Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32332d3233203d3e20323634323639.roa
File:                     3133382e3131382e3234382e302f32332d3233203d3e20323634323639.roa (raw, json)
Hash identifier:          q66tUDZMhLZTvoQAwsjNzfbZtGp5edZkt6YJqGYnLnI=
Subject key identifier:   8D:7F:4A:82:3E:92:E7:A0:13:9A:CF:43:FB:A8:BC:E4:DD:02:5B:B4
Certificate issuer:       /CN=47A03CE9510F3E94268A5286FC3752346859F860
Certificate serial:       2FF363879434B1A7F41A0C9942D17488EC62F825
Authority key identifier: 47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32332d3233203d3e20323634323639.roa
Signing time:             Thu 04 Apr 2024 15:32:48 +0000
ROA not before:           Thu 04 Apr 2024 15:27:48 +0000
ROA not after:            Thu 03 Apr 2025 15:32:48 +0000
asID:                     264269
IP address blocks:        138.118.248.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f3:63:87:94:34:b1:a7:f4:1a:0c:99:42:d1:74:88:ec:62:f8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A03CE9510F3E94268A5286FC3752346859F860
        Validity
            Not Before: Apr  4 15:27:48 2024 GMT
            Not After : Apr  3 15:32:48 2025 GMT
        Subject: CN=8D7F4A823E92E7A0139ACF43FBA8BCE4DD025BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c9:1d:9e:a6:95:1e:12:68:6e:63:5a:4e:23:
                    ea:a1:00:9f:50:dd:39:6b:6a:92:9f:c4:05:c3:d1:
                    b4:bc:9f:15:36:35:2c:2a:23:79:d8:15:85:a3:97:
                    d8:2e:6d:8a:11:d2:c0:45:64:a8:dc:31:59:da:4b:
                    f7:52:17:ba:99:b6:f9:87:4a:22:4b:bf:1e:66:5f:
                    fb:60:36:aa:31:d1:71:74:66:11:69:70:e0:b4:aa:
                    e0:6f:48:5e:2c:b5:db:5b:35:c8:ab:d1:4d:f0:d8:
                    fb:f0:54:07:2b:5f:95:54:35:63:f1:f8:17:40:88:
                    3d:e0:f1:79:99:c2:c3:94:54:1a:8c:ad:02:e6:a5:
                    3f:b1:dc:b5:0b:9d:9c:43:2e:22:03:9d:ff:bc:1f:
                    40:45:87:d5:0c:fc:3b:aa:a6:b4:8c:2a:cd:27:e5:
                    ed:0d:f1:e3:26:d5:6a:8b:4e:d5:c9:b3:9d:ab:65:
                    a3:4a:bc:7e:6a:46:a2:be:04:30:54:89:64:dc:83:
                    e5:40:cf:3e:99:f8:a2:0b:da:0e:0f:14:98:85:e6:
                    4b:bd:b1:ab:ee:a7:8f:0c:e3:07:94:1b:5a:0d:eb:
                    aa:cd:07:d6:78:f2:42:f9:b1:54:83:b9:01:07:45:
                    0a:02:45:1a:48:c7:9d:82:0c:dc:a1:d1:58:07:32:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7F:4A:82:3E:92:E7:A0:13:9A:CF:43:FB:A8:BC:E4:DD:02:5B:B4
            X509v3 Authority Key Identifier:
                keyid:47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/47A03CE9510F3E94268A5286FC3752346859F860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32332d3233203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:5e:73:7a:e7:4c:31:ad:46:8e:af:16:c0:b3:e5:b2:6f:74:
         71:27:ce:dd:69:26:bb:53:00:a5:95:2f:1a:f9:9f:d4:36:4f:
         83:71:ed:e1:54:6b:12:b2:f6:49:9a:c4:f2:22:9b:42:00:ab:
         30:05:2d:90:f6:e6:d3:ca:1b:ab:0c:ac:a9:58:12:93:c3:14:
         41:5f:ef:a3:99:70:25:39:ed:25:02:c0:66:d6:8f:3d:7e:e2:
         34:ca:26:73:88:93:05:9f:1e:62:c2:cd:d5:37:0e:3b:46:f0:
         4c:91:b2:01:82:5b:41:2f:9b:8a:6b:91:5e:84:8e:cf:6a:b3:
         de:42:1e:d9:8f:06:32:45:da:fc:3f:09:e6:bd:de:56:49:55:
         c8:90:86:58:84:91:54:57:20:15:d2:5d:85:3d:36:20:00:1f:
         2c:b7:15:6e:d8:3c:30:f0:ee:85:cd:56:1e:07:66:dc:c5:1d:
         78:80:06:b6:90:b9:5f:15:de:ff:8e:2c:62:a8:26:3b:06:8b:
         25:3d:da:9b:e8:f7:d0:e1:cf:95:73:5c:f7:92:12:c6:f9:ba:
         c5:98:71:ee:8f:f9:d8:cc:21:b3:0d:a9:49:68:f0:58:55:f3:
         09:2f:8a:29:98:f1:a8:86:49:ce:5c:2f:3c:ee:93:5c:4a:22:
         28:f3:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 12:26:53 2024 by rpki-client on console-ams.rpki-client.org