Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3234203d3e20323634333135.roa
File:                     3133382e3132322e34342e302f32322d3234203d3e20323634333135.roa (raw, json)
Hash identifier:          fcA68lFlVeiXBk7T2N/XsQYLt6UqsYnh01M/v95px1U=
Subject key identifier:   8A:47:CA:7A:F4:BC:2F:A0:60:75:0E:27:B9:57:4E:91:D3:E0:40:FB
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       21B31AB90FC934E47885F85FDEE2D0D67DBA025E
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3234203d3e20323634333135.roa
Signing time:             Thu 22 Aug 2024 18:19:14 +0000
ROA not before:           Thu 22 Aug 2024 18:14:14 +0000
ROA not after:            Thu 21 Aug 2025 18:19:14 +0000
asID:                     264315
IP address blocks:        138.122.44.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:1a:b9:0f:c9:34:e4:78:85:f8:5f:de:e2:d0:d6:7d:ba:02:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 22 18:14:14 2024 GMT
            Not After : Aug 21 18:19:14 2025 GMT
        Subject: CN=8A47CA7AF4BC2FA060750E27B9574E91D3E040FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:3b:b6:95:57:9c:9b:f0:fb:fb:2c:c4:94:
                    c5:bd:46:fc:71:99:e3:66:25:f2:0f:be:3c:f6:e0:
                    2a:cf:7c:a3:80:93:4c:ab:4c:a8:40:80:a8:97:67:
                    5f:b8:ac:ec:ac:bd:c7:a8:c0:72:bf:b4:ac:87:eb:
                    2b:5e:4b:4a:43:82:45:b3:b3:56:8b:fa:68:cd:d8:
                    f5:80:4d:6d:d3:5b:07:c3:d9:26:5d:53:d1:eb:fe:
                    7a:c9:a2:fd:ef:2e:bf:0b:1e:0c:19:9f:eb:04:90:
                    d6:af:93:59:f5:16:2e:c8:37:83:76:ce:85:a0:2a:
                    f4:bd:c2:63:67:e0:74:2f:21:d9:69:71:f9:ed:8b:
                    7e:e9:bf:a5:ec:c3:e8:22:4b:66:91:ef:62:7a:a5:
                    8a:16:a6:1f:fe:13:88:65:77:04:c2:c2:1e:55:d2:
                    a5:a5:62:cd:2f:39:1c:5c:ce:cf:f5:40:cd:0e:d3:
                    59:e5:7f:b3:9d:0f:bd:34:5d:67:6f:01:84:f1:be:
                    f7:d9:c2:2b:ed:5f:02:67:8e:18:74:ec:60:31:28:
                    b8:5f:4d:c1:e4:dc:bf:aa:41:8a:75:59:45:73:8e:
                    db:c7:a7:49:a3:ea:cc:ff:ae:17:e6:93:01:53:32:
                    69:aa:ee:16:3a:0a:c1:5b:f3:74:b4:8f:e4:4b:23:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:CA:7A:F4:BC:2F:A0:60:75:0E:27:B9:57:4E:91:D3:E0:40:FB
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3234203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:45:bd:c8:40:b7:c0:a7:e0:2f:8e:6b:52:93:84:b9:37:
         f7:66:d1:82:1d:2d:a1:df:13:e8:5b:b6:41:56:d3:b3:e7:d0:
         ab:aa:fc:9c:0c:0d:6b:ab:ca:6f:77:c3:8d:fa:a4:e4:53:df:
         be:7d:e6:8b:eb:a7:4f:87:85:71:ae:23:07:58:d5:d5:6f:76:
         22:e9:1a:bf:a1:38:0b:90:50:e9:ee:8d:21:cd:ae:9a:dd:b2:
         0e:e7:09:97:5a:4a:f5:d6:ab:2d:20:34:60:f0:cc:52:9f:41:
         5b:00:0c:0a:32:7a:e9:07:a3:16:a2:b4:51:5e:4d:8b:f4:14:
         0e:97:93:32:a8:dc:e5:58:24:40:53:b9:e8:5f:d3:2a:e5:fb:
         52:b5:4b:76:ba:85:46:7f:8d:f2:dc:81:ff:25:65:a5:b3:6a:
         03:95:f1:f5:b8:4f:13:65:91:ae:de:4d:dd:24:80:90:cc:18:
         02:e0:c2:9e:5b:f8:79:8a:cd:c4:4f:15:2f:fb:2a:d5:2d:a1:
         4b:83:b1:95:b3:2c:3d:27:9f:96:d4:94:6a:3a:82:54:1b:95:
         2a:43:d7:ac:d4:ac:b6:30:da:66:78:9d:a2:13:7c:f7:de:ad:
         22:31:21:51:01:06:be:5a:46:2e:0c:ff:9c:9f:31:9f:9c:20:
         07:2e:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 13:20:47 2024 by rpki-client on console-fra.rpki-client.org