Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa
File:                     3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          4KVHln6x3lwTAgJKIJshsiSjbWG/yIOwfFZJe1VE+n8=
Subject key identifier:   45:C4:D4:A8:05:01:05:B4:CF:05:93:2F:E4:C3:20:E6:1C:69:0B:C3
Certificate issuer:       /CN=0E5A5F5023E75AE879856236916A3D99195F7F79
Certificate serial:       46C43BC4C4B7FAF2163D9E2CF65C4E1F71A1C16C
Authority key identifier: 0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa
Signing time:             Thu 04 Apr 2024 04:48:42 +0000
ROA not before:           Thu 04 Apr 2024 04:43:42 +0000
ROA not after:            Thu 03 Apr 2025 04:48:42 +0000
asID:                     264585
IP address blocks:        138.36.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c4:3b:c4:c4:b7:fa:f2:16:3d:9e:2c:f6:5c:4e:1f:71:a1:c1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E5A5F5023E75AE879856236916A3D99195F7F79
        Validity
            Not Before: Apr  4 04:43:42 2024 GMT
            Not After : Apr  3 04:48:42 2025 GMT
        Subject: CN=45C4D4A8050105B4CF05932FE4C320E61C690BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:6c:b7:0a:60:40:fc:c1:31:b1:d4:9b:dc:
                    18:c9:ad:45:38:d6:26:8c:ee:8a:9d:ff:55:25:89:
                    4d:21:1e:41:6c:ee:bd:12:4c:4b:77:40:77:01:5a:
                    74:23:c4:eb:88:da:b6:b0:97:a4:af:17:92:a4:55:
                    ac:5f:67:03:53:98:b2:50:4a:8e:90:2e:b2:8e:3e:
                    27:7c:b2:c9:cc:0e:56:69:94:d5:2c:71:b1:dd:fb:
                    9f:49:c2:31:1f:17:87:43:7f:bb:d4:3c:f0:74:42:
                    fc:97:75:8f:4c:fc:9e:21:4c:70:e9:ca:98:74:9f:
                    ca:92:98:20:b9:53:96:95:39:0f:36:fd:b8:f6:0d:
                    fb:9f:79:87:96:db:fe:c0:9f:d9:fb:be:11:5c:c6:
                    05:9f:cb:28:ed:2c:6d:a2:9b:41:1d:b2:36:93:10:
                    d7:30:a3:84:d6:d4:d2:a4:be:6c:6a:0f:7a:3a:09:
                    f2:79:73:34:c0:5e:12:a7:b6:2b:19:5b:d3:70:95:
                    eb:5f:aa:bb:71:5a:75:63:ea:ba:5a:99:2c:b8:59:
                    96:d2:bc:25:fb:62:75:9e:95:2d:07:ec:f6:c6:0a:
                    1d:d4:3b:5c:91:fa:f9:90:a9:be:bb:ba:9d:eb:29:
                    40:e1:d4:e0:b6:81:dd:05:06:69:8e:64:03:b8:df:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C4:D4:A8:05:01:05:B4:CF:05:93:2F:E4:C3:20:E6:1C:69:0B:C3
            X509v3 Authority Key Identifier:
                keyid:0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:88:0e:04:e0:88:46:97:c7:0c:7a:16:43:5d:f5:81:9f:02:
         2d:45:23:ed:cd:15:44:f1:11:f9:a8:fb:80:b4:ea:2c:f1:4e:
         62:79:4d:4d:11:8c:d8:80:4b:68:e7:d2:62:cc:cb:26:75:63:
         df:e7:ca:f0:62:74:30:e6:23:8c:39:6e:54:c6:eb:1b:b1:86:
         20:18:35:10:40:95:e9:ba:cc:7a:1a:51:ca:f6:0d:b3:5f:ca:
         58:49:03:5f:44:2f:0b:1f:2e:15:24:06:6e:3b:01:c8:22:3e:
         fe:74:f7:d7:95:41:fe:ac:60:18:c9:0c:eb:c1:4c:e2:63:de:
         c6:06:8b:24:bf:7a:b8:99:1a:6d:e9:78:8d:17:a1:09:81:b5:
         ad:56:90:25:14:53:a8:c5:4e:3e:a0:70:79:2a:3d:1b:e7:36:
         09:5d:c6:9f:13:d4:2e:a2:cb:f9:6a:19:7e:11:de:22:52:bd:
         2a:32:f7:9f:7e:a5:81:ef:8b:e1:fa:16:63:c2:5f:0d:23:86:
         59:01:f4:7e:48:6d:3d:c8:f5:5a:fe:b3:f2:08:53:1e:24:df:
         fd:d1:e2:35:8e:a6:cb:36:b9:a3:0f:e4:ed:16:b7:da:f8:3f:
         ec:1d:4a:44:6b:b6:d7:d6:c4:ee:23:69:4e:0c:b1:22:bb:60:
         8c:b2:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 20:25:19 2024 by rpki-client on console-ams.rpki-client.org