Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/3133382e33362e32382e302f32322d3234203d3e203532383037.roa
File:                     3133382e33362e32382e302f32322d3234203d3e203532383037.roa (raw, json)
Hash identifier:          RVKwfxnh98YO0XWA+yovZseY2dNVMx9E/6mnUQ3JmOY=
Subject key identifier:   59:37:CA:19:56:92:9E:70:A5:F1:00:3F:45:FD:C3:58:14:0E:3F:AF
Certificate issuer:       /CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
Certificate serial:       1008BCD27A82691F880E3F461BC3965426E23C5F
Authority key identifier: 39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/3133382e33362e32382e302f32322d3234203d3e203532383037.roa
Signing time:             Wed 10 Apr 2024 13:29:21 +0000
ROA not before:           Wed 10 Apr 2024 13:24:21 +0000
ROA not after:            Wed 09 Apr 2025 13:29:21 +0000
asID:                     52807
IP address blocks:        138.36.28.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:08:bc:d2:7a:82:69:1f:88:0e:3f:46:1b:c3:96:54:26:e2:3c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
        Validity
            Not Before: Apr 10 13:24:21 2024 GMT
            Not After : Apr  9 13:29:21 2025 GMT
        Subject: CN=5937CA1956929E70A5F1003F45FDC358140E3FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:43:a7:ab:96:3a:02:8b:3b:6c:a9:7a:48:
                    4d:e0:3b:a2:eb:64:6d:d3:9b:ad:f4:03:13:a1:9b:
                    1f:00:dc:bc:22:33:cd:30:a2:98:93:62:f2:c3:d2:
                    85:24:a4:6e:a5:c6:ec:92:9d:fe:4f:14:01:e2:eb:
                    7f:e2:1e:4d:ba:4d:47:03:3d:a4:0f:1a:a0:7a:b9:
                    6d:95:55:41:e4:29:47:f6:0a:2d:3c:84:e3:92:ee:
                    84:df:18:63:bd:a1:78:0c:ad:d4:11:50:1f:52:98:
                    6c:45:7f:20:28:82:4b:54:05:b1:de:56:15:42:15:
                    ac:97:ec:e1:7d:aa:20:de:ed:3a:c8:f8:b0:4c:c5:
                    9a:29:bc:2f:4a:df:db:e5:71:bc:eb:7d:58:37:aa:
                    e9:ce:d6:f3:2d:d8:81:7d:5a:5f:a7:ad:bc:8d:4b:
                    df:35:bd:a9:3b:9d:04:d3:94:7b:cf:78:0c:15:eb:
                    59:b9:76:86:1d:39:54:b5:63:7e:02:04:ff:01:78:
                    46:13:d1:04:94:8c:d6:1f:c7:ba:b5:ef:c1:3f:89:
                    5e:94:77:46:73:98:87:9f:7e:94:03:30:cb:13:04:
                    44:5a:e9:24:c8:c8:8e:cd:97:43:9d:7e:7c:e5:a4:
                    cb:28:72:70:59:4e:8a:e4:5a:6f:bd:5d:65:13:e8:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:37:CA:19:56:92:9E:70:A5:F1:00:3F:45:FD:C3:58:14:0E:3F:AF
            X509v3 Authority Key Identifier:
                keyid:39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/3133382e33362e32382e302f32322d3234203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:ae:eb:b1:1f:27:83:b3:92:83:cb:4e:4f:3d:67:e9:39:b2:
         e2:af:df:0e:60:cb:af:98:64:19:68:77:c6:30:2d:11:31:b6:
         e3:3e:b7:2c:b7:9f:0d:8a:27:21:ac:ee:09:27:90:a3:60:bd:
         d9:bb:76:37:da:9c:ef:58:29:51:dc:0b:5c:e6:a9:af:56:e7:
         94:cb:d1:76:f5:66:6b:ef:29:e4:47:d7:d9:63:21:b3:47:a8:
         c3:3c:4b:f1:35:0b:13:5e:0b:db:67:10:3e:11:b0:fc:20:65:
         d3:2d:d7:d9:e9:ad:14:cb:53:91:51:85:e5:73:4f:37:85:b3:
         61:7c:b2:db:db:85:1e:90:e4:75:36:b8:62:d9:43:c9:a3:01:
         c1:41:09:ea:d6:7a:c2:b3:29:a1:75:4b:1d:0c:06:92:15:13:
         1d:62:e3:3e:7c:d9:fb:ca:36:96:8f:af:65:10:7c:cc:47:42:
         4e:b3:bc:34:c3:ec:fe:4f:15:e2:62:45:32:5a:f6:06:25:47:
         b2:f5:56:04:17:50:3f:b7:8e:44:c4:76:58:6a:b9:28:a5:fa:
         7c:c1:de:de:97:78:c5:3a:a8:24:41:31:e3:cb:1b:b4:b9:44:
         15:ba:e7:63:18:aa:57:11:1a:9a:49:18:1a:ee:6b:1a:60:59:
         2d:28:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 17:08:19 2024 by rpki-client on console-fra.rpki-client.org