Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa
File:                     3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa (raw, json)
Hash identifier:          aK6F9HSsoYG9kAgfEPXMAMynrsmuDRZwX5budRLs1MU=
Subject key identifier:   C1:34:D2:08:84:DE:92:4F:55:AC:C8:D6:40:2A:89:DA:7B:7F:B2:CD
Certificate issuer:       /CN=47A03CE9510F3E94268A5286FC3752346859F860
Certificate serial:       501905E89567CAEB09C40DEB05AC86EE16A01AFF
Authority key identifier: 47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa
Signing time:             Thu 04 Apr 2024 15:32:47 +0000
ROA not before:           Thu 04 Apr 2024 15:27:47 +0000
ROA not after:            Thu 03 Apr 2025 15:32:47 +0000
asID:                     264269
IP address blocks:        138.118.248.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:19:05:e8:95:67:ca:eb:09:c4:0d:eb:05:ac:86:ee:16:a0:1a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A03CE9510F3E94268A5286FC3752346859F860
        Validity
            Not Before: Apr  4 15:27:47 2024 GMT
            Not After : Apr  3 15:32:47 2025 GMT
        Subject: CN=C134D20884DE924F55ACC8D6402A89DA7B7FB2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:fc:4a:7d:d8:16:06:0c:b4:99:db:ab:60:
                    0a:bc:57:a3:38:14:bc:f9:64:4b:a7:b7:d0:10:04:
                    63:ff:b5:9f:39:4d:d9:47:3f:94:d6:a2:3d:67:bc:
                    fa:49:0b:cb:c3:c9:6a:31:83:1c:13:61:03:95:c7:
                    00:f6:5b:af:b9:77:81:89:21:f2:b5:ed:19:4f:d9:
                    82:8a:4c:7d:6f:46:d3:9f:fb:0a:b6:f1:03:c8:54:
                    9b:ab:d7:b1:74:b4:4b:d6:6f:62:c7:e7:59:c9:5d:
                    d6:3b:54:ac:b4:66:c9:cf:75:7a:87:5a:39:cc:3d:
                    83:ba:e3:b0:e7:27:bb:72:d9:ef:45:f9:98:85:b8:
                    cc:4f:a9:71:16:0d:1e:53:ad:6a:ad:65:40:e6:3b:
                    62:b6:3c:c5:f4:a3:99:a9:31:00:46:88:7a:bf:45:
                    ba:ce:be:19:31:56:39:83:ba:03:ef:8f:45:7c:d4:
                    7c:0a:d0:94:1e:7a:03:3e:b8:70:dd:2f:63:8d:07:
                    98:15:c8:0c:33:31:20:4b:e9:59:25:d3:af:8d:94:
                    53:04:51:2b:17:82:9f:ab:b5:1d:7a:62:1b:d3:d5:
                    23:61:db:ba:28:57:4c:41:c8:11:84:38:ed:7f:b7:
                    04:08:71:5f:fe:45:87:97:a1:43:7d:55:5b:b1:ab:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:34:D2:08:84:DE:92:4F:55:AC:C8:D6:40:2A:89:DA:7B:7F:B2:CD
            X509v3 Authority Key Identifier:
                keyid:47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/47A03CE9510F3E94268A5286FC3752346859F860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:7b:fa:6f:b1:63:ea:fb:d5:5e:15:35:48:f1:8d:d3:4a:
