Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e372e302f32342d3234203d3e203631363934.roa
File:                     3133382e3138352e372e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          1LBUka1/DuLD95ieBPKicWQsSc78br6hSHFoS77vzM8=
Subject key identifier:   57:B3:D3:18:17:F9:4B:37:2F:B3:76:E4:E3:B6:03:4C:53:2B:67:71
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       6CF293AEB51591AFA5BB5D433364A4529C25D654
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e372e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:06 +0000
ROA not before:           Wed 03 Apr 2024 19:14:06 +0000
ROA not after:            Wed 02 Apr 2025 19:19:06 +0000
asID:                     61694
IP address blocks:        138.185.7.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f2:93:ae:b5:15:91:af:a5:bb:5d:43:33:64:a4:52:9c:25:d6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:06 2024 GMT
            Not After : Apr  2 19:19:06 2025 GMT
        Subject: CN=57B3D31817F94B372FB376E4E3B6034C532B6771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:92:ff:b7:8f:68:98:fa:47:68:40:39:de:
                    eb:f3:af:57:3b:e0:25:aa:5d:48:5c:73:56:1c:f1:
                    6a:89:40:24:ba:e3:82:f7:70:65:fc:f6:c0:56:fe:
                    af:95:fb:fd:a2:8d:ef:55:f1:f9:31:62:66:3f:74:
                    54:d9:f3:d0:14:90:0d:f8:0f:a2:66:90:c0:53:32:
                    5b:51:4c:10:e8:96:d9:4d:41:2e:87:cf:68:4b:f1:
                    4f:1f:10:e6:21:bb:aa:18:4b:9a:7d:39:05:e5:21:
                    e3:95:27:e8:38:a9:21:61:0d:af:f4:7b:fb:84:cf:
                    b5:09:db:d6:01:37:08:52:bf:5f:e7:07:f7:ea:1e:
                    9d:7f:1b:2f:82:fb:26:91:c4:64:ae:69:b7:11:60:
                    f7:e6:67:af:37:d7:0b:0f:71:72:d7:fe:fc:3c:61:
                    54:b1:d3:27:d1:90:47:ad:a0:90:85:3c:90:6f:50:
                    8f:66:e2:a6:6c:c9:0a:ba:0e:40:47:a7:d4:89:8c:
                    7f:1d:92:ec:b3:91:f5:9d:f8:a0:4d:07:af:1f:e5:
                    a9:da:4d:3e:6c:52:0a:0e:72:c4:70:47:99:bc:a5:
                    0b:97:89:bb:dd:6f:1c:6f:39:3a:4f:fd:ec:da:14:
                    44:14:f6:ef:89:6c:ff:f9:e8:9c:65:1b:21:33:69:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:D3:18:17:F9:4B:37:2F:B3:76:E4:E3:B6:03:4C:53:2B:67:71
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e372e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:49:57:9b:6a:24:48:89:77:ed:ec:c2:c3:84:8c:15:0a:00:
         e6:c8:f4:14:56:71:23:ab:cb:c8:8c:a6:8b:bd:86:53:7a:d9:
         e6:47:33:02:94:12:4f:55:40:2f:66:98:72:54:79:66:7b:7a:
         ea:fd:f4:0d:05:75:e5:9d:a4:84:60:b0:00:c4:ce:86:f5:e4:
         79:d7:00:f8:00:d1:94:31:09:a3:b9:ab:48:93:ac:fd:96:d2:
         89:c5:51:05:ca:26:8b:fd:99:cc:c0:6f:ba:35:13:f0:74:5b:
         c3:14:3d:7f:6d:81:00:bd:ed:b6:6b:4a:03:15:99:49:eb:b8:
         cf:35:a2:2e:74:08:13:07:db:8f:8a:ec:4d:31:61:32:90:a3:
         84:e1:c3:6d:e6:e5:aa:53:1a:c3:7f:ce:6e:2c:3e:25:86:d9:
         df:de:34:c4:b6:9e:6f:34:8c:6c:33:5c:cb:f3:b8:73:c7:39:
         b7:63:36:34:ca:03:6b:36:ca:dc:cd:d3:9d:eb:85:3e:03:e6:
         5c:f9:42:5d:38:e2:ee:b4:8f:70:56:20:96:f2:58:5a:94:22:
         d8:8e:3e:c3:d5:fe:a0:c9:a7:2e:d4:5e:f0:56:07:5c:80:9e:
         77:fe:28:6d:65:a2:8c:0e:99:e7:e3:73:ed:8d:9e:81:5a:dd:
         fc:4e:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:58:46 2024 by rpki-client on console-fra.rpki-client.org