Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa
File:                     3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa (raw, json)
Hash identifier:          Cnpz7cbiqELIeKu4T1nb4/zRt2fpNpWS45ibByFtChs=
Subject key identifier:   99:FA:E4:3C:CA:58:A6:86:27:57:73:25:7F:83:83:BC:FF:D7:77:F2
Certificate issuer:       /CN=47A03CE9510F3E94268A5286FC3752346859F860
Certificate serial:       31CB905342414673125EEB47CDF1A3C43EDF014B
Authority key identifier: 47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa
Signing time:             Thu 04 Apr 2024 15:32:47 +0000
ROA not before:           Thu 04 Apr 2024 15:27:47 +0000
ROA not after:            Thu 03 Apr 2025 15:32:47 +0000
asID:                     264269
IP address blocks:        138.118.248.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cb:90:53:42:41:46:73:12:5e:eb:47:cd:f1:a3:c4:3e:df:01:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A03CE9510F3E94268A5286FC3752346859F860
        Validity
            Not Before: Apr  4 15:27:47 2024 GMT
            Not After : Apr  3 15:32:47 2025 GMT
        Subject: CN=99FAE43CCA58A686275773257F8383BCFFD777F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:72:ba:4c:e7:63:9e:e4:cd:99:10:e9:40:
                    5e:11:3c:cd:72:67:77:c3:26:07:a5:8d:4e:d8:5e:
                    61:51:94:77:c2:7a:a6:70:a3:42:a1:3a:6a:5d:25:
                    2e:08:82:08:00:de:f6:5f:f8:40:ba:91:b4:6f:14:
                    99:63:db:85:59:3b:17:32:7c:c6:88:e2:96:bc:c2:
                    30:ed:c6:25:b9:d6:59:c2:ca:ed:7d:3c:04:9c:5e:
                    56:44:e9:5d:a2:10:27:52:04:ae:d6:be:79:f9:4d:
                    43:63:7f:94:ca:33:06:81:db:5a:c0:e4:4e:29:53:
                    62:46:3d:cf:ca:a2:9c:3c:09:03:e3:03:85:38:18:
                    f2:89:fe:9c:43:c0:64:90:f6:ae:0e:b9:ba:a8:86:
                    07:25:f7:6e:84:88:28:b0:b7:4d:0f:ba:60:48:8b:
                    82:7b:16:05:32:d5:eb:f1:fa:7c:3f:1a:2e:65:01:
                    28:ca:a8:81:bb:aa:93:4b:81:77:8e:7d:ce:98:15:
                    d1:1b:cf:00:0e:c0:96:f9:15:fd:45:b4:77:a8:b2:
                    30:ac:d8:3c:e2:0a:99:02:7a:ef:98:9b:2b:ad:e9:
                    fe:b0:df:6e:80:3e:f3:7a:a7:7f:7e:17:e9:33:2d:
                    bd:d7:08:44:17:1e:59:43:a0:9c:fa:66:3d:7b:5a:
                    68:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:E4:3C:CA:58:A6:86:27:57:73:25:7F:83:83:BC:FF:D7:77:F2
            X509v3 Authority Key Identifier:
                keyid:47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/47A03CE9510F3E94268A5286FC3752346859F860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:c8:01:dc:b1:3f:a4:11:33:74:22:74:cf:84:36:99:cb:
         15:a2:22:4f:aa:8b:ab:f9:88:49:37:60:d8:dc:01:a3:4a:98:
         3b:c2:d8:d8:a4:f2:96:72:c0:fc:8f:ba:8b:6c:84:b7:55:c5:
         d2:3b:6e:bd:e9:5e:74:56:09:11:e7:7e:46:9d:16:e5:bc:a7:
         1e:3f:4a:44:e6:01:6b:1f:39:86:24:14:fa:40:aa:67:55:29:
         e6:7a:ad:5b:f4:1c:d6:f0:fa:56:06:84:ec:6a:3a:05:4c:67:
         cf:79:56:e0:17:8f:6f:9e:9f:3e:c7:6a:f5:a5:7e:47:c8:e9:
         13:5d:c8:20:f5:77:85:a6:8c:03:f2:d1:fc:73:5a:d4:3a:70:
         3f:5c:cb:bd:a5:9e:f3:cb:89:df:41:01:d2:ad:11:30:0d:f6:
         65:48:8f:a3:a3:88:82:44:ab:c6:9d:e4:de:d7:d7:dd:9a:86:
         3a:1b:d1:0c:ca:b4:82:9e:97:79:0d:f2:49:85:81:6f:87:4c:
         59:86:c1:3b:73:1b:0f:6f:7d:31:67:cf:11:70:bb:50:d0:85:
         8c:b3:06:57:88:8d:73:95:7d:1d:37:de:cf:35:6d:41:8e:54:
         d0:46:16:c6:83:74:d8:03:34:06:2d:74:50:1a:93:7d:d9:05:
         c6:45:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 10:23:51 2024 by rpki-client on console-fra.rpki-client.org