Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e362e302f32332d3233203d3e203631363934.roa
File:                     3133382e3138352e362e302f32332d3233203d3e203631363934.roa (raw, json)
Hash identifier:          ZWEr433YZXxwzkWXfrOdxqGq4YkO1wqSc6GUjDu5iz0=
Subject key identifier:   E4:09:B6:EF:BD:E1:8E:08:CA:AB:EE:7A:77:7B:09:82:3E:79:1A:4F
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       626DF2BC96B4897576296F09C221EBB3D41BC861
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e362e302f32332d3233203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:08 +0000
ROA not before:           Wed 03 Apr 2024 19:14:08 +0000
ROA not after:            Wed 02 Apr 2025 19:19:08 +0000
asID:                     61694
IP address blocks:        138.185.6.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6d:f2:bc:96:b4:89:75:76:29:6f:09:c2:21:eb:b3:d4:1b:c8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:08 2024 GMT
            Not After : Apr  2 19:19:08 2025 GMT
        Subject: CN=E409B6EFBDE18E08CAABEE7A777B09823E791A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:03:4b:a2:2b:cd:4a:7d:99:d4:51:d6:d2:
                    05:2b:ed:f0:23:aa:12:0d:56:7c:2a:2f:fe:5b:8a:
                    25:83:1b:9f:bd:a7:e9:d3:23:04:d6:0d:b2:4b:3c:
                    21:e6:3d:38:c9:4a:42:eb:f4:37:0a:cf:55:35:46:
                    2c:ab:61:a1:eb:1d:d6:8c:6c:48:8e:8f:c3:75:7f:
                    e2:1b:2e:a1:ca:49:1d:ad:8a:06:7a:ac:40:bc:ca:
                    b4:83:69:6b:75:fb:ac:98:3f:48:40:d7:62:ee:fa:
                    10:79:cb:37:81:f0:7b:78:17:2c:14:02:52:a2:71:
                    1b:2c:11:bb:2f:a7:d1:a7:1b:35:06:c0:e8:7d:80:
                    ff:cf:1b:13:35:41:85:fc:14:17:87:3d:46:72:91:
                    cc:df:b5:9d:9a:ba:9c:eb:08:ee:00:8b:5c:f1:42:
                    da:92:41:d7:e8:6a:32:49:81:f8:aa:3e:24:07:1a:
                    5e:28:d1:f9:63:10:ad:92:0c:68:d5:eb:3e:99:92:
                    30:74:50:bd:37:7d:f6:bc:54:29:1c:77:cf:9d:30:
                    be:e5:e8:28:d1:a5:d4:b0:61:e3:f9:dd:b5:db:0f:
                    35:bc:a7:43:d9:f3:79:22:f0:93:ab:3d:05:88:d0:
                    49:8c:bc:4f:89:1e:54:a8:d6:c4:aa:27:fa:56:f0:
                    43:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:B6:EF:BD:E1:8E:08:CA:AB:EE:7A:77:7B:09:82:3E:79:1A:4F
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e362e302f32332d3233203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:94:6f:3f:ce:4a:ea:1c:19:42:b2:13:ab:d2:80:b5:34:be:
         68:43:77:a4:9a:50:54:9e:01:62:0a:17:0b:c5:f8:d7:37:10:
         d4:2e:71:1e:d6:51:c2:f6:4d:9b:93:a9:16:9c:b2:2e:56:91:
         40:3d:16:df:ac:35:40:8c:4b:0c:a6:25:47:dc:9b:80:4b:6e:
         5b:b0:a1:4f:a6:db:fe:37:47:93:7f:44:ee:bd:1c:b5:d1:d4:
         50:fa:53:0d:17:b2:98:92:72:d8:f7:72:ce:61:5e:45:97:3d:
         8a:ab:11:68:98:f9:e1:6b:f0:a8:6e:91:8b:4d:1b:00:5e:fc:
         15:9f:1e:47:56:c7:e2:80:3b:70:60:9c:97:88:25:a8:07:cf:
         f5:b5:d0:3f:6b:27:7d:38:5b:f5:0d:10:90:9d:aa:83:fa:a1:
         d1:5d:c5:f2:6d:41:6f:59:67:23:2b:60:a1:7d:67:a3:e7:7a:
         5d:63:3e:4f:15:c2:c0:81:bb:d1:80:22:72:13:28:8f:94:00:
         5a:fc:f9:63:87:ea:e6:5c:b1:be:87:1d:00:f4:31:7b:81:ac:
         06:5a:bd:ee:28:24:da:72:4c:fc:32:9c:2a:db:50:ca:93:57:
         ee:29:b6:89:8f:d3:9d:74:51:02:b2:16:81:3c:36:e7:92:c0:
         45:42:dc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:58:46 2024 by rpki-client on console-fra.rpki-client.org