Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
File:                     3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          k6eZatfipZ5aCSbh6mT8Vjtx78t4GavVhttgacj53zM=
Subject key identifier:   7E:25:F8:34:EC:13:18:4D:4F:F2:80:57:C3:EB:1F:CD:5A:62:BC:69
Certificate issuer:       /CN=69064F8F72CDE87A9EED7C07BB0FCBF94418E82B
Certificate serial:       4B850F956F45FC156A71AA3FCDFA731F81B631B0
Authority key identifier: 69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
Signing time:             Wed 03 Apr 2024 23:33:39 +0000
ROA not before:           Wed 03 Apr 2024 23:28:39 +0000
ROA not after:            Wed 02 Apr 2025 23:33:39 +0000
asID:                     263444
IP address blocks:        138.36.164.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:85:0f:95:6f:45:fc:15:6a:71:aa:3f:cd:fa:73:1f:81:b6:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69064F8F72CDE87A9EED7C07BB0FCBF94418E82B
        Validity
            Not Before: Apr  3 23:28:39 2024 GMT
            Not After : Apr  2 23:33:39 2025 GMT
        Subject: CN=7E25F834EC13184D4FF28057C3EB1FCD5A62BC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:f7:13:40:ed:0a:79:72:74:ce:4d:0b:1b:
                    17:18:d7:49:f3:52:cd:bb:24:69:54:2e:d3:87:74:
                    01:45:fa:02:cd:ce:72:7a:7c:3f:01:2a:d6:37:d6:
                    73:4e:36:4c:bd:64:cc:19:62:ab:c2:d3:6b:82:a7:
                    b4:a3:1c:62:21:34:66:ca:f3:13:2d:cf:89:bf:74:
                    a5:01:5e:d1:17:51:79:d4:24:40:40:51:1d:b0:4b:
                    72:96:9e:ed:bd:0b:a1:b7:a0:72:de:c1:4c:e7:79:
                    14:fe:5f:d2:24:cb:14:50:1c:27:05:1c:d8:3d:c6:
                    a9:7c:15:cd:57:70:94:10:be:cb:7c:48:01:6e:5e:
                    f4:fc:85:3b:cb:b2:f8:a7:22:6d:cd:d8:2f:f7:af:
                    8c:7e:af:07:a5:f7:11:ae:bd:6b:ac:9a:28:db:99:
                    08:9c:71:c5:b5:89:10:bd:6f:34:bf:d5:65:82:7f:
                    fb:4f:2c:79:13:e9:34:3a:68:0a:f8:1d:98:72:23:
                    b5:7d:15:ae:46:a3:12:66:4e:4b:9f:88:0e:71:de:
                    6a:43:85:39:55:33:d8:81:72:08:a6:94:56:ed:9c:
                    b7:89:be:66:42:72:b5:0d:d5:c6:20:f2:fe:03:91:
                    cd:4b:cf:bc:32:56:75:44:2c:86:85:7a:63:c3:73:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:F8:34:EC:13:18:4D:4F:F2:80:57:C3:EB:1F:CD:5A:62:BC:69
            X509v3 Authority Key Identifier:
                keyid:69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:88:64:aa:5d:39:eb:4f:cb:10:4d:ed:98:b2:f1:4e:bd:df:
         38:ea:82:96:77:da:bd:cc:af:e9:e6:3c:ad:45:39:24:74:65:
         f7:38:30:93:fe:ab:e8:c0:21:20:9a:5e:52:86:0e:3f:bb:21:
         e9:11:57:ed:a6:e9:4a:e6:83:a9:a2:7a:b4:24:18:bf:8b:67:
         b9:3a:22:fd:9f:e4:69:e2:e5:2c:25:96:99:c4:9c:ba:9a:e8:
         5b:df:a2:9f:df:86:1b:5a:00:c6:e5:0b:8e:e6:3a:83:8d:1f:
         53:81:1f:2d:08:b4:7c:a4:29:3e:b6:5b:9c:c2:71:03:e0:df:
         08:b7:4a:ba:21:e7:d7:da:45:3a:53:9e:e9:b8:28:cd:9c:0a:
         76:b1:69:27:0b:5b:9a:c2:42:6f:ca:84:4a:9d:0a:52:cf:1d:
         63:d7:56:9d:c7:d7:39:e4:b8:46:13:ba:fb:ea:45:b4:84:37:
         d8:3f:6c:75:15:ba:a0:87:fd:b0:40:8b:64:6d:1d:86:9a:82:
         be:f4:cd:3b:3a:1e:a3:7f:71:ed:00:c3:f7:57:8d:61:e6:74:
         60:40:81:34:58:08:2f:ba:6e:83:86:d3:f4:fa:a1:23:1d:0f:
         08:51:8e:37:81:f9:f7:53:04:ae:e7:ef:1d:bc:b7:42:a3:3b:
         01:8a:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 04:01:39 2024 by rpki-client on console-ams.rpki-client.org