Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233382e302f32342d3234203d3e20323634313737.roa
File:                     3133382e39342e3233382e302f32342d3234203d3e20323634313737.roa (raw, json)
Hash identifier:          OEeuoza0Y+VHaKacOXcp87xZ5GEXg9RjHOdb+sTI+qc=
Subject key identifier:   75:29:F7:21:C1:5C:03:A1:BE:AA:76:3B:C8:D5:F1:DE:7B:3D:AF:AB
Certificate issuer:       /CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
Certificate serial:       7F87D50682B3E8497F3E40855059DF0F71D234DB
Authority key identifier: B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233382e302f32342d3234203d3e20323634313737.roa
Signing time:             Sat 03 Aug 2024 21:21:01 +0000
ROA not before:           Sat 03 Aug 2024 21:16:01 +0000
ROA not after:            Sat 02 Aug 2025 21:21:01 +0000
asID:                     264177
IP address blocks:        138.94.238.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:87:d5:06:82:b3:e8:49:7f:3e:40:85:50:59:df:0f:71:d2:34:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D1A1C5A3E6865C4E048A88098ECFEC97114549
        Validity
            Not Before: Aug  3 21:16:01 2024 GMT
            Not After : Aug  2 21:21:01 2025 GMT
        Subject: CN=7529F721C15C03A1BEAA763BC8D5F1DE7B3DAFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:70:98:02:2c:bd:d6:94:af:a5:29:97:9d:
                    ba:6e:ca:87:bb:1a:80:84:14:d8:04:2e:0e:76:73:
                    9c:95:9f:96:aa:18:e3:89:7d:c8:8a:98:58:7b:b8:
                    49:c3:74:07:4f:83:2e:b1:55:62:ea:f5:9a:37:b2:
                    43:bc:a4:06:93:e1:b8:c7:5d:40:9f:2e:ab:ee:ef:
                    9c:31:d7:0d:5b:35:27:6c:e6:c4:f9:23:1c:68:b6:
                    8a:b5:a0:a0:6f:56:3d:1a:93:53:fd:80:7a:a4:61:
                    93:7e:65:40:c7:49:51:53:f8:69:43:b6:92:34:90:
                    80:67:9a:7e:e5:37:fc:dc:82:13:41:93:73:8e:72:
                    42:0f:9f:82:0c:8b:2c:8a:81:35:a3:75:63:25:7f:
                    64:ee:9a:1d:b7:6f:4b:a4:63:f0:3e:fb:37:77:55:
                    5f:fa:97:73:d3:c6:de:c8:d1:93:62:e8:2a:9b:53:
                    c4:47:65:e3:99:a6:1c:54:23:46:34:0f:8c:56:a1:
                    58:e7:32:9b:ad:1f:25:16:be:17:ed:7b:f0:7d:f3:
                    aa:dd:43:4a:19:1e:f6:b7:ba:1a:13:81:bd:35:85:
                    5c:5a:d6:f5:fc:89:bd:28:e5:19:93:fa:df:42:e8:
                    b0:02:3d:45:7b:70:4f:6b:b1:7d:b0:5a:06:13:50:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:29:F7:21:C1:5C:03:A1:BE:AA:76:3B:C8:D5:F1:DE:7B:3D:AF:AB
            X509v3 Authority Key Identifier:
                keyid:B1:D1:A1:C5:A3:E6:86:5C:4E:04:8A:88:09:8E:CF:EC:97:11:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D1A1C5A3E6865C4E048A88098ECFEC97114549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233382e302f32342d3234203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6f:83:7a:8c:c6:4a:e1:0e:e3:c3:8b:21:1b:ed:55:0a:20:
         c9:71:ab:5a:69:24:7a:13:f7:4e:26:16:b8:86:23:7b:94:d8:
         56:d3:56:4f:a7:01:4e:62:cf:f5:67:06:26:ca:5e:e0:da:e1:
         cb:92:d6:4e:81:c5:9c:1a:f1:64:48:56:14:a0:7f:b5:09:78:
         1e:60:1b:47:06:54:80:f3:e5:09:b9:56:5d:c2:33:19:8a:ef:
         2e:41:a8:1d:1f:97:bd:cf:b3:be:be:5c:ca:ff:e1:02:eb:2c:
         ee:b7:80:0d:2d:2e:99:90:2d:ca:a4:1a:86:e6:47:05:99:da:
         e1:87:4c:cb:ff:b3:7e:79:3c:a7:ea:9d:ad:f0:34:dd:63:65:
         d9:12:ea:cc:a2:03:2c:84:e2:b9:3c:31:e1:57:0a:a3:99:99:
         f6:19:91:ab:c0:50:b8:a3:33:f0:03:c5:ee:f5:94:fd:16:1b:
         41:08:aa:7b:b5:55:78:d7:e3:88:57:6c:84:01:13:8a:78:45:
         0f:72:9b:f6:de:89:15:6b:69:ea:d0:8b:97:b2:26:a4:9a:79:
         47:bc:19:f3:b8:b5:49:20:9c:cf:11:b1:3b:11:22:4c:49:14:
         b4:87:98:99:92:f4:61:23:4d:11:21:4e:a8:4d:7f:3e:f8:71:
         a6:9e:56:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:35 2024 by rpki-client on console-ams.rpki-client.org