Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa
File:                     3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa (raw, json)
Hash identifier:          TQdaFvx+5aeWZnQ7sMffYtztJVhmXOU8EzDCJN1jHpU=
Subject key identifier:   9E:7D:69:EB:7B:BF:B0:3B:4F:3E:2E:C1:A3:CF:44:35:18:B2:EB:53
Certificate issuer:       /CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE
Certificate serial:       7807A40EF23F76AF0F598F73C93BE2EFED739555
Authority key identifier: D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa
Signing time:             Thu 04 Apr 2024 13:49:27 +0000
ROA not before:           Thu 04 Apr 2024 13:44:27 +0000
ROA not after:            Thu 03 Apr 2025 13:49:27 +0000
asID:                     262380
IP address blocks:        138.255.92.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:07:a4:0e:f2:3f:76:af:0f:59:8f:73:c9:3b:e2:ef:ed:73:95:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE
        Validity
            Not Before: Apr  4 13:44:27 2024 GMT
            Not After : Apr  3 13:49:27 2025 GMT
        Subject: CN=9E7D69EB7BBFB03B4F3E2EC1A3CF443518B2EB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:f5:33:9a:47:aa:94:eb:52:e7:14:50:a4:
                    ef:75:a9:98:fd:02:cc:4e:d8:c9:47:fd:db:07:a2:
                    cd:c2:96:75:17:b4:26:89:f7:94:00:02:be:5d:28:
                    76:e9:6f:ba:06:03:65:99:49:c6:33:77:a4:c3:b2:
                    46:4f:1e:7b:bb:49:b1:4c:3d:b8:11:f4:f0:f4:df:
                    ac:93:a1:fe:33:c3:e7:4a:88:56:02:a8:b9:82:ee:
                    48:52:09:e7:c4:ad:15:3b:69:31:f6:41:d4:cb:44:
                    c1:1c:da:10:af:b3:5c:21:0d:e8:1d:e3:bc:84:58:
                    94:8e:cb:4c:97:69:1a:ae:66:b4:86:5a:fa:b1:9e:
                    33:a4:2c:80:68:d5:ad:eb:a0:68:d3:b3:0b:92:ee:
                    4d:e6:9b:6e:e1:3c:45:25:57:9f:55:ca:2a:29:92:
                    d5:bd:31:3c:52:3b:7a:30:d2:84:e2:ea:f7:12:32:
                    f6:0f:0d:a9:6a:ea:b9:2f:fb:b3:9f:2c:67:94:c8:
                    72:32:d2:a0:35:9e:a6:38:ef:a4:a1:5a:f5:ad:e4:
                    b3:77:3f:d1:0b:72:e3:72:49:22:0d:6a:94:07:c2:
                    0e:01:cf:e4:06:9c:0b:32:0a:47:64:b7:fc:dc:59:
                    44:73:b6:09:2e:fa:c8:a8:1a:26:fc:9b:54:78:59:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:69:EB:7B:BF:B0:3B:4F:3E:2E:C1:A3:CF:44:35:18:B2:EB:53
            X509v3 Authority Key Identifier:
                keyid:D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:79:6d:a2:ba:d3:e6:e8:c6:43:01:2c:8f:91:fb:eb:de:
         12:2a:3d:0f:a3:70:d3:7e:28:10:c1:1a:e5:dc:11:bf:bb:dc:
         07:97:52:fa:1f:b2:8d:61:14:ca:3b:28:99:d0:97:32:94:c7:
         cb:a7:4f:8b:65:e1:43:37:a1:8c:00:c7:4a:cf:fe:31:76:6e:
         c9:55:bb:4b:d2:0e:2e:f5:c1:69:c4:bd:c0:6f:d3:dd:6b:94:
         21:9e:74:4b:9f:04:f8:d7:24:f9:74:e3:01:93:86:ca:c0:2d:
         9c:13:c1:71:97:44:e9:02:56:d4:c1:e4:9c:10:48:0f:3e:8b:
         41:43:cc:91:4a:5f:67:5b:c3:a1:8d:02:f5:25:46:ec:05:78:
         f4:c3:10:e7:70:d0:8d:4b:c3:61:69:30:17:6e:61:d3:e1:d4:
         46:90:1f:2f:23:5d:41:d9:e1:17:f0:7e:ec:12:46:cf:51:21:
         bd:8e:47:b5:b6:59:ae:9e:ca:ed:52:be:e7:67:3f:da:8e:6b:
         f5:4a:90:40:13:34:ac:67:92:1b:bf:0b:2c:9e:37:e4:20:a0:
         06:14:8b:b1:c3:96:87:ec:ae:39:4e:79:e5:6f:5b:e3:4e:4d:
         b0:aa:d5:d9:4c:be:ea:0a:55:ba:3a:98:91:00:ab:e4:7d:7d:
         7e:ef:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 22:55:50 2024 by rpki-client on console-fra.rpki-client.org