Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3232203d3e20323634313737.roa
File:                     3133382e39342e3233362e302f32322d3232203d3e20323634313737.roa (raw, json)
Hash identifier:          CQk/Qr08ov/Vh+qzqCG30gLAmPchIFezFkuYBa48SLc=
Subject key identifier:   DA:3E:FE:47:6F:C7:0B:DA:94:53:CA:5C:2A:0E:A5:59:DF:9C:FC:52
Certificate issuer:       /CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
Certificate serial:       380A5E2B6A3205833BB30ABA4822F9429193912C
Authority key identifier: B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3232203d3e20323634313737.roa
Signing time:             Sat 03 Aug 2024 20:03:12 +0000
ROA not before:           Sat 03 Aug 2024 19:58:12 +0000
ROA not after:            Sat 02 Aug 2025 20:03:12 +0000
asID:                     264177
IP address blocks:        138.94.236.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0a:5e:2b:6a:32:05:83:3b:b3:0a:ba:48:22:f9:42:91:93:91:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
        Validity
            Not Before: Aug  3 19:58:12 2024 GMT
            Not After : Aug  2 20:03:12 2025 GMT
        Subject: CN=DA3EFE476FC70BDA9453CA5C2A0EA559DF9CFC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:0d:74:d5:cc:29:68:d0:e7:e2:2f:82:3d:
                    3f:0a:f4:80:cd:c3:57:98:a7:6c:c5:2d:69:3c:68:
                    24:51:5f:77:16:5d:3d:c9:70:ec:fe:bf:1e:d9:1e:
                    dd:e6:24:7c:12:64:0c:79:0c:41:32:2b:99:14:7c:
                    44:a6:99:a5:c1:8f:cb:66:80:78:2d:55:7a:a1:a8:
                    d3:6a:3a:d4:af:0b:9a:d7:ea:3c:52:66:16:62:e1:
                    53:0f:25:4d:02:17:d8:96:fc:a8:a0:45:f8:88:5e:
                    c5:41:b6:d8:5d:9a:06:7e:5e:16:ac:28:2d:ad:a6:
                    0b:89:35:23:b4:57:33:f1:fe:a5:8f:ec:01:00:ef:
                    72:21:3b:b4:fa:c2:58:bc:bc:2a:c7:0a:21:e8:f0:
                    86:d8:f7:8e:85:7b:6b:ef:0b:f9:d4:96:c9:7a:5f:
                    31:c6:e5:2f:6d:e0:66:6c:a5:32:38:a2:88:e1:4d:
                    42:cc:d4:3d:83:d8:7a:82:af:eb:91:dd:1e:ac:80:
                    19:92:49:54:06:79:88:9a:d2:75:1b:7e:66:6e:d7:
                    50:5f:92:2e:7e:3e:f9:f9:60:39:8a:33:a8:b6:47:
                    91:ac:82:fc:92:b1:8d:58:f4:a5:7d:82:4d:ca:72:
                    d9:1c:84:31:82:3b:7c:7e:ca:f4:b4:fc:d7:5b:bf:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3E:FE:47:6F:C7:0B:DA:94:53:CA:5C:2A:0E:A5:59:DF:9C:FC:52
            X509v3 Authority Key Identifier:
                keyid:B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3232203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:fd:6b:08:4e:88:41:8f:26:59:8a:db:67:08:95:5e:a5:10:
         1c:e1:93:ef:a4:ea:40:bb:17:bd:a5:5f:f9:f0:67:f7:18:88:
         d0:21:68:a3:a3:7c:ea:f2:6a:35:c4:f6:32:19:49:9a:d1:b3:
         95:d5:ab:da:fe:84:ba:5e:52:be:ce:f2:b8:e9:6d:42:ae:c3:
         3e:59:3e:94:8b:29:83:cc:4e:b7:9d:8a:14:97:a4:98:c0:63:
         ea:8f:aa:f4:69:d8:2e:3b:1d:e1:e0:cf:86:c9:b3:2d:7e:a1:
         54:8a:3f:9f:49:66:ef:ca:7d:3d:f8:30:4b:cb:f5:36:66:b2:
         b9:5d:63:d0:6b:22:3d:70:08:cd:c7:c7:f7:94:88:2c:b5:bb:
         9e:39:44:71:93:10:89:c8:ae:22:c3:cb:cb:e7:a0:26:7b:7b:
         3a:87:b6:a5:2b:5e:a7:bc:31:49:24:b7:a3:20:c6:b6:7d:aa:
         7b:f1:60:b7:ff:df:7f:f5:ef:3d:37:33:c4:2f:64:1e:57:a7:
         b6:e4:60:32:13:2a:7b:73:b4:23:f2:1c:eb:98:0c:42:cb:b2:
         5e:c0:89:81:74:7f:d9:ea:d9:17:dd:b9:4a:d2:d8:2a:df:85:
         0d:a3:e3:6d:33:b8:6b:a0:58:58:af:d9:aa:4f:b6:8c:30:84:
         dc:d3:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:35 2024 by rpki-client on console-ams.rpki-client.org