Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3232382e302f32322d3234203d3e203631353734.roa
File:                     3133382e3138352e3232382e302f32322d3234203d3e203631353734.roa (raw, json)
Hash identifier:          0s2W5vU6HEwRBNM1p/UtMKSZ3MVfjOW3RF4DuSCrFBE=
Subject key identifier:   36:66:7F:DF:3E:8C:A4:99:27:FD:06:82:D6:64:30:B5:58:6C:06:97
Certificate issuer:       /CN=D4F684632F440B3CF5745FE81947C864E485E728
Certificate serial:       40424A305CB532A64C2E5732613353C344E467F6
Authority key identifier: D4:F6:84:63:2F:44:0B:3C:F5:74:5F:E8:19:47:C8:64:E4:85:E7:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F684632F440B3CF5745FE81947C864E485E728.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3232382e302f32322d3234203d3e203631353734.roa
Signing time:             Tue 23 Jul 2024 15:35:10 +0000
ROA not before:           Tue 23 Jul 2024 15:30:10 +0000
ROA not after:            Tue 22 Jul 2025 15:35:10 +0000
asID:                     61574
IP address blocks:        138.185.228.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:42:4a:30:5c:b5:32:a6:4c:2e:57:32:61:33:53:c3:44:e4:67:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F684632F440B3CF5745FE81947C864E485E728
        Validity
            Not Before: Jul 23 15:30:10 2024 GMT
            Not After : Jul 22 15:35:10 2025 GMT
        Subject: CN=36667FDF3E8CA49927FD0682D66430B5586C0697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:43:c0:0e:8d:16:3f:8c:85:26:16:c4:f9:
                    63:a9:ff:51:57:fe:a7:58:9b:5c:78:ed:0e:6c:59:
                    0b:8a:ce:dc:67:cc:ae:4e:1c:4e:d4:c0:f9:6a:4d:
                    0b:a9:4e:5e:13:59:63:38:7d:8a:67:2c:85:dc:a2:
                    af:b8:23:c3:09:94:2f:07:0d:48:6f:8b:0f:de:44:
                    d2:c5:d2:57:02:7f:87:85:31:f8:19:d6:f8:47:63:
                    99:6e:05:73:95:79:7c:65:89:3b:cb:e1:8f:42:76:
                    e0:1a:54:21:5e:90:e1:d3:1a:d6:85:56:b4:2b:c0:
                    60:80:39:06:ea:63:6c:05:26:53:f7:fc:cc:86:df:
                    11:52:c9:6d:71:28:3a:78:c4:03:3d:04:21:d8:1e:
                    4d:a5:0d:0b:a1:d0:9d:80:7b:9e:1a:20:bd:f1:7c:
                    6b:93:5e:07:1b:ca:68:7a:1e:56:cc:24:f0:f8:14:
                    48:cf:eb:a9:be:48:d0:93:56:34:78:3f:04:5b:5a:
                    b1:08:fe:c3:4d:e5:e8:db:ad:db:c6:eb:5f:f2:9e:
                    53:5e:47:f1:8a:c9:f0:92:31:50:db:f1:cc:a3:e4:
                    36:54:fc:4f:9c:07:61:a1:e1:5a:f1:36:c8:ff:58:
                    59:b1:10:0a:de:2f:a1:03:27:be:6d:a1:7d:54:97:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:7F:DF:3E:8C:A4:99:27:FD:06:82:D6:64:30:B5:58:6C:06:97
            X509v3 Authority Key Identifier:
                keyid:D4:F6:84:63:2F:44:0B:3C:F5:74:5F:E8:19:47:C8:64:E4:85:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/D4F684632F440B3CF5745FE81947C864E485E728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F684632F440B3CF5745FE81947C864E485E728.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3232382e302f32322d3234203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:25:d2:4a:3a:e1:54:ed:4d:7f:4f:6c:be:4e:2a:97:a4:79:
         2e:b5:23:4b:25:50:94:61:25:9b:05:c9:94:26:37:3c:26:67:
         da:b1:66:e6:72:42:f1:ff:ff:4b:33:2d:56:e4:27:b0:42:c0:
         31:1e:1b:d9:f9:89:b8:79:f7:c9:b6:37:2f:18:99:99:55:a2:
         d9:2d:ec:45:a4:37:22:49:01:0a:d8:fd:a9:6f:d9:88:68:ff:
         75:74:ea:5a:27:58:6d:16:f2:94:12:c0:fa:4b:fe:0a:a4:2a:
         82:85:a5:bc:d5:8d:af:ce:90:74:54:ab:58:61:81:d3:15:c6:
         4b:46:c7:73:c5:48:07:23:59:5c:c6:cc:7c:ba:b0:79:46:93:
         7c:e3:00:fb:6d:2b:b5:1a:bf:6c:57:87:bb:6b:a1:d5:ef:56:
         d4:29:34:4d:00:54:17:56:d1:ac:a2:45:68:60:51:7b:b3:87:
         c8:1b:a1:b0:06:85:24:01:61:ef:51:9d:65:6d:4a:17:5a:3a:
         de:f4:c8:c7:06:43:31:cb:e5:c1:f9:7e:71:c3:fe:0a:15:04:
         7d:7b:82:b0:ca:57:24:d5:64:f3:b8:13:08:d1:a3:5e:92:20:
         54:33:7d:b8:00:ef:e2:e8:de:a5:0e:0b:2e:45:0e:48:37:81:
         47:dd:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 18:15:03 2024 by rpki-client on console-fra.rpki-client.org