Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32342d3234203d3e20323634313737.roa
File:                     3133382e39342e3233362e302f32342d3234203d3e20323634313737.roa (raw, json)
Hash identifier:          gZZvWZJ+k9uQaPZq1I3VZkC2b6r6N3atRE9JC8enxYY=
Subject key identifier:   C1:E6:8C:9B:E2:17:CA:0C:0B:1E:E9:EC:95:FD:EE:CB:26:6C:B5:2C
Certificate issuer:       /CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
Certificate serial:       3FA0464D93EB3B3FBAFCDB9D85655A08E1A982BA
Authority key identifier: B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32342d3234203d3e20323634313737.roa
Signing time:             Sat 03 Aug 2024 21:21:02 +0000
ROA not before:           Sat 03 Aug 2024 21:16:02 +0000
ROA not after:            Sat 02 Aug 2025 21:21:02 +0000
asID:                     264177
IP address blocks:        138.94.236.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a0:46:4d:93:eb:3b:3f:ba:fc:db:9d:85:65:5a:08:e1:a9:82:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
        Validity
            Not Before: Aug  3 21:16:02 2024 GMT
            Not After : Aug  2 21:21:02 2025 GMT
        Subject: CN=C1E68C9BE217CA0C0B1EE9EC95FDEECB266CB52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:42:80:17:dd:c2:8a:b3:b7:f1:e9:c1:7e:
                    d2:12:31:5f:e9:66:fd:3a:0b:c6:c9:58:16:46:12:
                    e4:40:41:da:a7:74:db:60:2c:e1:6e:db:60:8d:71:
                    8e:40:f3:f7:3b:85:f1:43:31:42:22:e8:34:2c:2f:
                    4e:dd:71:3f:b9:c2:66:b8:71:52:29:af:73:11:4c:
                    f0:02:6f:3c:ab:05:d2:a1:53:77:b9:f5:a5:80:a6:
                    67:54:46:fc:e5:6b:9e:a5:a8:b0:98:01:31:06:45:
                    43:ee:39:76:ae:3e:94:dd:d4:d6:1b:b5:83:82:1e:
                    61:6a:7d:fa:0e:ca:26:2c:5d:a0:b9:13:cf:b2:7e:
                    bf:e6:3a:b6:6a:78:ce:e1:f7:90:5b:ad:94:fa:2c:
                    fd:b4:0e:62:7b:31:af:3f:07:b5:d9:27:9f:a9:d8:
                    34:e6:cb:c8:8e:2c:09:1a:a9:19:ba:0e:8c:0e:a9:
                    81:d5:2d:c0:9e:dd:bb:17:bf:7f:ee:e4:ee:60:f7:
                    7c:d1:cd:4c:b6:c4:c8:e4:ac:32:de:38:c5:4f:be:
                    e6:60:9e:81:ba:8a:22:83:5d:e5:32:bf:29:35:f1:
                    43:22:6e:fd:dd:8a:fc:af:ec:64:40:54:63:42:1f:
                    a8:75:82:78:1d:1c:27:fc:33:d3:c7:d4:b8:b5:39:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E6:8C:9B:E2:17:CA:0C:0B:1E:E9:EC:95:FD:EE:CB:26:6C:B5:2C
            X509v3 Authority Key Identifier:
                keyid:B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32342d3234203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:fd:38:25:29:7a:41:1c:8a:f0:c5:ad:e4:f9:0c:f1:48:
         79:d0:a8:77:45:59:d0:57:e3:43:53:5d:bd:f9:4a:cf:c4:d5:
         34:e9:fd:0c:d3:65:7e:2a:dd:42:f3:13:ea:6c:21:4e:3e:8e:
         9e:3d:85:4d:ed:37:86:f6:99:51:cc:14:dd:ca:b6:41:1f:bb:
         c1:bb:ab:21:d0:21:71:9b:35:54:41:7d:9d:dd:d7:03:75:a4:
         60:5e:27:db:66:62:35:c3:3c:ba:5f:86:cf:fc:42:9b:0c:da:
         b7:12:08:27:1d:b9:83:a6:8a:65:5c:7c:2d:15:a5:56:1c:ef:
         04:6a:0a:88:ae:45:09:5a:78:1b:18:d0:c9:12:4c:f4:4a:93:
         ba:d1:ae:7b:b6:13:10:be:43:13:56:0d:2d:bb:0f:72:c2:10:
         77:a8:29:91:49:b2:43:00:c7:6e:a9:bf:7f:c5:38:f1:12:47:
         1b:b1:a5:f0:6b:3d:b8:3a:8a:c5:8d:5e:bf:b1:6c:03:29:1a:
         e8:6b:bb:68:83:33:35:91:4c:8b:5f:da:d4:b8:ce:b7:4f:ad:
         dc:e1:da:37:4e:f4:f6:5f:c1:76:ff:94:54:fb:e1:56:95:76:
         bc:f8:fd:28:24:f1:c7:9d:63:33:04:9b:11:c2:91:44:83:a4:
         e9:c7:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 01:53:23 2024 by rpki-client on console-fra.rpki-client.org