Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32332d3233203d3e20323634313737.roa
File:                     3133382e39342e3233362e302f32332d3233203d3e20323634313737.roa (raw, json)
Hash identifier:          2mOPtd/BoEFB/5Az9t6/7xGDlgxVOm69xfrwX016L2A=
Subject key identifier:   B4:F1:6A:A3:38:55:B4:BC:45:20:50:85:D3:4D:14:B1:F9:CC:10:6E
Certificate issuer:       /CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
Certificate serial:       10F9D8C00C5EB8D667606BA1BCB50F90F1A6AEF7
Authority key identifier: B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32332d3233203d3e20323634313737.roa
Signing time:             Sat 03 Aug 2024 21:21:01 +0000
ROA not before:           Sat 03 Aug 2024 21:16:01 +0000
ROA not after:            Sat 02 Aug 2025 21:21:01 +0000
asID:                     264177
IP address blocks:        138.94.236.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f9:d8:c0:0c:5e:b8:d6:67:60:6b:a1:bc:b5:0f:90:f1:a6:ae:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
        Validity
            Not Before: Aug  3 21:16:01 2024 GMT
            Not After : Aug  2 21:21:01 2025 GMT
        Subject: CN=B4F16AA33855B4BC45205085D34D14B1F9CC106E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:76:6c:aa:99:58:08:5b:b5:61:87:fb:3a:
                    c6:f1:8a:18:e5:ff:fe:a1:89:e0:8e:4e:52:da:80:
                    55:5a:21:64:48:e9:e6:7a:11:8c:b6:83:de:9a:12:
                    2b:54:f8:99:07:4e:e6:aa:0f:88:05:ce:88:ab:4f:
                    37:54:f1:3a:08:59:8d:b5:c2:f2:2c:40:d2:7f:ca:
                    e1:2e:2c:70:89:45:15:65:9b:f0:07:6d:fe:ef:87:
                    d8:08:62:eb:4e:70:40:cd:bd:8c:76:5a:33:b1:39:
                    c8:87:dd:41:1e:d8:b0:89:8f:2e:b9:09:d5:23:58:
                    ad:ab:37:2a:ab:29:b2:94:9e:96:b7:43:b1:94:80:
                    07:4c:21:fc:b2:a1:31:3f:8f:7e:22:51:67:ef:1e:
                    e3:50:c6:3b:93:b0:fd:44:bb:d6:ca:9f:1f:8e:10:
                    c4:3d:6d:45:ed:39:40:37:b8:be:3e:92:60:8f:86:
                    7a:e3:6a:cd:d9:26:cf:2a:90:e7:3b:e9:ba:48:45:
                    10:b8:08:9d:1e:34:42:fa:43:77:ca:1f:4c:e7:b8:
                    03:4e:57:d2:9b:a6:73:28:43:a0:70:30:77:87:4c:
                    09:96:d0:8c:8e:38:66:ec:a2:61:fb:da:cc:c3:07:
                    5a:e4:b3:ed:4f:b0:bc:dc:76:0c:b7:f7:ee:d2:5c:
                    0d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F1:6A:A3:38:55:B4:BC:45:20:50:85:D3:4D:14:B1:F9:CC:10:6E
            X509v3 Authority Key Identifier:
                keyid:B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32332d3233203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:84:78:32:d7:90:a7:c0:65:7c:3c:62:60:58:65:81:8a:08:
         c9:a5:a3:17:07:ec:e9:d1:51:9f:95:1c:d4:42:66:7e:25:39:
         a3:5f:55:bd:8f:36:07:6a:39:9f:c8:88:12:51:0f:11:0e:03:
         f3:9a:eb:d3:fb:d2:d1:e7:7d:3c:ee:ca:4e:12:1e:4c:e3:55:
         c6:6c:e1:ca:b4:d7:6e:b9:40:37:df:f6:25:13:ad:51:b2:9e:
         dd:de:fa:cb:f3:53:59:05:31:c7:aa:25:d9:fa:69:2e:62:ab:
         76:2c:4c:9d:69:98:19:4d:c7:7b:11:7e:33:c0:c6:23:b7:0b:
         8f:19:42:c3:13:73:a1:00:40:3e:92:eb:c2:a0:0e:c9:c0:4d:
         1d:4a:dd:81:e0:43:b2:5f:55:67:93:6a:2a:19:4c:75:3a:c0:
         7a:82:bc:88:30:c7:97:b1:f3:54:a2:8d:53:cd:0f:45:e3:9c:
         f1:75:4b:3b:39:49:a4:46:da:3a:2a:23:76:2d:28:51:99:fa:
         7e:5c:9b:aa:a1:27:ad:4f:6e:6b:40:23:8a:cb:5c:81:4e:1e:
         7a:e9:5b:ba:ff:dd:cc:bc:20:8e:af:73:e4:92:4c:90:99:6e:
         9a:ab:ef:bc:90:97:e1:56:69:80:e5:59:d8:5d:7a:6c:cb:56:
         19:28:c4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:35 2024 by rpki-client on console-ams.rpki-client.org