Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e342e302f32322d3232203d3e203631363934.roa
File:                     3133382e3138352e342e302f32322d3232203d3e203631363934.roa (raw, json)
Hash identifier:          mIEiO+6ybKEghgYSJsCiAS/waKmUQZQHZhr+Hs7ui9w=
Subject key identifier:   D2:FE:3C:6A:9B:36:BE:F7:E9:59:E3:5E:66:C8:12:29:D2:89:0A:D3
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       7EA3A58FDE9A98DC68F724532AB9F983BD074425
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e342e302f32322d3232203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:08 +0000
ROA not before:           Wed 03 Apr 2024 19:14:08 +0000
ROA not after:            Wed 02 Apr 2025 19:19:08 +0000
asID:                     61694
IP address blocks:        138.185.4.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a3:a5:8f:de:9a:98:dc:68:f7:24:53:2a:b9:f9:83:bd:07:44:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:08 2024 GMT
            Not After : Apr  2 19:19:08 2025 GMT
        Subject: CN=D2FE3C6A9B36BEF7E959E35E66C81229D2890AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:00:e6:96:23:79:61:94:5e:06:6c:c3:b0:ff:
                    e7:b9:01:40:41:ad:09:7a:cb:80:29:b1:3c:5a:b0:
                    b4:82:8c:1b:9a:d8:4d:02:b4:a8:c1:eb:6d:67:8e:
                    74:99:75:07:80:f5:31:69:f4:78:c1:9b:f6:38:a2:
                    41:f5:ad:c4:35:84:ff:bd:d2:5b:de:cc:39:74:a1:
                    33:3f:62:54:22:af:99:84:98:7f:54:35:49:f8:13:
                    57:9e:76:a2:3d:3e:bc:ce:97:e6:ff:ed:52:ba:59:
                    5b:aa:8e:8f:c2:f4:60:d0:8b:3b:42:f6:95:64:b8:
                    42:f3:b0:ae:8f:85:94:16:39:02:17:35:57:f4:de:
                    90:e5:fe:0b:25:05:cd:3c:00:a3:6e:24:de:9f:4b:
                    65:c5:66:a3:68:cb:fc:97:4d:47:c2:92:a9:69:39:
                    4e:50:44:d6:9b:4a:b2:90:b3:0d:4f:15:5c:f1:26:
                    f0:0a:82:97:77:09:d2:54:c6:09:7d:52:ea:c1:df:
                    2d:ad:19:43:a9:1f:38:69:06:24:71:22:04:a9:b8:
                    2f:64:ff:b1:16:bf:e3:13:e5:1b:d4:3b:f8:eb:e3:
                    7b:5d:1f:52:ea:e6:41:34:0e:a7:6f:ff:a2:fe:46:
                    ba:9c:98:1e:af:b2:d9:ee:e6:03:19:88:48:3e:11:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FE:3C:6A:9B:36:BE:F7:E9:59:E3:5E:66:C8:12:29:D2:89:0A:D3
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e342e302f32322d3232203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e4:dc:4f:f9:97:34:a0:78:ad:b1:c6:00:89:15:93:73:4f:44:
         56:7a:30:9a:ec:9e:10:bd:d2:ca:b8:52:9b:fd:4f:90:ac:a1:
         ca:24:df:d7:f8:39:85:c4:66:48:05:fb:4e:b9:f5:5b:f2:ca:
         d8:f0:68:44:73:94:cc:06:77:74:bc:1f:4c:3c:8b:4f:f3:66:
         3c:89:06:ef:f0:11:71:8d:9d:b0:49:54:6f:31:38:39:05:88:
         3e:bb:cc:ca:7a:72:00:93:1d:5a:f2:5c:6a:6d:97:cb:da:32:
         be:22:32:8a:c8:7f:44:ab:7a:f0:bd:70:11:4e:b8:5b:50:93:
         4a:6d:bd:d5:27:ab:0e:fb:b1:83:80:31:de:9a:9d:ad:6c:d8:
         8d:5f:0c:cb:1e:53:b0:ee:32:44:0d:95:02:9f:f6:4c:76:ad:
         5a:4a:f2:ac:c5:1e:33:8a:59:3c:05:88:27:fa:3c:ac:91:4f:
         c3:87:88:11:1c:3a:d7:e6:e1:77:04:36:2b:03:b8:5a:32:ec:
         9c:0d:cf:92:6e:8a:2b:b9:5a:ea:d5:10:bc:8a:de:62:0f:b4:
         0f:62:0b:c8:77:b1:12:d2:c5:b7:3b:d0:36:2b:cc:fd:b9:26:
         7e:41:21:8a:fd:ee:f9:98:22:1a:d5:bf:c5:29:70:77:ff:2b:
         c9:1e:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:27:55 2024 by rpki-client on console-ams.rpki-client.org