Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32342d3234203d3e20323634333135.roa
File:                     3133382e3132322e34342e302f32342d3234203d3e20323634333135.roa (raw, json)
Hash identifier:          fprtuvoi+EjCaeAd0wTDGJmPZUyIlWNihoOa2SBbYwo=
Subject key identifier:   07:C4:46:F0:33:A2:05:73:FE:C2:8F:39:28:76:DF:14:8B:E7:8B:D4
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       7FC2C4F41AC2E88857912E59FBDDED529B717821
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32342d3234203d3e20323634333135.roa
Signing time:             Thu 22 Aug 2024 18:17:45 +0000
ROA not before:           Thu 22 Aug 2024 18:12:45 +0000
ROA not after:            Thu 21 Aug 2025 18:17:45 +0000
asID:                     264315
IP address blocks:        138.122.44.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c2:c4:f4:1a:c2:e8:88:57:91:2e:59:fb:dd:ed:52:9b:71:78:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 22 18:12:45 2024 GMT
            Not After : Aug 21 18:17:45 2025 GMT
        Subject: CN=07C446F033A20573FEC28F392876DF148BE78BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:ef:be:6e:a7:3c:6f:9b:6c:af:d0:b0:bf:
                    0e:5d:35:2d:f8:b4:0e:cf:c3:89:22:c4:9d:b1:c9:
                    55:6c:d5:5e:06:7c:b7:29:c8:c7:3a:9d:c2:aa:da:
                    01:88:5c:62:6f:e7:6e:7e:cb:ce:fd:6a:45:c3:33:
                    92:79:d9:b5:24:b2:1a:80:5b:89:bb:62:89:3f:30:
                    2d:13:9d:14:e6:c0:bf:25:b6:0d:32:d8:33:1c:bc:
                    4d:4f:45:81:be:ff:3f:31:b2:db:8a:f0:c3:81:fe:
                    9e:f1:8f:e5:cf:ce:4f:4e:28:60:12:67:a6:27:69:
                    dc:ac:ab:48:11:a3:0c:ca:df:f8:c7:34:71:6f:2e:
                    89:54:6d:f5:3a:a7:ee:b8:87:5e:cd:32:94:21:c6:
                    f2:7e:4d:2d:71:75:39:d5:c9:b1:82:d9:90:0a:ff:
                    20:c8:5c:e3:d4:87:8a:c2:0a:9e:9e:f3:6f:43:b7:
                    c8:3d:94:f9:fb:96:64:3f:62:d4:13:6d:d9:08:a2:
                    fe:19:a9:58:0e:37:40:7a:24:7f:b8:98:c6:d3:30:
                    84:9d:21:bb:7d:61:3b:81:1e:3b:04:e1:8f:93:b0:
                    ae:10:a7:92:2c:b8:ce:fa:b4:19:f3:19:b8:11:00:
                    40:51:84:c6:1e:b8:ae:c3:ad:1a:dc:2b:1d:1b:50:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:46:F0:33:A2:05:73:FE:C2:8F:39:28:76:DF:14:8B:E7:8B:D4
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32342d3234203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:f7:ed:55:9d:81:c9:fc:f0:30:9c:9f:b7:f8:80:15:f2:
         6c:75:86:5d:5a:14:85:4f:b8:ee:85:52:03:32:fe:cc:d0:e6:
         e5:26:79:77:e7:0c:41:7d:41:91:d3:60:94:0a:79:7f:b0:4b:
         4a:0e:59:eb:88:48:bd:2b:13:a6:84:d4:a6:02:70:53:fb:66:
         4b:43:f0:4f:28:3c:42:4a:e3:30:40:f7:7d:2c:77:e6:23:22:
         4c:4d:8e:de:aa:de:ee:10:38:38:cb:8f:be:1a:33:cb:13:d5:
         62:6f:44:7d:ef:00:56:63:ea:5e:93:9a:2c:59:6d:f7:e5:f5:
         9d:36:18:36:0a:c1:68:1c:c9:2f:bd:25:34:14:25:93:0d:b3:
         ad:4e:04:42:54:29:a2:93:33:a7:54:90:21:93:1b:54:3e:e2:
         9d:e9:77:ff:72:e3:97:40:38:2a:1f:6e:28:69:4e:18:bb:21:
         b9:1b:5d:0b:07:28:97:f8:87:c8:6a:1c:05:43:97:ae:bc:79:
         be:e6:b0:ce:3e:b2:33:f4:f8:3c:02:b8:64:11:a1:5e:7d:6f:
         63:58:64:20:51:bc:da:9f:66:3a:38:69:f5:48:98:02:5a:c8:
         09:b4:b9:58:12:b7:cc:b1:52:71:48:ec:d6:29:ff:03:4d:2a:
         ad:31:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 13:20:47 2024 by rpki-client on console-fra.rpki-client.org