Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233372e302f32342d3234203d3e20323634313737.roa
File:                     3133382e39342e3233372e302f32342d3234203d3e20323634313737.roa (raw, json)
Hash identifier:          FbmNXmRNWViCkzf3X38S+FNiZV3TdLl6NDhLTRbiS3c=
Subject key identifier:   0D:CB:7B:9F:69:F2:6F:E4:F1:67:F3:AB:B4:E0:E1:A1:A5:E1:64:7F
Certificate issuer:       /CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
Certificate serial:       52C4D499DC19B7DAEE4DA44A7AFEAD8C0B3F9CCB
Authority key identifier: B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233372e302f32342d3234203d3e20323634313737.roa
Signing time:             Sat 03 Aug 2024 21:21:01 +0000
ROA not before:           Sat 03 Aug 2024 21:16:01 +0000
ROA not after:            Sat 02 Aug 2025 21:21:01 +0000
asID:                     264177
IP address blocks:        138.94.237.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c4:d4:99:dc:19:b7:da:ee:4d:a4:4a:7a:fe:ad:8c:0b:3f:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
        Validity
            Not Before: Aug  3 21:16:01 2024 GMT
            Not After : Aug  2 21:21:01 2025 GMT
        Subject: CN=0DCB7B9F69F26FE4F167F3ABB4E0E1A1A5E1647F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:b5:00:4c:50:79:aa:89:86:aa:8c:a8:9c:
                    ee:8e:43:eb:c4:a2:64:95:a0:fe:86:f2:89:89:f2:
                    d9:1a:74:2d:c9:63:bf:09:28:0a:ef:ce:bb:1d:bf:
                    52:f1:ff:73:4d:8f:d7:a4:19:86:ad:35:44:6b:fa:
                    bd:79:e7:99:c9:f9:50:79:85:45:f4:b3:e6:50:75:
                    d1:e9:93:bc:1c:0e:11:1c:03:f6:81:73:6b:2b:df:
                    de:c1:89:f6:01:20:2b:2e:de:6a:4e:b6:2e:1a:b4:
                    d1:90:29:0d:a0:53:f7:56:fc:58:5d:37:ef:24:2d:
                    58:7e:29:44:a9:c9:0f:39:0b:f3:81:29:02:20:68:
                    4d:87:a0:4d:4e:37:8c:de:d6:4e:91:7a:39:56:88:
                    45:d6:83:d0:0a:f1:a3:5b:a9:06:80:86:be:16:3f:
                    f6:35:de:e9:e9:67:8f:c9:b1:9c:0e:f0:09:94:07:
                    65:52:2f:1f:9b:c9:1f:a5:d1:85:74:f6:20:7d:0e:
                    3c:71:a4:2d:cb:b3:41:0d:97:74:4f:40:92:93:5a:
                    30:ac:63:5b:2d:c6:ff:1e:db:1e:de:4b:65:08:a9:
                    72:b6:72:7f:23:b1:35:42:56:46:e3:42:dc:29:b4:
                    7b:ed:b6:fd:ba:39:9d:55:46:ef:64:da:3f:32:7e:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CB:7B:9F:69:F2:6F:E4:F1:67:F3:AB:B4:E0:E1:A1:A5:E1:64:7F
            X509v3 Authority Key Identifier:
                keyid:B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233372e302f32342d3234203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:d7:1f:1f:33:83:ff:ae:54:2a:da:e8:25:6f:79:c6:e2:
