Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34372e302f32342d3234203d3e20323634333135.roa
File:                     3133382e3132322e34372e302f32342d3234203d3e20323634333135.roa (raw, json)
Hash identifier:          s6lgnSkmMnGMmPuJ/F8sOFtDDgfkruOTgoUIY+P1gBM=
Subject key identifier:   BF:E7:DC:01:6F:22:90:FD:7C:1B:31:1C:1F:98:95:41:A8:9E:CF:A8
Certificate issuer:       /CN=B39237C922AB415B1B0A259FD32B278A7AC32631
Certificate serial:       1AF1163227F97439F28ED90C4F29E533ED56030F
Authority key identifier: B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34372e302f32342d3234203d3e20323634333135.roa
Signing time:             Thu 22 Aug 2024 18:18:55 +0000
ROA not before:           Thu 22 Aug 2024 18:13:55 +0000
ROA not after:            Thu 21 Aug 2025 18:18:55 +0000
asID:                     264315
IP address blocks:        138.122.47.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f1:16:32:27:f9:74:39:f2:8e:d9:0c:4f:29:e5:33:ed:56:03:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39237C922AB415B1B0A259FD32B278A7AC32631
        Validity
            Not Before: Aug 22 18:13:55 2024 GMT
            Not After : Aug 21 18:18:55 2025 GMT
        Subject: CN=BFE7DC016F2290FD7C1B311C1F989541A89ECFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:5e:05:64:97:f9:4f:e6:c9:54:2c:6c:0e:
                    cb:ce:2d:d7:97:ff:60:f3:4a:c1:e0:c4:cc:77:a8:
                    a0:df:da:17:a6:80:21:51:c8:0d:4e:b4:86:79:96:
                    80:3e:f8:62:8b:01:d0:9b:62:0e:09:a6:1b:62:72:
                    7d:61:52:e7:4c:29:4a:89:cd:92:8b:3d:1f:ba:a8:
                    b0:43:9a:a8:27:6b:b0:5b:ec:34:11:7b:54:36:e9:
                    6c:f1:80:3b:dd:c3:30:1c:44:10:ae:da:fd:d4:71:
                    24:c1:86:f5:10:09:c3:8d:d7:d4:72:b8:fc:9b:af:
                    02:b7:43:78:97:9d:1b:ea:0f:c0:f9:fc:12:6a:c6:
                    e7:a8:e4:c7:9c:1c:e2:d1:ce:c7:84:23:17:de:46:
                    cc:4c:ac:fa:03:9f:7f:2e:ac:e6:e1:1e:fb:b8:f4:
                    d2:4f:0e:82:af:44:11:78:5a:7b:97:67:88:0e:d1:
                    7b:0c:0e:93:c4:48:a4:73:12:b3:af:a0:00:ca:46:
                    f1:bf:03:f5:b5:00:5a:2f:f0:e5:f9:37:f4:86:dc:
                    7c:c3:08:85:0b:ae:74:ec:e9:f3:d4:29:b0:7e:b5:
                    62:1e:85:40:09:89:42:ed:01:11:95:6a:14:11:e3:
                    cd:eb:a4:be:35:3f:4a:bd:9d:1f:5f:5e:7b:0b:c4:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E7:DC:01:6F:22:90:FD:7C:1B:31:1C:1F:98:95:41:A8:9E:CF:A8
            X509v3 Authority Key Identifier:
                keyid:B3:92:37:C9:22:AB:41:5B:1B:0A:25:9F:D3:2B:27:8A:7A:C3:26:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/B39237C922AB415B1B0A259FD32B278A7AC32631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39237C922AB415B1B0A259FD32B278A7AC32631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34372e302f32342d3234203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:48:f5:8d:5c:46:2f:b1:c6:03:7e:93:25:58:50:ff:54:85:
         96:9f:2b:70:6f:67:04:30:4d:1c:2f:76:ca:69:b8:85:d5:5d:
         7b:0e:f3:e6:0d:8a:93:a2:e8:2b:5e:d0:74:20:84:5d:04:20:
         5b:9b:27:90:79:0e:3b:bd:b7:ba:69:8f:68:e6:af:9d:1d:92:
         bc:4c:85:cf:56:37:14:54:37:a9:2f:c6:3d:ec:79:c7:db:08:
         10:aa:6a:17:d0:10:37:09:7f:13:a1:2f:2c:77:a3:a2:68:46:
         e8:ec:ac:68:68:c0:bf:58:dc:eb:ab:da:0f:1a:15:25:c2:fa:
         53:d3:fb:24:11:dc:3c:4b:13:61:f6:12:d5:b8:d9:7f:94:1e:
         1c:4f:88:b9:69:9d:87:a8:32:32:d5:8c:6e:4c:18:e4:ff:78:
         a2:09:6e:73:56:fa:33:59:93:83:56:af:76:93:4f:92:6b:91:
         84:20:6c:4a:3d:78:99:31:fb:c1:93:d0:31:e5:5d:29:1f:23:
         15:bf:10:70:a8:11:66:98:af:49:74:b6:e3:f8:2f:43:ab:d8:
         bc:b4:fe:3c:1a:5e:9d:43:53:6f:09:3b:c1:df:76:be:ed:fe:
         b9:4a:c1:3b:0f:a5:ce:1f:04:5d:9b:b3:af:53:42:77:f4:ec:
         d8:be:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 12:56:53 2024 by rpki-client on console-ams.rpki-client.org