Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa
File:                     3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa (raw, json)
Hash identifier:          +k/hn0h3ZdJJ6AEYDoHF/ynRZW/AWa4vi8kxExRiIgQ=
Subject key identifier:   73:7B:B7:A6:B0:40:BD:90:D1:20:B8:76:5A:55:66:02:5F:CB:57:99
Certificate issuer:       /CN=47A03CE9510F3E94268A5286FC3752346859F860
Certificate serial:       0A27DA86E2A889D5ED59C3D8375BF682190CF117
Authority key identifier: 47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa
Signing time:             Thu 04 Apr 2024 15:32:47 +0000
ROA not before:           Thu 04 Apr 2024 15:27:47 +0000
ROA not after:            Thu 03 Apr 2025 15:32:47 +0000
asID:                     264269
IP address blocks:        138.118.249.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:27:da:86:e2:a8:89:d5:ed:59:c3:d8:37:5b:f6:82:19:0c:f1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A03CE9510F3E94268A5286FC3752346859F860
        Validity
            Not Before: Apr  4 15:27:47 2024 GMT
            Not After : Apr  3 15:32:47 2025 GMT
        Subject: CN=737BB7A6B040BD90D120B8765A5566025FCB5799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:03:65:53:43:55:e1:75:f0:0d:8e:56:4a:
                    ff:4f:31:36:0b:b3:18:97:5f:c5:31:4d:0a:6b:89:
                    84:04:b2:ff:cc:0d:ed:f2:a2:51:2d:d6:5c:34:c0:
                    d7:7e:4c:7f:7f:f4:d8:6a:79:2f:89:a3:47:a6:78:
                    08:41:5a:e9:b0:06:14:e8:2c:b4:2d:37:80:e1:a8:
                    fe:2a:a4:5f:3c:55:71:4d:2d:33:66:c1:77:e0:52:
                    7d:a0:dc:4c:fe:cb:f9:aa:29:56:2b:99:e1:a9:ba:
                    6b:53:29:66:77:ae:a3:a2:38:89:eb:29:be:17:a5:
                    2c:b2:16:08:21:66:9a:38:d9:ea:37:1e:b1:af:22:
                    3a:e5:39:3e:a3:5b:48:53:23:03:6a:b4:5d:60:58:
                    a0:13:8f:b3:ae:e3:b9:30:1a:74:d8:28:46:82:91:
                    c6:4a:db:03:98:11:39:00:70:b8:8f:09:ba:09:07:
                    e5:3f:45:5d:af:19:47:b2:3e:04:55:2e:16:cf:f0:
                    fa:74:5e:3d:a1:f5:91:e1:9a:c4:d2:09:6b:67:8b:
                    d4:c3:49:ec:66:e5:a3:62:a3:c5:c2:2d:25:c9:02:
                    53:83:51:e7:05:31:bd:38:5e:46:e1:53:30:83:a3:
                    ef:01:8a:be:c4:11:fc:a8:eb:9e:95:26:87:96:e6:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7B:B7:A6:B0:40:BD:90:D1:20:B8:76:5A:55:66:02:5F:CB:57:99
            X509v3 Authority Key Identifier:
                keyid:47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/47A03CE9510F3E94268A5286FC3752346859F860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:99:4a:de:8f:d8:05:f9:73:4c:5a:30:5f:76:e3:00:e4:ae:
