +0000
ROA not after:            Tue 05 Aug 2025 14:05:23 +0000
asID:                     264273
IP address blocks:        138.118.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f7:db:df:fc:41:ab:af:14:73:cf:e8:2a:c3:dd:16:7b:61:98:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61439C6B374499CD367F3A3160983AD24FB789C1
        Validity
            Not Before: Aug  6 14:00:23 2024 GMT
            Not After : Aug  5 14:05:23 2025 GMT
        Subject: CN=33E0655209EC6B49DA95D627C6253A2AA5BDD6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2c:63:a5:2e:0b:23:ec:8b:aa:f5:a4:45:e9:
                    6b:4a:5c:ea:07:9b:2f:2e:0f:1f:a2:d2:35:ec:03:
                    12:1e:5d:59:82:7f:f2:21:16:c7:e3:03:47:19:45:
                    ca:0a:0a:01:78:be:85:94:9f:7b:3b:54:e8:57:63:
                    51:56:a5:f7:58:8e:29:37:71:2c:07:b8:52:a5:db:
                    41:70:a4:ec:16:33:a5:6f:b5:52:1e:05:24:7c:a2:
                    e5:d9:08:65:79:a0:38:58:97:f4:55:fb:b6:7e:ba:
                    af:94:ba:8d:2a:39:fa:bf:eb:68:9e:fd:63:e4:c4:
                    10:56:70:e1:18:d1:a6:23:fc:33:b8:5b:22:f9:c1:
                    8b:1e:bf:cc:3b:b2:c7:5c:d7:66:65:18:c2:02:9e:
                    d4:6d:6a:0d:74:c6:ca:a3:12:73:3c:ec:d8:d6:85:
                    d9:89:80:72:7b:bc:9d:5b:10:b7:13:51:69:3b:4c:
                    37:fc:bc:f9:2c:99:91:bd:09:74:8f:df:33:fc:5b:
                    ea:d3:02:4b:de:b0:cf:f5:04:22:35:59:8b:ac:76:
                    4d:26:44:8b:e0:3a:59:07:14:7e:ac:58:25:b4:55:
                    4d:50:7f:8e:41:35:70:fd:27:f7:f6:1e:0d:a5:c7:
                    58:2b:13:12:33:85:b8:99:6e:c1:f3:a3:76:46:54:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:65:52:09:EC:6B:49:DA:95:D6:27:C6:25:3A:2A:A5:BD:D6:E8
            X509v3 Authority Key Identifier:
                keyid:61:43:9C:6B:37:44:99:CD:36:7F:3A:31:60:98:3A:D2:4F:B7:89:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/61439C6B374499CD367F3A3160983AD24FB789C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61439C6B374499CD367F3A3160983AD24FB789C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/1/3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:86:d2:b1:2b:61:2d:03:74:39:fd:f3:46:01:e2:ce:13:14:
         9c:c4:a3:41:65:4c:1c:2e:45:37:3a:a3:c8:df:21:28:a5:3f:
         3b:96:f9:6f:f3:ba:f7:4b:f3:54:54:58:13:0a:8e:20:cd:fa:
         09:e6:1d:6b:39:d7:1c:96:4c:07:45:f5:8a:33:0e:3a:56:dd:
         85:e5:90:3d:45:b8:0f:96:d9:f9:a8:3c:b9:d2:eb:ce:68:4e:
         20:47:12:9b:95:9c:5d:c9:9d:4c:0f:86:0e:f2:14:a2:b1:78:
         c7:b9:86:f9:5c:b3:74:14:1f:cb:b5:af:73:97:b7:53:c6:65:
         61:6b:a7:f9:4d:24:aa:67:c5:ff:3d:cd:fc:6d:20:85:82:33:
         32:13:5c:5f:da:09:5c:0d:c4:e6:fe:54:93:6d:d4:c2:6f:6f:
         4b:3b:d8:69:f8:76:69:ba:9a:50:38:76:84:c1:bf:7d:bf:7e:
         5d:cf:51:54:b3:2e:7a:41:8f:97:e6:6f:85:76:38:c9:55:a2:
         1b:a6:fc:5e:a5:c7:c6:85:ad:b5:9a:58:84:e8:fc:22:89:b4:
         d6:d0:7f:8c:a0:78:6c:f0:41:a8:d3:22:98:6f:7b:25:89:56:
         35:6e:20:1f:c4:46:af:8a:55:be:56:b4:98:b7:5d:40:b3:c8:
         02:e2:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 01:40:36 2024 by rpki-client on console-fra.rpki-client.org