Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233382e302f32332d3233203d3e20323634313737.roa
File:                     3133382e39342e3233382e302f32332d3233203d3e20323634313737.roa (raw, json)
Hash identifier:          TswLdr0mKJ0Uz4zAJlYvkju1iBu3bsXWwdjA6iZDOGg=
Subject key identifier:   CA:DC:FA:52:18:7C:D9:62:DC:1D:A5:84:1D:B5:BF:C8:DE:E0:EC:A9
Certificate issuer:       /CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
Certificate serial:       027C3144F2365D9C926C2ABFA484FE70C5E178DC
Authority key identifier: B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233382e302f32332d3233203d3e20323634313737.roa
Signing time:             Sat 03 Aug 2024 21:21:02 +0000
ROA not before:           Sat 03 Aug 2024 21:16:02 +0000
ROA not after:            Sat 02 Aug 2025 21:21:02 +0000
asID:                     264177
IP address blocks:        138.94.238.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7c:31:44:f2:36:5d:9c:92:6c:2a:bf:a4:84:fe:70:c5:e1:78:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
        Validity
            Not Before: Aug  3 21:16:02 2024 GMT
            Not After : Aug  2 21:21:02 2025 GMT
        Subject: CN=CADCFA52187CD962DC1DA5841DB5BFC8DEE0ECA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:eb:38:ef:f1:3c:89:c6:9e:00:4e:5e:db:
                    49:8d:7f:86:cf:a8:19:ed:2c:fc:59:8f:4b:f5:39:
                    9f:48:37:ae:85:f3:ef:7a:19:d5:6b:d5:38:99:e7:
                    1e:e0:4c:6c:3f:a0:11:31:bb:af:9c:98:9b:b2:3c:
                    e3:ab:1d:92:60:1c:d0:d4:cf:ad:34:f6:85:c1:50:
                    c9:d1:30:a0:d5:81:1d:93:ac:e6:f5:dc:60:86:a3:
                    a6:fc:69:dc:4f:3b:6d:6b:75:16:b9:53:21:a0:9a:
                    ec:71:81:14:e2:32:72:aa:57:59:8f:c9:cd:1d:67:
                    11:0a:15:01:48:61:28:48:fa:ef:27:ab:16:84:ef:
                    5d:37:45:79:b9:c9:fd:e8:0f:e1:d5:dc:a4:a2:e8:
                    1e:5f:d2:9a:10:78:25:6f:03:23:d3:fd:c8:bd:4f:
                    d2:fd:a3:e2:80:f2:6e:c9:f4:7f:bf:06:57:f7:eb:
                    b7:8a:82:61:ba:1d:8c:f7:c4:8f:22:4f:49:a6:78:
                    34:c6:7c:01:57:dd:c6:66:ec:51:ea:55:54:ca:85:
                    00:c7:27:29:c0:e2:53:0e:82:7e:e7:a0:23:d4:7d:
                    93:e4:d2:60:aa:8f:19:71:e4:53:40:14:2a:51:9a:
                    87:36:34:61:cf:bb:a9:bf:91:f7:1b:08:d9:bf:86:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DC:FA:52:18:7C:D9:62:DC:1D:A5:84:1D:B5:BF:C8:DE:E0:EC:A9
            X509v3 Authority Key Identifier:
                keyid:B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233382e302f32332d3233203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:50:1d:06:f4:6b:ab:e1:bb:0b:44:19:0b:08:f5:43:03:68:
         6f:61:e7:40:63:fd:cc:63:1a:f3:b9:24:87:82:53:16:5c:2d:
         c4:ac:4d:c9:c4:0c:89:76:ad:c9:4f:cd:b9:a7:fb:a2:8f:d6:
         a7:87:81:5c:26:8f:4c:0e:7c:a7:d1:c3:41:59:22:a3:93:6b:
         58:c5:18:bf:ca:66:9a:09:69:fb:da:c3:e8:23:61:26:8c:5a:
         3b:60:ad:a7:57:5d:84:e3:76:f7:21:42:d8:35:09:98:18:dd:
         37:d9:85:72:26:0c:8f:2f:73:24:db:e6:95:f0:23:ce:d2:75:
         c3:40:f2:16:0a:f2:f9:5b:39:52:2e:0e:49:a6:7b:55:c5:8a:
         2f:a8:1e:ac:3a:73:06:8a:83:f6:0f:48:71:5c:91:ab:98:c4:
         c0:6e:87:b4:1c:45:55:d3:d5:6f:52:55:a4:87:91:c8:6b:63:
         cb:45:48:09:ff:de:c3:73:a5:f9:1b:52:c4:3c:49:e5:9f:8e:
         54:72:e0:8a:a7:72:d7:aa:14:75:02:bc:e8:38:a9:4f:4e:87:
         3f:2d:3a:9e:b1:b6:7c:47:cb:9d:ad:a2:75:0a:c8:2d:54:9d:
         e1:d4:90:03:38:d5:1a:75:08:2d:ee:a2:67:5d:e7:1d:26:6b:
         df:e1:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:35 2024 by rpki-client on console-ams.rpki-client.org