Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa
File:                     3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa (raw, json)
Hash identifier:          YP1fak30VZHDDcfLH2LEUuiEBdvt5F00h4ZSpuNq840=
Subject key identifier:   E6:27:D9:C3:6D:E6:FD:E0:F0:42:DD:6A:8B:F0:DC:49:BB:5B:13:C2
Certificate issuer:       /CN=47A03CE9510F3E94268A5286FC3752346859F860
Certificate serial:       4DC539F74AFC8F1CF641F98330CFEA1930205DE1
Authority key identifier: 47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa
Signing time:             Thu 04 Apr 2024 15:32:48 +0000
ROA not before:           Thu 04 Apr 2024 15:27:48 +0000
ROA not after:            Thu 03 Apr 2025 15:32:48 +0000
asID:                     264269
IP address blocks:        138.118.250.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c5:39:f7:4a:fc:8f:1c:f6:41:f9:83:30:cf:ea:19:30:20:5d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A03CE9510F3E94268A5286FC3752346859F860
        Validity
            Not Before: Apr  4 15:27:48 2024 GMT
            Not After : Apr  3 15:32:48 2025 GMT
        Subject: CN=E627D9C36DE6FDE0F042DD6A8BF0DC49BB5B13C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:ee:42:04:90:67:64:de:ef:1d:85:22:8d:
                    00:7e:a6:c9:ef:1d:1a:77:f4:54:2c:0d:62:dc:71:
                    3f:af:d1:c6:8f:6d:64:f1:4c:f6:c4:3c:c8:ae:7f:
                    7f:c6:fc:62:7a:1e:1e:30:a4:ab:d8:d0:0d:f0:ab:
                    d7:35:51:76:26:ec:74:d4:66:00:5d:1b:e5:c8:15:
                    62:11:d2:3f:b2:0e:07:1b:0e:1a:e5:11:f9:b2:28:
                    07:c1:f0:17:c4:15:29:aa:26:fe:3a:ff:15:16:ff:
                    1b:84:c6:d5:4f:53:87:69:25:fa:ce:d8:1f:ae:dd:
                    ad:64:65:11:4f:e3:83:39:f9:c4:ea:f0:8f:ae:dd:
                    53:bd:7e:cb:63:44:c0:ce:9b:be:90:73:11:bc:b9:
                    1e:d9:ec:a4:23:ed:01:3d:f2:7e:db:15:65:47:5a:
                    78:e0:39:ae:4a:e8:35:cd:e0:0e:42:1d:88:a3:72:
                    78:22:46:8f:71:54:16:d3:90:1f:8d:3c:d1:3f:f3:
                    06:c6:e1:9b:29:1f:27:36:83:43:2b:41:ca:7d:0a:
                    24:03:f5:35:11:5d:90:de:7d:9f:92:27:e6:37:40:
                    b0:24:b1:e6:2b:0d:77:49:60:bb:ee:93:46:db:0c:
                    dd:d7:e9:2a:29:e5:0b:c8:28:7f:e7:70:db:d9:28:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:D9:C3:6D:E6:FD:E0:F0:42:DD:6A:8B:F0:DC:49:BB:5B:13:C2
            X509v3 Authority Key Identifier:
                keyid:47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/47A03CE9510F3E94268A5286FC3752346859F860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:16:e1:6c:6a:33:3d:37:8c:db:b9:47:e9:37:ab:f3:7a:ba:
