Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34362e302f32342d3234203d3e20323634333135.roa
File:                     3133382e3132322e34362e302f32342d3234203d3e20323634333135.roa (raw, json)
Hash identifier:          oWL8pCPH3cKVEKDZo+VEsVg0ejvxrwrrbs9i+aJ7Nu0=
Subject key identifier:   CB:14:CB:FA:3E:46:0E:AA:DE:48:FF:1F:5F:2E:CF:19:F6:80:B1:BA
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       667F72EDDF1061EA5A8928FA8DA68432093803D7
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34362e302f32342d3234203d3e20323634333135.roa
Signing time:             Thu 22 Aug 2024 18:18:33 +0000
ROA not before:           Thu 22 Aug 2024 18:13:33 +0000
ROA not after:            Thu 21 Aug 2025 18:18:33 +0000
asID:                     264315
IP address blocks:        138.122.46.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7f:72:ed:df:10:61:ea:5a:89:28:fa:8d:a6:84:32:09:38:03:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 22 18:13:33 2024 GMT
            Not After : Aug 21 18:18:33 2025 GMT
        Subject: CN=CB14CBFA3E460EAADE48FF1F5F2ECF19F680B1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:61:e2:55:de:86:74:1a:64:bf:de:84:da:
                    33:94:94:d2:cf:cf:a1:fe:6c:00:5f:16:1f:bb:6c:
                    d0:10:00:0f:f4:5b:53:f0:66:36:89:ea:f0:e4:da:
                    99:3a:5a:2e:e2:c0:ab:82:b5:e1:64:2d:80:a1:50:
                    1b:4f:8e:60:0a:16:77:ad:c1:41:20:76:de:72:42:
                    eb:9a:bc:02:ab:a6:8d:74:0d:c8:ed:01:a6:e7:65:
                    14:b3:c2:69:5a:9c:a6:14:7d:dd:f6:0a:12:ae:f5:
                    9b:b6:10:a0:ae:3f:6b:7e:1c:c7:c8:8a:03:6f:b4:
                    41:b7:ce:e8:6f:21:64:58:e8:2c:03:38:21:74:33:
                    15:78:d0:cd:61:7d:6b:0d:b6:86:0d:ac:2b:f2:66:
                    1e:38:64:ca:f7:a0:ee:d9:7e:94:80:09:9d:73:bc:
                    13:cb:c5:08:66:b8:7a:62:e9:4d:ea:18:ca:8d:61:
                    34:f6:76:a7:76:4a:a6:de:4c:30:95:92:7c:59:69:
                    65:fb:93:d0:7e:7b:50:aa:ef:57:69:c8:01:0d:66:
                    e6:f2:07:f9:bf:c7:16:85:ff:47:21:79:e8:fd:aa:
                    eb:46:42:51:d1:ea:c4:fd:18:0f:4f:34:45:2c:a6:
                    65:cc:7e:e8:c1:61:2e:91:30:5a:7a:de:58:fd:2f:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:CB:FA:3E:46:0E:AA:DE:48:FF:1F:5F:2E:CF:19:F6:80:B1:BA
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34362e302f32342d3234203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:17:f6:b6:55:d9:49:41:2f:f5:ea:8b:8f:c1:a8:92:54:59:
         84:8a:74:d3:37:b3:78:98:c4:51:0d:c8:6f:47:19:9c:65:0f:
         a0:a0:c7:f7:92:50:ca:73:38:e6:f2:70:93:ad:12:5a:8d:70:
         4b:97:0c:d2:59:71:fa:9b:c5:28:92:2c:de:58:de:50:4f:15:
         b0:f4:b7:7d:a4:cc:e8:d0:2b:66:4f:11:d3:75:b7:74:e1:ad:
         bf:0b:10:55:ac:1f:57:6a:ff:a3:2a:59:a7:c5:64:00:cb:95:
         f8:26:e4:1a:f4:c3:18:b7:b5:97:74:62:72:9a:e7:cc:78:44:
         8b:45:5f:8a:65:5b:e0:75:d8:c4:82:44:51:6d:5e:ff:5e:81:
         ec:bf:53:eb:35:a7:4f:36:a0:2a:ff:e2:24:07:29:e7:f0:a5:
         fb:eb:74:2c:db:c9:a7:ce:9a:55:f1:2d:aa:65:15:52:f2:56:
         55:79:6c:ae:97:07:11:6d:bf:b1:11:0f:67:fe:c8:9f:14:32:
         af:d0:29:36:49:62:b7:ea:46:29:32:52:b2:62:e5:d8:6c:21:
         ec:84:42:b9:8f:c4:1c:83:cd:8c:80:ee:16:94:01:58:3c:82:
         41:2c:1c:bc:b6:cc:64:d6:b1:a6:43:7b:6c:1c:ea:d3:33:32:
         a8:19:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 13:20:47 2024 by rpki-client on console-fra.rpki-client.org