Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3332203d3e20323634323035.roa
File:                     3133382e39392e3135322e302f32322d3332203d3e20323634323035.roa (raw, json)
Hash identifier:          tnIoVvB0HfIdxpoMmdNWA1q3drZ085iUEJn40T8li3U=
Subject key identifier:   2A:F4:3D:C8:38:DB:75:6E:43:C5:24:B9:11:CD:86:40:05:C0:70:75
Certificate issuer:       /CN=2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E
Certificate serial:       3BECF91EF0BB4296B7D0D2DAEC51D3C91B309483
Authority key identifier: 2A:0B:42:E6:62:55:DE:DB:DF:5C:2C:8E:C8:F0:A1:F9:FD:66:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3332203d3e20323634323035.roa
Signing time:             Sat 26 Aug 2023 01:59:44 +0000
ROA not before:           Sat 26 Aug 2023 01:54:44 +0000
ROA not after:            Sat 24 Aug 2024 01:59:44 +0000
asID:                     264205
IP address blocks:        138.99.152.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:f9:1e:f0:bb:42:96:b7:d0:d2:da:ec:51:d3:c9:1b:30:94:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E
        Validity
            Not Before: Aug 26 01:54:44 2023 GMT
            Not After : Aug 24 01:59:44 2024 GMT
        Subject: CN=2AF43DC838DB756E43C524B911CD864005C07075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:b6:7c:dc:dc:f4:88:ff:df:e9:9c:34:36:
                    c4:1d:ce:15:66:3d:48:4a:49:8b:3a:ee:1f:a0:c8:
                    76:93:8c:3c:96:f8:93:67:59:7b:9c:e2:2d:e5:bf:
                    6e:c1:d2:66:af:b8:8d:42:5c:32:55:d3:1d:ca:d7:
                    6f:f2:d2:99:5d:0f:c6:6a:09:25:d4:f3:54:9a:cd:
                    c2:c8:ed:f0:c1:15:fe:3b:16:fb:92:36:44:f7:f2:
                    e9:48:27:bc:34:94:d8:2d:f1:64:1f:cf:d8:24:41:
                    85:be:88:75:e4:3f:1f:78:a7:fb:2b:e3:67:f6:9c:
                    e2:88:3e:cc:1b:4a:65:f7:5e:58:56:3b:a0:72:3a:
                    8c:03:52:a1:a2:88:b1:85:7f:86:73:c6:05:6e:63:
                    3c:72:fe:a3:74:27:9e:bf:83:8d:4d:46:99:16:ce:
                    30:94:25:c2:a9:29:ab:57:39:03:0c:29:6b:40:15:
                    af:80:36:be:da:fa:06:be:a4:eb:c9:46:50:b6:29:
                    a1:28:1b:2a:af:30:37:49:1a:e1:fc:35:d3:01:68:
                    d7:ef:a9:49:e9:11:ce:45:22:c3:d6:9c:f0:8c:6a:
                    20:f9:a4:9f:0d:16:ac:f0:40:bf:9a:61:db:fe:c2:
                    b9:91:13:a9:8d:11:68:f0:b8:16:05:2c:d3:6b:86:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F4:3D:C8:38:DB:75:6E:43:C5:24:B9:11:CD:86:40:05:C0:70:75
            X509v3 Authority Key Identifier:
                keyid:2A:0B:42:E6:62:55:DE:DB:DF:5C:2C:8E:C8:F0:A1:F9:FD:66:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3332203d3e20323634323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:bb:1b:dd:4f:9a:be:2d:1b:65:e7:5d:ca:2b:af:9b:6b:
         f7:b0:cf:aa:52:e8:c3:bc:89:b8:5c:d7:b3:d5:5b:f5:56:2e:
         1c:f1:9f:84:7c:14:78:2c:5b:9c:af:bc:48:ba:0b:18:ca:09:
         b1:c5:e7:53:9c:fd:eb:ec:fb:2c:03:a3:05:a1:3e:4c:37:85:
         20:2b:be:00:bf:53:02:ea:50:b2:e5:fb:58:cc:ae:b7:3a:b5:
         06:2b:91:ef:32:6b:6e:c5:df:3a:78:d7:36:8a:05:a8:19:b2:
         87:cf:d6:e2:f5:d6:65:a1:33:9c:58:1b:61:20:e5:b0:b4:b8:
         da:e1:d2:a2:af:b8:59:02:98:69:98:cc:2c:3e:6e:a9:74:8f:
         b9:0b:30:6a:ea:ec:b6:fb:da:55:be:98:06:8a:a5:96:8c:c9:
         14:6b:a3:d8:6e:c5:a7:30:04:eb:88:4b:42:d3:a7:4f:95:ed:
         a9:b9:16:f0:84:0d:2c:64:fc:65:86:fc:e1:d8:13:18:55:8a:
         67:f7:03:83:3e:85:cd:14:37:0a:b9:32:0e:f2:06:b6:9d:ff:
         4f:cb:bd:41:3a:91:f6:af:8c:b0:45:60:c3:a3:11:51:5c:03:
         75:46:03:d2:82:34:04:54:1e:48:c8:66:f4:85:cd:d7:2b:35:
         1f:61:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 18:30:28 2024 by rpki-client on console-ams.rpki-client.org