Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
File:                     3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          NdqmTzPrnFBGKdfUYp3VRXifXFVwihT7PqU/C9vj5c8=
Subject key identifier:   54:52:01:7E:01:88:63:CD:40:E1:88:D2:2E:DF:73:1A:31:22:BD:39
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       6BCFA7F6119658562677BB5EF07A1B1085FBDD6D
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
Signing time:             Thu 31 Oct 2024 17:24:30 +0000
ROA not before:           Thu 31 Oct 2024 17:19:30 +0000
ROA not after:            Thu 30 Oct 2025 17:24:30 +0000
asID:                     28287
IP address blocks:        138.118.120.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cf:a7:f6:11:96:58:56:26:77:bb:5e:f0:7a:1b:10:85:fb:dd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:19:30 2024 GMT
            Not After : Oct 30 17:24:30 2025 GMT
        Subject: CN=5452017E018863CD40E188D22EDF731A3122BD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:98:e6:9c:2e:bc:e3:e9:2f:ef:06:90:80:
                    16:09:8e:c2:6b:a4:36:f4:d6:fc:bb:4f:0d:33:0b:
                    31:ff:b2:f2:62:53:8b:a8:8c:5b:42:b7:4b:46:ee:
                    80:43:5e:a3:04:73:80:84:cc:d5:d9:e1:92:e3:6b:
                    02:c7:8b:1b:b7:a7:e8:99:b5:30:10:9d:65:f0:50:
                    8e:ab:7a:a2:20:8c:f0:7b:4e:b7:6d:b0:d7:8b:96:
                    6a:fc:29:ba:03:0d:0a:0c:ac:4f:d8:23:90:f3:29:
                    8d:9c:23:30:ea:e5:be:bc:a3:8e:60:cf:dd:d4:33:
                    c9:b5:ea:56:cf:0b:15:f8:b3:73:b2:3a:3f:bc:0a:
                    8f:dc:e5:b9:b8:5e:74:5b:ac:58:51:5c:36:14:65:
                    bf:5d:e2:d8:f7:7f:92:47:e4:47:e8:60:17:9b:9d:
                    3e:23:f8:a3:d2:e1:39:03:da:71:a8:f0:87:45:e8:
                    16:a5:48:cd:14:02:28:ce:10:ae:50:c6:58:78:a8:
                    04:3c:80:de:bc:6e:5b:84:7d:65:57:45:92:b7:b6:
                    9a:5d:f4:22:ac:ee:36:b5:d7:38:96:d0:f0:fc:a4:
                    a8:b0:93:e2:8a:60:d5:55:8d:67:97:a5:f4:f6:37:
                    8e:21:67:2f:23:fc:69:1c:99:4d:94:f9:17:9a:9b:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:01:7E:01:88:63:CD:40:E1:88:D2:2E:DF:73:1A:31:22:BD:39
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:d3:15:98:a0:99:35:9d:ce:e7:00:d6:96:1f:b1:ea:a1:
         fb:9b:8a:2c:d7:06:0e:8c:88:d1:89:68:a7:25:b5:63:7d:ff:
         e3:3a:04:c5:11:6d:1a:37:72:19:ff:94:68:5f:aa:84:7e:0b:
         3a:cf:e1:57:6c:0d:86:20:21:f3:b7:52:30:50:71:81:1a:c8:
         f9:6a:49:3b:37:d7:b4:cf:38:1c:77:c1:2e:cc:a1:64:5c:5d:
         0d:df:db:d3:d8:5e:e9:01:a7:37:36:4f:b1:3b:5f:4f:59:e6:
         5f:89:ab:54:ca:61:59:9b:10:d7:32:e9:ba:4f:41:3d:3e:aa:
         24:1f:9c:a9:46:2e:0b:f6:b7:98:9b:39:22:8a:c0:e5:1d:55:
         b9:5e:30:b4:ac:cb:13:28:c3:60:ee:4a:96:04:65:b3:74:6d:
         b6:c7:c5:b5:d6:1e:13:34:fd:af:cc:e2:3d:06:7a:0f:d0:d9:
         bf:e1:22:4c:e1:2d:b1:02:2b:92:14:64:9e:75:87:8a:31:6e:
         db:d1:de:bd:84:ab:59:da:1e:86:9e:ce:7d:01:2a:7b:6e:67:
         b5:9b:cc:6e:b8:17:33:40:64:ae:3a:39:5d:1c:8c:e2:ae:e0:
         a9:6c:b9:27:a4:3b:a8:be:37:3f:52:c4:53:79:da:84:21:b0:
         52:b8:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org