Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3232203d3e20323634333135.roa
File:                     3133382e3132322e34342e302f32322d3232203d3e20323634333135.roa (raw, json)
Hash identifier:          xHV+i2T4EtX8Qy3c3PAp+JXxoka++tBpU7bnHzU8E2M=
Subject key identifier:   61:58:8F:30:14:12:86:88:F2:9C:CE:66:DA:56:95:AE:01:F7:90:F4
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       1DC655683ADE900CA1C773CC336037C6B64975E7
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3232203d3e20323634333135.roa
Signing time:             Thu 22 Aug 2024 18:19:36 +0000
ROA not before:           Thu 22 Aug 2024 18:14:36 +0000
ROA not after:            Thu 21 Aug 2025 18:19:36 +0000
asID:                     264315
IP address blocks:        138.122.44.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c6:55:68:3a:de:90:0c:a1:c7:73:cc:33:60:37:c6:b6:49:75:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 22 18:14:36 2024 GMT
            Not After : Aug 21 18:19:36 2025 GMT
        Subject: CN=61588F3014128688F29CCE66DA5695AE01F790F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:f1:fd:80:e6:e4:d5:41:7e:af:65:4c:5d:
                    69:0b:44:33:76:63:06:cf:da:59:3f:69:6b:d0:aa:
                    72:ed:ce:14:7c:9a:7c:8b:2a:2f:bb:3c:f6:d2:5a:
                    d6:a1:bf:d5:d8:e3:e2:99:c6:6b:ef:74:cd:af:80:
                    bd:d9:9d:f9:16:ef:60:0f:a7:7d:0d:f4:df:54:bb:
                    ac:e2:53:24:52:38:9a:7f:42:1e:a1:1a:16:65:79:
                    87:c2:5f:1d:b9:b3:9d:47:53:90:fa:f4:97:7a:9b:
                    1c:35:bf:17:78:d4:5e:2a:c3:3a:29:e5:3a:43:ba:
                    29:e6:c1:25:17:0b:db:00:3c:28:65:72:96:00:08:
                    4d:a7:14:31:cb:f6:24:3e:93:9b:09:98:60:95:69:
                    df:14:45:19:75:09:ea:49:04:6b:ac:2a:e1:be:f1:
                    11:9a:8f:19:89:ed:06:0e:86:e7:cb:28:87:17:77:
                    e5:de:ec:83:19:99:f6:92:98:f1:4a:74:8a:66:51:
                    f1:14:c5:79:1e:0d:cd:5e:cc:8f:d1:9a:02:6d:d8:
                    76:d0:2b:55:7b:6c:ad:3e:8b:0f:d6:e1:41:31:f4:
                    db:40:19:52:90:af:d6:48:f0:fd:80:40:b9:f1:ff:
                    c8:f8:33:80:61:5c:b8:8f:b2:fc:6b:2d:1d:ce:57:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:58:8F:30:14:12:86:88:F2:9C:CE:66:DA:56:95:AE:01:F7:90:F4
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3232203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:45:4c:81:8f:7d:58:2a:21:70:30:d3:4b:f0:9d:6c:8f:
         14:2e:c0:50:16:af:94:ad:50:9d:c6:1c:d6:00:35:40:32:42:
         fe:47:b8:91:6b:7d:78:b1:96:e0:7f:ae:4d:a9:d7:b6:8a:73:
         6f:e9:0e:aa:24:68:bf:eb:bc:24:2f:d0:d1:ed:b6:1d:69:b7:
         52:97:f5:51:03:87:82:3c:df:d0:c0:b5:cf:e0:a1:4e:e8:6f:
         72:9b:98:a7:a7:2a:60:db:8a:93:35:18:20:e6:37:df:36:59:
         ef:9d:96:ed:37:8b:69:cc:48:48:2c:85:a9:c6:2b:88:ca:9f:
         48:e4:36:92:00:e0:f7:1d:01:fd:bb:f7:4e:ca:c0:b9:78:33:
         ae:fa:8e:ff:9f:ef:5c:4d:9b:47:c2:21:70:e2:8a:12:7a:2f:
         7a:22:c0:ef:f9:80:8c:31:c3:70:46:8e:b5:ff:68:ed:b4:f4:
         6d:50:e6:1e:9a:44:ef:ef:52:22:a9:0b:77:74:8d:db:84:d7:
         75:51:8d:69:31:f5:a5:3b:a0:07:1f:3b:8a:2f:80:ba:cd:3a:
         ae:21:a7:c4:cc:c4:8f:37:d7:43:e5:d3:08:93:44:88:74:16:
         bf:4c:f1:b5:a0:d7:33:c5:7d:0c:a3:b6:c4:65:e1:92:a7:50:
         e8:a6:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 12:56:53 2024 by rpki-client on console-ams.rpki-client.org