Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa
File:                     3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa (raw, json)
Hash identifier:          pqS9RHPi9ZpdTGFlhCQAgkak4r/TFWMdRsID2AfvmRE=
Subject key identifier:   DA:4E:72:B7:A2:61:FA:FB:2B:D3:79:41:A5:2F:F2:23:F1:16:67:9C
Certificate issuer:       /CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
Certificate serial:       4B598110A2A557D49CBF7A529FFFBE84F4D948EB
Authority key identifier: 9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa
Signing time:             Tue 30 Apr 2024 18:18:28 +0000
ROA not before:           Tue 30 Apr 2024 18:13:28 +0000
ROA not after:            Tue 29 Apr 2025 18:18:28 +0000
asID:                     61574
IP address blocks:        138.185.229.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:81:10:a2:a5:57:d4:9c:bf:7a:52:9f:ff:be:84:f4:d9:48:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
        Validity
            Not Before: Apr 30 18:13:28 2024 GMT
            Not After : Apr 29 18:18:28 2025 GMT
        Subject: CN=DA4E72B7A261FAFB2BD37941A52FF223F116679C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:7c:29:aa:08:96:17:7c:39:2f:55:7b:48:
                    c1:df:ce:c7:66:f6:47:ee:2e:3b:ef:15:89:73:ac:
                    9c:e6:60:98:db:01:58:6d:00:ba:e1:aa:bd:31:b9:
                    ec:cf:f9:16:72:b7:d1:41:69:1e:5c:f4:a5:0e:58:
                    47:8a:b4:9a:56:6c:cf:09:10:13:a2:be:13:00:5a:
                    2f:b3:ff:bd:cb:ce:79:9b:db:3f:68:19:23:30:c5:
                    4c:7e:6b:5f:0b:01:31:27:e4:56:5b:0a:df:19:ad:
                    82:28:03:4e:7e:80:60:69:94:fc:34:2a:ad:92:88:
                    e2:68:ef:90:b4:07:76:cb:fb:f3:e0:27:dd:65:13:
                    e9:1c:dd:9a:98:a3:f8:5a:d9:9f:d7:3e:ea:61:79:
                    ea:f1:3e:80:35:49:f8:b1:77:07:10:c8:4c:aa:8e:
                    35:05:8e:53:ee:09:69:68:25:84:e1:91:3f:fa:db:
                    b0:29:54:40:c4:fc:1a:43:19:1d:76:31:66:33:3d:
                    23:fa:6c:de:c9:a3:b2:4c:69:fa:a8:65:36:62:7a:
                    da:f7:f7:4e:e1:43:96:29:65:63:81:d1:d5:bb:58:
                    f0:29:56:11:0f:b5:e0:18:93:65:99:95:fa:0a:c1:
                    26:9d:d4:4f:3a:5d:47:9b:69:1f:7e:8b:39:6c:be:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:72:B7:A2:61:FA:FB:2B:D3:79:41:A5:2F:F2:23:F1:16:67:9C
            X509v3 Authority Key Identifier:
                keyid:9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:74:42:a6:fe:cf:ec:8a:dd:07:af:b3:3d:a3:49:4c:48:d3:
         a2:ca:48:da:2a:49:1e:ff:43:9e:07:f9:e6:8f:85:d8:bf:21:
         45:c1:19:4e:11:2f:60:0a:09:ac:d6:a0:0d:4a:6b:b5:b2:2a:
         fa:8b:49:32:8f:4e:a0:2f:bf:ec:93:d7:29:81:89:c3:8e:6b:
         3a:ac:3e:72:46:90:1e:8c:11:93:5b:c5:f0:43:89:a6:2e:93:
         f5:42:c1:41:92:42:86:83:c2:d2:0a:01:af:dc:2b:48:f4:81:
         6d:98:80:0d:94:38:15:69:0e:8e:0f:bd:66:1a:c9:a4:a9:7f:
         b7:b1:a1:8f:ca:5f:0d:e7:9a:44:ff:3c:02:ec:c8:65:48:2a:
         ee:56:5d:88:0b:73:2f:2c:d9:6a:94:53:10:61:99:fd:18:91:
         47:c4:b4:f6:f7:98:d3:36:90:6e:c9:2a:03:8a:36:80:14:13:
         33:67:ae:f4:c1:5a:2a:c0:8f:b3:8c:86:e4:b8:06:bc:3a:45:
         2c:95:d5:34:3c:83:f1:95:42:33:4c:01:90:f4:7c:42:fe:a2:
         2f:86:b6:56:7b:44:74:a4:9c:de:f0:e1:55:b2:63:b4:01:a7:
         a7:45:3b:6e:e3:a8:14:a6:1a:59:b7:8f:22:a0:20:35:23:a0:
         29:2d:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 16:12:22 2024 by rpki-client on console-ams.rpki-client.org