         1f:a5:77:6d:63:52:e4:3b:d8:40:65:5b:45:cc:e6:80:ed:9d:
         bf:84:c9:fb:70:06:0b:67:76:c5:b3:53:cb:11:ac:37:26:91:
         53:1e:2b:e4:fe:a0:4a:71:2b:cb:bb:03:b7:8e:8c:ab:50:4c:
         21:5c:27:30:44:d2:95:4a:d0:8f:44:fb:16:ca:c2:3e:7a:c9:
         ad:44:6f:26:c6:06:79:ad:db:bd:b5:d9:36:55:24:14:38:44:
         56:61:14:9c:e9:a3:19:55:39:fd:00:b9:b6:53:53:2b:2e:c0:
         b4:6b:fe:23:1d:dc:fd:0c:de:ce:64:e5:0a:32:c2:15:75:b2:
         e0:67:59:a5:18:4a:26:b2:e9:1e:71:9b:33:da:18:ec:5e:ef:
         18:78:5b:e8:d9:d3:e7:ed:29:76:c2:e2:58:4f:14:7f:c6:fb:
         d4:13:33:f7:df:5f:05:ee:b0:3a:6e:fb:dc:18:68:99:0b:c3:
         6b:30:83:ff:a4:d1:97:01:d3:0e:fd:f1:57:95:c6:f0:81:f8:
         01:ef:f3:fa:86:f2:f6:ca:2b:6f:47:3d:5c:f7:bb:80:7f:c1:
         bb:8b:a3:d0:a1:1f:f1:85:fe:b3:8c:90:cc:ac:4f:da:a7:d9:
         26:78:45:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUsTUmdwZt9ruTaRKev6tjAs/nMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFEMUExQzVBM0U2ODY1QzRFMDQ4QTg4MDk4RUNGRUM5
NzExNDU0OTAeFw0yNDA4MDMyMTE2MDFaFw0yNTA4MDIyMTIxMDFaMDMxMTAvBgNV
BAMTKDBEQ0I3QjlGNjlGMjZGRTRGMTY3RjNBQkI0RTBFMUExQTVFMTY0N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStbUATFB5qomGqoyonO6OQ+vE
omSVoP6G8omJ8tkadC3JY78JKArvzrsdv1Lx/3NNj9ekGYatNURr+r1555nJ+VB5
hUX0s+ZQddHpk7wcDhEcA/aBc2sr397BifYBICsu3mpOti4atNGQKQ2gU/dW/Fhd
N+8kLVh+KUSpyQ85C/OBKQIgaE2HoE1ON4ze1k6RejlWiEXWg9AK8aNbqQaAhr4W
P/Y13unpZ4/JsZwO8AmUB2VSLx+byR+l0YV09iB9DjxxpC3Ls0ENl3RPQJKTWjCs
Y1stxv8e2x7eS2UIqXK2cn8jsTVCVkbjQtwptHvttv26OZ1VRu9k2j8yfo8dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDct7n2nyb+TxZ/OrtODhoaXhZH8wHwYDVR0j
BBgwFoAUsdGhxaPmhlxOBIqICY7P7JcRRUkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRNUVZMU3laWFpqTVk4UGpoNGdpTXR2QjdqR2J0dVlieUtwSE1IWkZ1
WXMvMC9CMUQxQTFDNUEzRTY4NjVDNEUwNDhBODgwOThFQ0ZFQzk3MTE0NTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxRDFBMUM1QTNFNjg2NUM0
RTA0OEE4ODA5OEVDRkVDOTcxMTQ1NDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0TVFWTFN5Wlhaak1ZOFBqaDRnaU10dkI3akdidHVZYnlLcEhNSFpGdVlzLzAv
MzEzMzM4MmUzOTM0MmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKXu0wDQYJKoZIhvcNAQELBQADggEBADHM1x8f
M4P/rlQq2uglb3nG4h+ld21jUuQ72EBlW0XM5oDtnb+EyftwBgtndsWzU8sRrDcm
kVMeK+T+oEpxK8u7A7eOjKtQTCFcJzBE0pVK0I9E+xbKwj56ya1EbybGBnmt2721
2TZVJBQ4RFZhFJzpoxlVOf0AubZTUysuwLRr/iMd3P0M3s5k5QoywhV1suBnWaUY
Siay6R5xmzPaGOxe7xh4W+jZ0+ftKXbC4lhPFH/G+9QTM/ffXwXusDpu+9wYaJkL
w2swg/+k0ZcB0w798VeVxvCB+AHv8/qG8vbKK29HPVz3u4B/wbuLo9ChH/GF/rOM
kMysT9qn2SZ4Rcc=
-----END CERTIFICATE-----
Generated at Mon Aug 5 01:53:23 2024 by rpki-client on console-fra.rpki-client.org