Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/3133382e35392e3232302e302f32322d3332203d3e20323634313237.roa
File:                     3133382e35392e3232302e302f32322d3332203d3e20323634313237.roa (raw, json)
Hash identifier:          8bqbHYm6W6VMj3S0zAMF53DFsYvpcAfHrY327UkDXF4=
Subject key identifier:   DD:4B:0B:B8:D0:DA:B8:88:47:7A:3C:BF:DD:93:30:E1:29:AB:17:B7
Certificate issuer:       /CN=AB528ABCEBD06A657080F8532041E15F1CC2F2B9
Certificate serial:       7C64035744D7A99F956D33A304A4C04E5671C472
Authority key identifier: AB:52:8A:BC:EB:D0:6A:65:70:80:F8:53:20:41:E1:5F:1C:C2:F2:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/3133382e35392e3232302e302f32322d3332203d3e20323634313237.roa
Signing time:             Mon 27 May 2024 14:22:38 +0000
ROA not before:           Mon 27 May 2024 14:17:38 +0000
ROA not after:            Mon 26 May 2025 14:22:38 +0000
asID:                     264127
IP address blocks:        138.59.220.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:64:03:57:44:d7:a9:9f:95:6d:33:a3:04:a4:c0:4e:56:71:c4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB528ABCEBD06A657080F8532041E15F1CC2F2B9
        Validity
            Not Before: May 27 14:17:38 2024 GMT
            Not After : May 26 14:22:38 2025 GMT
        Subject: CN=DD4B0BB8D0DAB888477A3CBFDD9330E129AB17B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:c7:4d:36:04:e6:6c:4d:aa:3e:3c:9f:c1:
                    e1:b4:72:bb:3e:28:f9:e2:81:ad:44:eb:e7:9a:c5:
                    a4:59:9a:74:44:45:dd:9d:2e:8c:19:eb:d9:ac:9b:
                    22:1b:7d:33:44:0a:f5:da:7d:9f:9a:19:eb:b5:3e:
                    dc:f2:b3:81:4d:46:7e:ae:a9:fa:f0:84:36:73:23:
                    5c:d5:d4:23:d5:e4:ea:df:f4:2b:8a:69:50:b6:04:
                    bf:84:01:40:2f:47:2d:07:26:da:d3:ae:b6:99:70:
                    d2:04:61:41:3d:4b:4b:3d:e7:96:2b:ed:f1:db:fd:
                    d5:a1:d5:19:a3:49:c7:23:81:1e:13:9f:3a:33:78:
                    90:cc:ef:e1:02:41:70:2c:d1:82:9c:d2:16:8d:2c:
                    4e:d3:81:a6:67:7a:48:07:16:3a:44:07:88:ad:c7:
                    2a:ac:75:48:24:4a:dd:35:d0:59:a1:95:a1:47:7d:
                    13:71:0e:27:1c:80:de:e0:81:8d:63:8d:78:c2:c0:
                    0d:11:ac:d9:f4:29:f5:90:ef:73:62:ea:25:f5:29:
                    25:71:2b:4a:b4:5d:47:b3:d5:4a:62:46:a9:c9:8c:
                    99:68:86:9d:08:87:21:46:0c:7a:62:1c:60:9a:e6:
                    2e:5e:00:d7:2f:f5:f4:74:5e:df:e3:76:8d:1d:cd:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:0B:B8:D0:DA:B8:88:47:7A:3C:BF:DD:93:30:E1:29:AB:17:B7
            X509v3 Authority Key Identifier:
                keyid:AB:52:8A:BC:EB:D0:6A:65:70:80:F8:53:20:41:E1:5F:1C:C2:F2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/3133382e35392e3232302e302f32322d3332203d3e20323634313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:8c:79:0d:72:fb:98:1f:fc:1d:6a:c8:b1:77:ac:ef:4c:
         07:c5:c6:87:30:8a:b2:27:5c:1d:c7:c9:4a:36:5e:f8:d6:a2:
         22:98:c7:92:e1:28:63:07:b6:d2:59:d7:b3:e7:8d:fa:88:5f:
         ed:49:a6:ae:6e:2f:7b:22:6a:44:2e:af:a7:67:b4:45:94:bb:
         b6:53:a8:07:38:19:bd:6b:21:d7:b7:44:cc:2a:35:ef:fe:67:
         5a:5c:e5:d3:c1:3e:41:7a:af:cb:17:3c:5e:d9:a7:02:c6:ef:
         7c:c1:16:f7:87:df:5a:7f:f3:39:fd:b0:61:24:40:7c:0e:8d:
         89:f0:9d:b8:be:56:46:29:cc:55:d4:77:42:dd:5f:da:01:ff:
         2f:19:aa:4f:50:b7:9c:3a:0a:c0:90:c6:3f:fe:84:2a:46:7f:
         dc:11:4a:b3:7e:93:0a:9c:48:16:e6:c3:dd:b1:38:3b:6f:06:
         6e:85:cd:02:35:f3:49:44:47:c7:b4:c0:aa:ee:fd:a2:b6:2b:
         89:ef:72:49:b9:88:6b:e3:c2:95:ae:65:78:3c:e4:fa:dd:99:
         6f:82:e9:c3:6e:e1:82:10:96:af:28:31:08:82:24:14:c5:2f:
         b9:93:39:ad:8d:20:0f:c0:6f:0c:b3:03:26:f1:ba:93:9c:2e:
         ac:9f:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 16:11:30 2024 by rpki-client on console-fra.rpki-client.org