         0d:d0:f5:43:6f:b1:53:a9:05:46:6c:eb:89:37:4e:77:ff:49:
         45:fd:76:f4:97:0c:bd:c3:d9:37:7f:4e:1e:e9:51:8a:d6:e6:
         b1:ae:e5:45:19:fe:d9:6d:25:0e:67:3b:b0:6c:ca:77:7c:f5:
         c0:19:66:31:6f:21:af:ee:1e:ba:92:44:a0:53:27:fd:1b:44:
         e9:c4:9e:c9:b6:ca:b6:fe:52:fb:94:c4:d5:9a:77:d5:82:20:
         fc:19:39:86:ac:5c:6a:57:ab:cc:fe:92:c8:a8:b5:e4:76:98:
         85:44:d8:5c:20:1b:94:9c:99:89:c3:82:7a:81:65:42:0f:a1:
         c5:34:8e:9d:c0:e6:da:58:0d:25:db:64:10:ed:87:a7:b9:ed:
         6c:71:06:d9:cd:79:a2:dd:6c:41:04:d5:52:b8:6c:51:f3:4a:
         c3:be:2c:99:15:57:51:c7:c9:9e:7f:61:8c:a2:e2:a0:c9:89:
         4e:b7:25:0a:23:29:d9:02:39:df:e9:23:43:e6:9a:34:70:99:
         f3:de:ed:c2:f0:ec:c0:1f:1c:18:00:35:c3:89:bb:dc:dd:6c:
         dd:73:c9:dc:aa:d4:27:b4:e0:9d:86:32:88:80:2d:32:48:d5:
         98:a8:f7:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTcU590r8jxz2QfmDMM/qGTAgXeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMDNDRTk1MTBGM0U5NDI2OEE1Mjg2RkMzNzUyMzQ2
ODU5Rjg2MDAeFw0yNDA0MDQxNTI3NDhaFw0yNTA0MDMxNTMyNDhaMDMxMTAvBgNV
BAMTKEU2MjdEOUMzNkRFNkZERTBGMDQyREQ2QThCRjBEQzQ5QkI1QjEzQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDire5CBJBnZN7vHYUijQB+psnv
HRp39FQsDWLccT+v0caPbWTxTPbEPMiuf3/G/GJ6Hh4wpKvY0A3wq9c1UXYm7HTU
ZgBdG+XIFWIR0j+yDgcbDhrlEfmyKAfB8BfEFSmqJv46/xUW/xuExtVPU4dpJfrO
2B+u3a1kZRFP44M5+cTq8I+u3VO9fstjRMDOm76QcxG8uR7Z7KQj7QE98n7bFWVH
WnjgOa5K6DXN4A5CHYijcngiRo9xVBbTkB+NPNE/8wbG4ZspHyc2g0MrQcp9CiQD
9TURXZDefZ+SJ+Y3QLAkseYrDXdJYLvuk0bbDN3X6Sop5QvIKH/ncNvZKBuvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5ifZw23m/eDwQt1qi/DcSbtbE8IwHwYDVR0j
BBgwFoAUR6A86VEPPpQmilKG/DdSNGhZ+GAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pFblBCTDd0SnJuSmRub1J3eDZjQWZUQ0tMOHE3NGlqcnZQZW82Rmcx
R0UvMS80N0EwM0NFOTUxMEYzRTk0MjY4QTUyODZGQzM3NTIzNDY4NTlGODYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTAzQ0U5NTEwRjNFOTQy
NjhBNTI4NkZDMzc1MjM0Njg1OUY4NjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKRW5QQkw3dEpybkpkbm9Sd3g2Y0FmVENLTDhxNzRpanJ2UGVvNkZnMUdFLzEv
MzEzMzM4MmUzMTMxMzgyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp2+jANBgkqhkiG9w0BAQsFAAOCAQEAChbh
bGozPTeM27lH6Ter83q6DdD1Q2+xU6kFRmzriTdOd/9JRf129JcMvcPZN39OHulR
itbmsa7lRRn+2W0lDmc7sGzKd3z1wBlmMW8hr+4eupJEoFMn/RtE6cSeybbKtv5S
+5TE1Zp31YIg/Bk5hqxcalerzP6SyKi15HaYhUTYXCAblJyZicOCeoFlQg+hxTSO
ncDm2lgNJdtkEO2Hp7ntbHEG2c15ot1sQQTVUrhsUfNKw74smRVXUcfJnn9hjKLi
oMmJTrclCiMp2QI53+kjQ+aaNHCZ897twvDswB8cGAA1w4m73N1s3XPJ3KrUJ7Tg
nYYyiIAtMkjVmKj3+w==
-----END CERTIFICATE-----
Generated at Thu Jun 27 10:23:51 2024 by rpki-client on console-fra.rpki-client.org