         1e:6d:47:23:97:63:eb:0c:f0:62:ec:18:d6:c1:00:3f:3f:0d:
         9c:94:5a:b4:59:a9:89:a2:74:85:6f:30:dc:df:75:da:78:44:
         e1:59:09:ec:e1:82:94:c2:65:ed:6f:3c:28:84:b6:96:97:2d:
         3f:b6:5e:2d:77:16:f2:e7:bf:0f:78:87:59:83:f7:8e:1c:6e:
         0f:92:f6:ed:e2:14:d2:37:11:22:5d:0d:08:95:f7:a8:f2:ee:
         3b:05:12:04:20:5b:57:ee:04:98:d6:59:f1:a8:c3:82:c3:d0:
         a2:71:b7:4b:91:49:0b:b5:3e:7b:ca:6c:e2:75:4c:36:fb:b2:
         55:b5:b9:5d:23:ce:5c:74:11:01:44:aa:64:d7:4c:3c:90:98:
         1c:59:79:40:5f:c5:c4:ec:a6:d4:57:58:57:3a:25:b1:e6:25:
         d3:0e:73:a6:ef:3c:5e:5c:6d:e3:a2:1f:8e:4c:52:4e:33:50:
         fb:27:95:c8:b3:16:3e:92:98:d2:95:73:c2:57:e3:80:7a:c4:
         8f:da:ec:40:2f:65:2a:3d:f5:0b:13:80:3f:80:a1:23:ce:8a:
         43:a9:52:27:6d:33:71:f2:76:80:ca:a8:fb:18:18:98:a9:67:
         6d:28:f9:6f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCifahuKoidXtWcPYN1v2ghkM8RcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMDNDRTk1MTBGM0U5NDI2OEE1Mjg2RkMzNzUyMzQ2
ODU5Rjg2MDAeFw0yNDA0MDQxNTI3NDdaFw0yNTA0MDMxNTMyNDdaMDMxMTAvBgNV
BAMTKDczN0JCN0E2QjA0MEJEOTBEMTIwQjg3NjVBNTU2NjAyNUZDQjU3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqANlU0NV4XXwDY5WSv9PMTYL
sxiXX8UxTQpriYQEsv/MDe3yolEt1lw0wNd+TH9/9NhqeS+Jo0emeAhBWumwBhTo
LLQtN4DhqP4qpF88VXFNLTNmwXfgUn2g3Ez+y/mqKVYrmeGpumtTKWZ3rqOiOInr
Kb4XpSyyFgghZpo42eo3HrGvIjrlOT6jW0hTIwNqtF1gWKATj7Ou47kwGnTYKEaC
kcZK2wOYETkAcLiPCboJB+U/RV2vGUeyPgRVLhbP8Pp0Xj2h9ZHhmsTSCWtni9TD
Sexm5aNio8XCLSXJAlODUecFMb04XkbhUzCDo+8Bir7EEfyo656VJoeW5k7NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUc3u3prBAvZDRILh2WlVmAl/LV5kwHwYDVR0j
BBgwFoAUR6A86VEPPpQmilKG/DdSNGhZ+GAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pFblBCTDd0SnJuSmRub1J3eDZjQWZUQ0tMOHE3NGlqcnZQZW82Rmcx
R0UvMS80N0EwM0NFOTUxMEYzRTk0MjY4QTUyODZGQzM3NTIzNDY4NTlGODYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTAzQ0U5NTEwRjNFOTQy
NjhBNTI4NkZDMzc1MjM0Njg1OUY4NjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKRW5QQkw3dEpybkpkbm9Sd3g2Y0FmVENLTDhxNzRpanJ2UGVvNkZnMUdFLzEv
MzEzMzM4MmUzMTMxMzgyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp2+TANBgkqhkiG9w0BAQsFAAOCAQEAVZlK
3o/YBflzTFowX3bjAOSuHm1HI5dj6wzwYuwY1sEAPz8NnJRatFmpiaJ0hW8w3N91
2nhE4VkJ7OGClMJl7W88KIS2lpctP7ZeLXcW8ue/D3iHWYP3jhxuD5L27eIU0jcR
Il0NCJX3qPLuOwUSBCBbV+4EmNZZ8ajDgsPQonG3S5FJC7U+e8ps4nVMNvuyVbW5
XSPOXHQRAUSqZNdMPJCYHFl5QF/FxOym1FdYVzolseYl0w5zpu88Xlxt46IfjkxS
TjNQ+yeVyLMWPpKY0pVzwlfjgHrEj9rsQC9lKj31CxOAP4ChI86KQ6lSJ20zcfJ2
gMqo+xgYmKlnbSj5bw==
-----END CERTIFICATE-----
Generated at Thu Jun 27 12:26:53 2024 by rpki-client on console-ams.rpki-client.org