Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa
File:                     3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa (raw, json)
Hash identifier:          NFDQAQGOQ7XPTt+Nuu479YxZfHl2GLSwYVd/2GD1+xc=
Subject key identifier:   09:26:21:C6:7B:95:A4:68:93:18:93:55:75:D7:3C:4F:DA:51:E4:AD
Certificate issuer:       /CN=0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5
Certificate serial:       016DFC2935F9F5B7694B6F5877E39E62C79067AD
Authority key identifier: 04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa
Signing time:             Mon 19 Aug 2024 14:51:13 +0000
ROA not before:           Mon 19 Aug 2024 14:46:13 +0000
ROA not after:            Mon 18 Aug 2025 14:51:13 +0000
asID:                     263931
IP address blocks:        138.219.136.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6d:fc:29:35:f9:f5:b7:69:4b:6f:58:77:e3:9e:62:c7:90:67:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5
        Validity
            Not Before: Aug 19 14:46:13 2024 GMT
            Not After : Aug 18 14:51:13 2025 GMT
        Subject: CN=092621C67B95A4689318935575D73C4FDA51E4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b1:08:98:12:f2:80:bd:5c:24:2a:8b:b6:8a:
                    3d:1d:4f:28:46:fe:92:71:95:75:d6:de:b3:dc:54:
                    52:d6:c1:87:b1:31:c2:62:28:b4:16:89:9a:94:5c:
                    53:8f:27:71:b5:62:59:52:72:44:bd:3e:cc:85:75:
                    9c:b8:46:78:f8:08:8e:32:4a:59:c5:33:17:57:e1:
                    9a:40:58:b1:2e:ed:e3:55:a9:9b:70:4b:44:3f:f4:
                    f4:1f:2f:d9:b6:ef:8c:c2:8d:6f:04:27:d4:02:36:
                    51:eb:c5:72:d5:b7:4c:5e:41:ee:9c:a9:28:9d:de:
                    90:f3:01:ea:f1:2d:06:ff:56:8f:81:d4:39:b0:fc:
                    34:3d:27:6e:90:8a:83:f2:f6:9d:bb:cc:ec:fb:4e:
                    3f:51:8e:65:97:10:2b:23:8d:6b:c3:f3:b0:81:83:
                    1e:22:0c:06:dc:0b:d1:2e:73:87:04:13:c4:1e:f4:
                    af:25:0b:41:ea:e0:3e:4c:a9:2b:97:d2:ec:9d:07:
                    2d:c5:f1:ba:04:4c:fd:4c:0f:48:85:11:8f:b0:7c:
                    78:ae:a1:04:e2:47:ae:d7:55:68:92:cb:3f:51:95:
                    e6:2f:c3:d5:69:19:5e:35:be:76:02:90:a8:eb:75:
                    d0:37:1d:0a:89:75:a9:b0:0f:57:97:ed:a0:95:ab:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:26:21:C6:7B:95:A4:68:93:18:93:55:75:D7:3C:4F:DA:51:E4:AD
            X509v3 Authority Key Identifier:
                keyid:04:43:FC:FC:D1:3B:EA:6D:91:E1:CD:71:54:46:13:BD:4E:2A:69:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0443FCFCD13BEA6D91E1CD71544613BD4E2A69F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:10:f8:0b:d5:ae:cf:91:cf:25:2f:bd:24:3a:59:aa:7a:f0:
         9f:57:03:67:4b:91:0c:65:bb:6e:59:0c:0f:99:e2:07:fc:f3:
         74:c5:65:61:9e:db:1c:ab:e1:c9:c8:57:ec:77:72:b7:23:22:
         95:2d:cf:ad:80:7e:c4:e0:c5:6c:4c:9d:bd:ce:eb:55:cc:53:
         25:d2:97:92:ca:e3:1a:25:8e:ef:b6:67:77:38:56:5f:b0:c5:
         96:b6:c7:1c:a7:f1:40:8c:29:cb:f2:65:1f:90:b3:91:69:f3:
         91:c1:ae:48:40:e0:b3:38:9e:61:89:c8:92:f3:8d:ac:fe:f2:
         82:6c:39:47:c0:eb:44:84:51:5b:37:bd:0d:86:78:70:18:bb:
         73:0a:75:97:09:6b:64:7e:90:eb:bd:2c:28:fe:29:60:5e:f6:
         34:5b:36:e2:fc:fe:4d:58:a3:70:82:ba:60:73:d2:72:37:c1:
         db:04:5c:76:df:57:ac:85:83:f6:42:46:2f:75:be:c7:ff:20:
         25:69:1c:fc:8d:53:19:aa:62:07:70:d6:24:cb:e7:5c:f5:c6:
         c7:0f:ad:13:42:25:bb:b0:6e:95:94:47:cb:1f:98:f2:f6:87:
         cd:80:9c:85:30:c9:c5:67:f7:e2:43:9a:ff:62:b2:88:f3:bd:
         0a:e7:55:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 17:07:50 2024 by rpki-client on console-fra.rpki-client.org