Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa
File:                     3133382e33362e33362e302f32322d3234203d3e20323634353638.roa (raw, json)
Hash identifier:          9B0VNnM+HDkT/TntVCdxCVB32KwXOgIc0wWcNv2puOc=
Subject key identifier:   8F:DB:0A:D0:BA:45:6C:BC:12:79:E4:B4:6F:16:F9:52:FF:AF:1B:2E
Certificate issuer:       /CN=0EE453A3507C247D4D2FA3B18D9661870AA5160A
Certificate serial:       4C038E25A04A8EDC5F03593CDE9E1D28A3217E90
Authority key identifier: 0E:E4:53:A3:50:7C:24:7D:4D:2F:A3:B1:8D:96:61:87:0A:A5:16:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa
Signing time:             Wed 03 Apr 2024 19:46:40 +0000
ROA not before:           Wed 03 Apr 2024 19:41:40 +0000
ROA not after:            Wed 02 Apr 2025 19:46:40 +0000
asID:                     264568
IP address blocks:        138.36.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:03:8e:25:a0:4a:8e:dc:5f:03:59:3c:de:9e:1d:28:a3:21:7e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EE453A3507C247D4D2FA3B18D9661870AA5160A
        Validity
            Not Before: Apr  3 19:41:40 2024 GMT
            Not After : Apr  2 19:46:40 2025 GMT
        Subject: CN=8FDB0AD0BA456CBC1279E4B46F16F952FFAF1B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:b5:bf:7c:dc:cb:5f:32:d3:fd:b5:4c:07:
                    18:8c:a0:a2:be:d0:df:5c:22:7f:9f:27:68:d0:90:
                    fa:63:97:3e:0b:d1:50:ae:a4:88:7c:f2:e2:de:50:
                    f3:8f:5a:d7:b8:3c:56:e3:5c:e3:91:49:2d:7e:21:
                    a6:99:08:58:3e:53:eb:55:db:08:44:70:bb:2d:d8:
                    d1:a7:51:25:00:cb:ce:ea:64:64:03:bc:78:de:6d:
                    3c:ec:a1:c4:79:70:81:1f:b5:18:d6:14:e9:d4:b4:
                    b9:73:fc:f6:e1:fb:e3:02:0d:22:24:15:bc:dd:b0:
                    b2:3e:04:08:61:ae:cf:1f:be:94:b7:9e:f8:2e:d7:
                    f7:7b:3d:55:a3:5c:6c:29:09:95:63:57:67:b7:c2:
                    81:9c:a1:4c:e8:3f:eb:d5:4f:c6:f3:34:b0:36:35:
                    1c:d8:8b:69:e5:33:0a:d6:54:fb:56:83:3b:1e:9d:
                    fb:60:8c:4f:52:6a:89:dd:f8:dd:e7:e2:3a:d6:ca:
                    7f:52:fb:25:08:48:d9:db:5a:0f:c8:81:36:8d:50:
                    bf:e4:23:c7:86:0a:b8:bb:9c:4f:1e:b8:b0:7b:b4:
                    cd:a1:f4:45:4f:03:56:b3:92:5f:fc:e8:bb:ce:ac:
                    b6:15:e9:81:ca:4c:82:03:a4:aa:c9:30:25:f5:b0:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:0A:D0:BA:45:6C:BC:12:79:E4:B4:6F:16:F9:52:FF:AF:1B:2E
            X509v3 Authority Key Identifier:
                keyid:0E:E4:53:A3:50:7C:24:7D:4D:2F:A3:B1:8D:96:61:87:0A:A5:16:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:11:4e:a2:ad:b6:0b:47:74:61:c6:29:2f:c1:11:39:a5:
         71:b9:9f:41:0c:86:e6:4c:0d:56:b4:19:fb:17:0c:94:8d:2d:
         e7:ed:ac:a4:df:23:96:ae:b9:40:9d:e4:d6:01:7a:7c:dc:46:
         c8:44:2d:47:a5:6d:89:62:d0:f3:3a:10:a0:0a:e8:ad:5c:44:
         c9:31:b8:31:0b:cc:10:5c:d6:22:c9:43:7f:8b:5d:44:56:f4:
         93:3f:23:6f:71:32:96:44:db:74:0e:47:18:c6:22:bd:37:81:
         a5:a3:32:f3:83:5c:fa:dd:4e:4b:48:d1:03:75:ee:d1:60:26:
         f6:0b:53:89:b8:d2:61:54:9e:7a:16:54:37:96:28:01:77:ac:
         d8:aa:ac:29:50:33:c1:47:86:b5:0d:99:68:40:8a:39:89:ea:
         35:14:4d:f3:6f:54:b4:95:92:c3:1b:7a:17:11:a8:25:9e:a2:
         d5:50:c2:55:00:de:6d:0f:e3:5e:51:bd:b7:f6:d9:aa:1a:1b:
         c1:21:db:88:f2:98:a6:da:3b:e6:f4:61:0a:0d:23:67:eb:d6:
         3f:96:7f:21:e0:80:ca:1f:7d:58:db:fd:f9:79:6b:89:db:a8:
         1f:5c:77:13:28:eb:f4:ee:e7:1e:c6:8e:1d:4a:46:47:0a:99:
         bb:73:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:28:24 2024 by rpki-client on console-ams.rpki-client.org