Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa
File:                     3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa (raw, json)
Hash identifier:          sNH+NKKod+Ur+dFOjFwznkrE4KAhwTfm4amPZ14xGVw=
Subject key identifier:   EF:49:3D:34:DD:96:72:8F:05:2E:B4:D5:BD:F6:79:BE:AD:AF:F3:FA
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       3C6CB257B81D4715D01B91E1F33CD94D0E8F527C
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa
Signing time:             Wed 21 Aug 2024 19:47:09 +0000
ROA not before:           Wed 21 Aug 2024 19:42:09 +0000
ROA not after:            Wed 20 Aug 2025 19:47:09 +0000
asID:                     264315
IP address blocks:        138.122.44.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:b2:57:b8:1d:47:15:d0:1b:91:e1:f3:3c:d9:4d:0e:8f:52:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 21 19:42:09 2024 GMT
            Not After : Aug 20 19:47:09 2025 GMT
        Subject: CN=EF493D34DD96728F052EB4D5BDF679BEADAFF3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:ea:fe:96:b4:a9:85:89:2a:89:85:b1:6d:
                    df:59:c6:c9:ed:d5:92:96:ae:50:86:6b:d5:9b:64:
                    00:dd:81:d7:6d:94:35:68:58:b4:c2:26:80:51:bf:
                    9c:f8:78:78:43:97:50:28:df:ee:a6:a5:d0:e7:b8:
                    54:f7:33:eb:2f:87:88:55:c8:8c:58:0a:33:cc:33:
                    83:b7:ab:e9:f2:fc:c2:1b:cd:04:94:6c:94:91:9a:
                    b8:75:49:b5:f5:4b:fd:83:8b:1a:35:dc:1c:90:1f:
                    59:2c:0a:17:17:f0:3b:17:a3:a5:aa:5e:27:3f:94:
                    8b:19:05:e8:4d:0f:3a:3e:21:bd:0e:23:6b:10:81:
                    30:6f:f4:46:6f:1c:6a:3d:b0:a1:43:18:31:76:8d:
                    de:2a:27:46:6f:c2:8d:4d:4b:6b:8c:9b:cd:44:f0:
                    98:c6:5d:49:a8:15:0d:13:3c:99:cf:33:79:63:92:
                    18:36:5a:c4:d0:b2:b7:5a:45:ba:29:ea:60:13:3c:
                    e6:12:9d:1e:01:12:a1:24:5b:7b:62:6f:d0:ca:8e:
                    87:7b:57:b1:5e:84:be:32:b9:c2:8f:f0:6b:9e:1e:
                    ce:65:c1:8a:c4:e9:d7:77:c9:6b:b3:82:5a:98:5c:
                    bd:a1:56:a4:60:bd:5f:d7:1d:eb:7d:82:30:87:73:
                    69:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:49:3D:34:DD:96:72:8F:05:2E:B4:D5:BD:F6:79:BE:AD:AF:F3:FA
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:6f:d8:3f:55:6c:5c:bf:ed:9b:96:03:16:37:c0:2c:71:13:
         32:11:13:36:63:f8:43:d8:16:f1:19:c0:b7:37:22:6b:67:b1:
         c3:25:0b:ac:de:f9:3f:36:64:4a:af:41:bf:5c:15:24:83:ee:
         16:c3:66:8b:7f:81:fd:7b:ff:6f:b5:5d:d2:1a:cc:51:b9:f4:
         a5:df:ba:97:f7:5b:dc:19:5e:fc:4d:37:73:4a:f4:4e:a2:e8:
         28:c3:9e:d9:a8:bb:56:e0:4b:07:9b:aa:7e:f6:db:b0:c9:6d:
         43:2e:1c:aa:01:91:d6:2a:13:90:eb:f1:9c:be:38:cd:a4:2f:
         51:c7:57:45:c5:7b:4e:7d:cb:ea:99:e5:05:7b:0e:29:f9:5b:
         7f:53:68:fe:95:80:e2:f6:5e:52:af:37:05:25:ce:c1:a2:f2:
         30:36:86:dc:1a:83:84:cb:a5:7c:d6:12:58:9f:58:c3:5d:89:
         aa:23:57:07:bb:8e:96:4a:27:50:3a:f3:20:dd:0e:ee:94:c4:
         52:b4:3e:bf:ab:61:5c:1f:67:7c:d1:03:d1:b4:28:4c:e3:2f:
         4f:84:49:d9:86:87:68:86:9c:c4:8d:90:e3:93:aa:23:a2:51:
         8f:48:a1:af:fe:b9:9c:2c:c5:03:8b:36:b2:40:c5:f8:2a:a3:
         31:58:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 12:56:53 2024 by rpki-client on console-ams.rpki-client.org