Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32322d3234203d3e20323634353632.roa
File:                     3133382e33362e302e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          yLUlhm+aESdBhZ7ekHbC/svZoK7pIigovLIX6yIJ3xc=
Subject key identifier:   A5:99:F4:69:6B:36:94:8D:FF:66:56:F3:82:8F:0C:E8:58:C4:45:AF
Certificate issuer:       /CN=CA948884CA136F59A5F29D9B37F2E11919035585
Certificate serial:       65E99AC4369B1BBEBD09BAAA83A52C2D9F0404E5
Authority key identifier: CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32322d3234203d3e20323634353632.roa
Signing time:             Tue 30 Apr 2024 20:43:52 +0000
ROA not before:           Tue 30 Apr 2024 20:38:52 +0000
ROA not after:            Tue 29 Apr 2025 20:43:52 +0000
asID:                     264562
IP address blocks:        138.36.0.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e9:9a:c4:36:9b:1b:be:bd:09:ba:aa:83:a5:2c:2d:9f:04:04:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA948884CA136F59A5F29D9B37F2E11919035585
        Validity
            Not Before: Apr 30 20:38:52 2024 GMT
            Not After : Apr 29 20:43:52 2025 GMT
        Subject: CN=A599F4696B36948DFF6656F3828F0CE858C445AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:35:60:20:ac:3f:d5:93:f5:37:a8:8b:2c:
                    c2:0c:12:33:b7:cc:59:1a:35:05:b1:f2:04:34:0a:
                    c5:1a:25:56:df:93:9a:47:c8:5c:6a:e3:1c:27:c6:
                    f4:f3:2c:74:b5:87:3f:a6:b0:d8:10:7d:6a:e8:4a:
                    3a:5f:36:63:1c:14:f0:db:0d:79:37:35:58:4f:f7:
                    cf:3f:f2:98:38:c8:d3:ee:2c:86:6f:d7:60:55:5f:
                    e8:80:be:d1:5e:75:d5:a0:b8:cc:44:ae:a0:22:13:
                    36:f3:ab:4a:11:ca:07:af:87:23:d5:2b:2a:9f:dc:
                    a7:cc:ca:74:4f:80:7b:4e:8e:1e:7a:bc:70:d0:fe:
                    5e:36:ec:d6:3d:ad:0d:05:a6:8b:21:ca:5e:67:d7:
                    e3:16:41:87:6c:9c:e6:98:23:18:e9:9d:90:68:c0:
                    44:8d:9a:31:6c:2e:50:b9:ea:4d:8e:26:a7:df:03:
                    eb:3c:b8:2c:cf:85:7a:3b:dc:a1:34:c0:1d:ca:82:
                    97:9c:27:83:a5:33:90:74:f0:b5:22:eb:6b:53:44:
                    3b:3b:d8:83:ca:cf:1d:82:69:31:66:08:5d:e1:9e:
                    d1:19:63:8d:03:61:b2:a2:eb:a6:c8:67:15:ea:00:
                    82:32:4d:3e:1c:68:34:f0:94:a5:3f:67:ec:e6:1e:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:F4:69:6B:36:94:8D:FF:66:56:F3:82:8F:0C:E8:58:C4:45:AF
            X509v3 Authority Key Identifier:
                keyid:CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/CA948884CA136F59A5F29D9B37F2E11919035585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32322d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:3e:e2:65:1c:f0:47:9c:1c:10:8f:48:6e:df:85:10:80:5e:
         9f:07:4a:ad:b8:61:32:08:f4:12:e8:30:63:99:84:41:10:00:
         65:f3:ce:3b:ef:ab:96:bf:82:de:d6:38:9b:85:91:08:88:d9:
         42:a9:1a:1e:13:02:2f:82:c4:b8:6b:8b:d2:b6:e6:71:ec:eb:
         18:18:18:a0:47:2d:70:39:43:42:84:5a:af:c2:1f:2f:99:56:
         07:f4:37:57:36:1b:0d:58:c1:5e:2b:0b:a6:0f:f4:6f:41:b6:
         0c:e8:b2:3a:24:93:cc:f3:8d:a6:0b:da:c5:7d:65:64:0e:21:
         f0:9e:0c:99:c0:01:b1:47:ae:ed:3d:66:3e:61:89:06:bc:00:
         31:42:89:2e:1f:35:24:a9:4d:21:e5:09:a9:9d:ba:23:a7:ae:
         37:39:62:9a:6b:03:4e:ab:5a:8e:0d:98:95:a9:76:d8:ee:b2:
         dc:05:9a:b9:48:29:d0:ba:2c:17:cb:3e:71:42:26:c2:33:b4:
         ab:9a:d8:6f:30:09:8b:18:74:96:ef:73:62:c1:00:ec:ed:19:
         f9:a9:01:c0:54:8f:01:94:81:c2:2f:a2:a3:f4:9c:a7:e8:48:
         0d:ac:a1:9b:c4:95:19:7b:f5:61:f3:73:18:c7:fb:f7:08:4f:
         6f:03:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:28:42 2024 by rpki-client on console-ams.rpki-client.org