Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3235302e302f32342d3234203d3e20323634323639.roa
File:                     3133382e3131382e3235302e302f32342d3234203d3e20323634323639.roa (raw, json)
Hash identifier:          zPqN6RHkwsznRrEyRwtIJwtbbdOPxkStS/1QXC3XQ6w=
Subject key identifier:   06:50:62:C0:F8:E4:56:D9:8D:61:09:53:78:10:34:85:01:5C:01:27
Certificate issuer:       /CN=47A03CE9510F3E94268A5286FC3752346859F860
Certificate serial:       5FCC1680D19F6AB9882991DD4C4C788E4A530B2A
Authority key identifier: 47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3235302e302f32342d3234203d3e20323634323639.roa
Signing time:             Thu 04 Apr 2024 15:32:47 +0000
ROA not before:           Thu 04 Apr 2024 15:27:47 +0000
ROA not after:            Thu 03 Apr 2025 15:32:47 +0000
asID:                     264269
IP address blocks:        138.118.250.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cc:16:80:d1:9f:6a:b9:88:29:91:dd:4c:4c:78:8e:4a:53:0b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A03CE9510F3E94268A5286FC3752346859F860
        Validity
            Not Before: Apr  4 15:27:47 2024 GMT
            Not After : Apr  3 15:32:47 2025 GMT
        Subject: CN=065062C0F8E456D98D61095378103485015C0127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:e2:ff:79:7c:54:be:30:fe:2e:2e:8c:c8:
                    cf:ab:cb:b9:64:1d:1a:e5:c3:7a:24:e3:0f:33:8a:
                    ca:e2:9f:07:22:09:38:2e:25:42:11:c0:a0:c6:be:
                    3c:94:53:72:a1:10:fe:4b:f4:8e:aa:02:44:f9:bb:
                    02:7a:9e:7a:e2:28:6d:7f:4b:a8:c3:35:28:df:12:
                    23:35:63:53:c0:6f:c8:23:5a:bf:5b:b3:53:32:3a:
                    3f:d8:cf:02:0d:3d:89:55:7c:94:24:d6:f2:5c:e7:
                    49:42:1c:9b:fa:82:a1:d5:62:96:e3:51:90:16:46:
                    89:da:41:0b:41:af:6f:9e:fe:50:6f:e6:5f:3c:94:
                    4b:74:8d:1f:a7:53:cd:33:88:e0:d4:37:13:9f:7e:
                    1c:62:2e:ab:b2:6e:6a:85:31:68:4a:9f:1b:15:47:
                    75:07:ab:a9:82:bb:f6:23:d6:14:6c:de:99:5d:c8:
                    3e:90:f4:c8:30:fb:11:32:71:d2:f5:23:93:a5:2f:
                    ed:b2:80:19:6b:0a:88:e7:72:d3:f2:e9:38:f5:02:
                    f8:9a:73:0c:2c:1f:fd:a8:a7:3c:cf:0f:c2:ce:d5:
                    58:7f:e5:df:73:af:f9:a0:a5:e7:fb:38:5a:7f:ad:
                    7a:07:3a:24:c6:d6:aa:ac:5e:58:a6:81:65:8b:7d:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:50:62:C0:F8:E4:56:D9:8D:61:09:53:78:10:34:85:01:5C:01:27
            X509v3 Authority Key Identifier:
                keyid:47:A0:3C:E9:51:0F:3E:94:26:8A:52:86:FC:37:52:34:68:59:F8:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/47A03CE9510F3E94268A5286FC3752346859F860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A03CE9510F3E94268A5286FC3752346859F860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/1/3133382e3131382e3235302e302f32342d3234203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:0e:ae:9e:e1:87:aa:fd:05:a7:77:c3:95:c4:79:0e:1a:
         8e:fc:2c:8c:35:09:8a:30:2b:8c:7b:ad:df:70:0b:6e:a1:18:
         7d:77:ae:f3:f5:f0:65:39:5a:03:0c:10:c4:23:39:c3:56:e6:
         5f:61:02:a1:9f:aa:6a:55:91:36:dc:41:fb:f0:fd:84:1a:31:
         b8:f7:23:49:5a:4f:3e:96:6f:97:1e:79:d0:ee:56:32:29:23:
         8a:52:10:2f:76:7d:01:e2:89:c2:4a:39:24:68:6a:27:f7:23:
         71:e5:39:ab:53:db:96:39:43:28:d8:e7:5c:d4:aa:6a:93:87:
         f6:65:45:e1:5e:1d:90:d7:ab:bf:47:49:e8:71:77:78:5c:19:
         8d:3d:ca:fc:aa:12:7e:de:b5:6e:50:36:9b:0b:2b:b3:82:07:
         05:db:a5:b7:c6:98:23:82:b0:41:07:52:f6:9f:af:9e:e0:5a:
         65:64:47:69:a1:56:25:12:b9:1a:bc:42:6f:b7:d5:3e:07:45:
         bf:c1:ad:7f:ad:a4:4b:63:ca:ea:5c:cd:14:19:06:3c:3a:7c:
         ec:e9:72:0e:32:2e:20:54:ae:a5:0b:a2:38:99:63:9c:df:e6:
         90:1e:8e:62:48:af:9e:ed:b7:bd:18:6d:f7:a2:00:3e:66:69:
         87:fd:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 12:26:53 2024 by rpki-client on console-ams.rpki-client.org