         d5:ad:c1:38:ed:a6:fb:fc:4f:9c:3c:62:9b:ea:87:54:bd:3d:
         a7:e9:11:f3:e7:06:28:f6:1d:f3:11:3a:ed:f3:3b:84:af:16:
         55:88:60:05:ed:e7:91:b9:e4:34:50:e9:11:20:25:53:bc:d7:
         68:f5:df:d4:67:fa:7f:ad:3c:0a:b7:1c:db:6f:61:86:d0:c5:
         e9:53:a8:46:40:9d:6b:cc:fb:a4:7e:8c:b8:de:3e:98:e8:9e:
         14:8b:85:62:73:1b:b4:62:bf:81:e5:a0:36:77:9b:3d:ec:7f:
         fe:70:be:ca:b0:74:96:96:0d:a8:97:e5:c5:c9:c5:de:b0:f4:
         74:b2:d4:1c:8a:4c:58:57:f5:79:fe:9f:a9:c0:91:be:b7:f2:
         ba:26:79:bd:ec:e9:d6:4f:0e:24:61:f5:ad:53:b8:36:fb:25:
         81:49:ae:e1:0d:39:e2:a5:ae:f7:12:39:2e:cc:f4:35:55:75:
         f1:c5:f7:79:98:62:76:92:dd:75:10:94:54:f0:f3:1c:24:6e:
         b2:d0:2f:88:88:43:0d:1f:9c:18:74:cf:77:e6:46:ac:49:d0:
         0c:02:71:60:c1:2c:5d:e5:0b:ab:81:b7:ca:5f:85:47:2b:4a:
         80:cc:1f:31
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUBkF6JVnyusJxA3rBayG7hagGv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMDNDRTk1MTBGM0U5NDI2OEE1Mjg2RkMzNzUyMzQ2
ODU5Rjg2MDAeFw0yNDA0MDQxNTI3NDdaFw0yNTA0MDMxNTMyNDdaMDMxMTAvBgNV
BAMTKEMxMzREMjA4ODRERTkyNEY1NUFDQzhENjQwMkE4OURBN0I3RkIyQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/fxKfdgWBgy0mdurYAq8V6M4
FLz5ZEunt9AQBGP/tZ85TdlHP5TWoj1nvPpJC8vDyWoxgxwTYQOVxwD2W6+5d4GJ
IfK17RlP2YKKTH1vRtOf+wq28QPIVJur17F0tEvWb2LH51nJXdY7VKy0ZsnPdXqH
WjnMPYO647DnJ7ty2e9F+ZiFuMxPqXEWDR5TrWqtZUDmO2K2PMX0o5mpMQBGiHq/
RbrOvhkxVjmDugPvj0V81HwK0JQeegM+uHDdL2ONB5gVyAwzMSBL6Vkl06+NlFME
USsXgp+rtR16YhvT1SNh27ooV0xByBGEOO1/twQIcV/+RYeXoUN9VVuxq5kvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwTTSCITekk9VrMjWQCqJ2nt/ss0wHwYDVR0j
BBgwFoAUR6A86VEPPpQmilKG/DdSNGhZ+GAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pFblBCTDd0SnJuSmRub1J3eDZjQWZUQ0tMOHE3NGlqcnZQZW82Rmcx
R0UvMS80N0EwM0NFOTUxMEYzRTk0MjY4QTUyODZGQzM3NTIzNDY4NTlGODYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTAzQ0U5NTEwRjNFOTQy
NjhBNTI4NkZDMzc1MjM0Njg1OUY4NjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKRW5QQkw3dEpybkpkbm9Sd3g2Y0FmVENLTDhxNzRpanJ2UGVvNkZnMUdFLzEv
MzEzMzM4MmUzMTMxMzgyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp2+DANBgkqhkiG9w0BAQsFAAOCAQEAdxp7
+m+xY+r71V4VNUjxjdNK1a3BOO2m+/xPnDxim+qHVL09p+kR8+cGKPYd8xE67fM7
hK8WVYhgBe3nkbnkNFDpESAlU7zXaPXf1Gf6f608Crcc229hhtDF6VOoRkCda8z7
pH6MuN4+mOieFIuFYnMbtGK/geWgNnebPex//nC+yrB0lpYNqJflxcnF3rD0dLLU
HIpMWFf1ef6fqcCRvrfyuiZ5vezp1k8OJGH1rVO4NvslgUmu4Q054qWu9xI5Lsz0
NVV18cX3eZhidpLddRCUVPDzHCRustAviIhDDR+cGHTPd+ZGrEnQDAJxYMEsXeUL
q4G3yl+FRytKgMwfMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 27 10:23:51 2024 by rpki-client on console-fra.rpki-client.org