Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34352e302f32342d3234203d3e20323634333135.roa
File:                     3133382e3132322e34352e302f32342d3234203d3e20323634333135.roa (raw, json)
Hash identifier:          9DOg1iHxzevKLi4iDzNyxfTmNj85Y7ffgLxe46l0sPg=
Subject key identifier:   0E:84:0C:0C:88:36:D4:CD:DB:96:8E:A7:45:95:8A:BB:56:F2:A1:63
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       13C102C9191ABC7CEE8A572B109188EC5B5D056C
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34352e302f32342d3234203d3e20323634333135.roa
Signing time:             Thu 22 Aug 2024 18:18:14 +0000
ROA not before:           Thu 22 Aug 2024 18:13:14 +0000
ROA not after:            Thu 21 Aug 2025 18:18:14 +0000
asID:                     264315
IP address blocks:        138.122.45.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c1:02:c9:19:1a:bc:7c:ee:8a:57:2b:10:91:88:ec:5b:5d:05:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 22 18:13:14 2024 GMT
            Not After : Aug 21 18:18:14 2025 GMT
        Subject: CN=0E840C0C8836D4CDDB968EA745958ABB56F2A163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:3b:a7:de:f6:5c:43:4b:15:b7:3e:e0:18:
                    f0:c9:0a:f8:89:2e:29:d5:fd:d5:6c:3d:3f:7a:4c:
                    19:f4:89:d7:bb:ec:8e:ac:2a:68:c8:26:18:78:6b:
                    95:ba:3c:79:d0:f0:8b:c5:55:08:96:ca:05:41:26:
                    d6:d5:2e:42:6e:8b:b0:ba:7a:fb:70:75:16:f0:e5:
                    c8:15:ae:51:0c:fe:51:8c:e7:87:3a:d4:41:20:f4:
                    bc:76:76:f8:f7:d1:bc:6b:68:76:19:8a:75:d2:03:
                    b7:d2:7d:6d:16:7c:14:69:66:de:e2:f2:c6:c3:d0:
                    01:0b:40:9c:81:c1:f2:ab:41:98:45:76:40:ff:de:
                    98:57:3e:46:44:bd:76:de:63:78:91:11:e3:6f:e6:
                    ae:7e:70:a9:a7:94:cf:73:bb:a4:50:58:05:0d:75:
                    41:3b:72:76:2e:28:9e:ab:53:98:32:16:3c:e8:7e:
                    e0:97:d5:0a:55:9f:60:1e:8e:d8:5a:9b:b5:41:31:
                    5a:e4:b8:9f:c0:ff:dd:56:c2:b1:e4:be:35:69:22:
                    d8:af:39:c6:1d:34:f2:19:50:9b:b0:45:fa:6b:3d:
                    9b:5e:1f:81:0c:a1:9d:15:6d:4c:57:c7:b8:fe:66:
                    53:1d:68:14:0f:c3:e3:50:33:9f:2c:ab:bc:bd:11:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:84:0C:0C:88:36:D4:CD:DB:96:8E:A7:45:95:8A:BB:56:F2:A1:63
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34352e302f32342d3234203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:06:cd:63:69:06:7a:0e:09:3e:21:7c:b6:5d:64:cc:64:c6:
         b7:1d:20:4d:53:20:af:a8:27:1e:e5:2f:61:45:0b:d8:53:bf:
         11:31:32:54:b1:0b:0f:6b:9b:7e:71:97:76:7c:c1:0d:a1:d6:
         f9:af:df:b2:28:82:92:4c:80:91:07:38:f4:45:9e:d3:37:01:
         94:c6:64:9a:07:d3:1f:67:f6:17:98:80:e5:f6:65:98:9a:70:
         64:c0:7a:c2:80:14:98:6e:61:0f:c5:70:b1:8d:48:d5:b2:39:
         8b:a6:ee:e2:41:f2:7a:84:92:4f:6e:ff:b5:19:b2:ea:9b:56:
         75:67:e7:08:b0:84:f1:33:67:38:78:ed:f2:5f:30:01:fd:d7:
         07:e8:8d:6f:2a:46:24:92:73:c3:58:3e:1e:25:0e:d7:07:7e:
         72:9a:a7:21:b8:a5:21:e5:20:2a:11:ef:cd:0e:b2:9e:1e:cb:
         f9:a5:2d:71:63:91:70:c2:b6:70:ba:cd:bc:96:4f:bc:c4:70:
         5f:04:73:ca:3c:c2:30:f0:9e:ff:c8:60:3a:a5:5e:9a:a5:9d:
         74:1e:7c:38:bf:f6:56:16:97:d6:73:39:70:9e:cb:61:44:3c:
         66:4d:88:d2:22:11:c1:fe:b7:28:e9:c8:e9:ec:9b:fb:20:cd:
         67:26:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 13:20:47 2024 by rpki-client on console-fra.rpki-client.org