Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3133382e39342e38312e302f32342d3332203d3e203532383333.roa
File:                     3133382e39342e38312e302f32342d3332203d3e203532383333.roa (raw, json)
Hash identifier:          CIsysPu2fVGyu6GlDghx+uxwBEAuVgRQHr1R8Kap+78=
Subject key identifier:   BA:79:5B:15:89:C8:80:81:3F:65:4A:6E:04:3A:B1:52:E5:A2:05:82
Certificate issuer:       /CN=D2316250FCE6226188A17FFE2BFE6230E715A267
Certificate serial:       4E492F8B6A416BD69C1147CE38A0CA1C5215A105
Authority key identifier: D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3133382e39342e38312e302f32342d3332203d3e203532383333.roa
Signing time:             Fri 13 Sep 2024 13:43:36 +0000
ROA not before:           Fri 13 Sep 2024 13:38:36 +0000
ROA not after:            Fri 12 Sep 2025 13:43:36 +0000
asID:                     52833
IP address blocks:        138.94.81.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:49:2f:8b:6a:41:6b:d6:9c:11:47:ce:38:a0:ca:1c:52:15:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2316250FCE6226188A17FFE2BFE6230E715A267
        Validity
            Not Before: Sep 13 13:38:36 2024 GMT
            Not After : Sep 12 13:43:36 2025 GMT
        Subject: CN=BA795B1589C880813F654A6E043AB152E5A20582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:8b:a7:b0:4d:2d:47:de:7e:a8:db:7d:c6:
                    69:b4:38:e3:44:4a:ed:aa:65:30:9d:cb:b1:23:18:
                    b4:75:5c:ea:0c:8d:e5:24:c2:3a:f7:5c:ae:09:b8:
                    68:8f:63:da:fb:08:ba:c1:e5:84:de:10:c5:62:38:
                    5f:8c:45:11:74:3d:6a:33:7f:0a:6e:6e:ad:af:cf:
                    a5:24:b3:9b:8e:af:3a:be:20:4e:b5:22:eb:11:11:
                    3f:d5:d9:c6:e7:bc:8a:04:2f:fd:82:18:5a:64:da:
                    ea:f7:bb:d2:76:d4:24:bf:d7:9f:7b:f6:1b:21:20:
                    26:76:b0:d0:82:e9:fa:3c:fe:f1:cb:f6:35:15:c5:
                    cb:36:3d:b9:60:ee:41:4b:e3:8c:5b:0f:17:03:99:
                    01:d5:5f:81:e4:28:ee:b0:c7:aa:bc:09:c4:7b:30:
                    6e:24:70:f9:ce:e2:7a:47:02:18:73:02:40:a8:e4:
                    0f:1f:71:59:35:1a:26:93:44:a4:d8:69:c1:45:86:
                    58:ec:d2:76:e3:6e:6c:89:d4:83:e8:63:4e:a0:9b:
                    02:b3:a9:cf:12:83:20:4d:8d:33:9b:a3:e0:49:db:
                    46:0e:ba:d6:f3:13:eb:f2:84:b9:68:4f:d1:a2:da:
                    09:40:89:a9:f8:dc:b2:ac:0c:e7:32:d4:68:29:02:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:5B:15:89:C8:80:81:3F:65:4A:6E:04:3A:B1:52:E5:A2:05:82
            X509v3 Authority Key Identifier:
                keyid:D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/D2316250FCE6226188A17FFE2BFE6230E715A267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3133382e39342e38312e302f32342d3332203d3e203532383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:7c:fa:71:44:c5:8a:53:03:d3:1f:f4:ad:fa:88:79:40:e9:
         38:9c:4f:2e:8d:91:b3:be:cc:f4:ec:68:8b:15:bc:c4:a5:00:
         14:5c:9e:9e:8d:ab:eb:32:ab:cf:a0:2b:8b:83:2b:b9:52:7f:
         79:a5:c6:71:6c:79:ab:7f:6a:dc:e8:e0:7d:00:da:0d:f9:6c:
         d4:08:11:9e:6f:63:84:42:63:24:9b:5c:c2:a1:b7:f3:24:41:
         e4:42:5a:1f:67:5b:f8:1d:eb:ee:f2:76:c3:cd:e7:be:fc:a6:
         d7:5d:5f:1c:eb:d7:06:5b:a7:c6:41:7b:40:a8:82:ed:4f:61:
         66:49:e0:dd:89:f1:87:df:8b:1c:ac:c8:68:50:0d:89:5c:8d:
         c3:fe:56:b1:ad:b9:ad:54:7d:1e:f5:a9:7a:b0:48:c0:96:56:
         72:ba:67:f5:c7:e2:2d:8d:4b:fc:64:fd:e1:66:0c:38:bc:7f:
         b5:aa:d2:61:ac:cd:95:1a:60:4c:a1:a8:c6:c8:f0:da:a0:ac:
         45:35:fe:bb:44:84:66:bf:61:75:fb:89:57:52:e4:8a:72:b2:
         08:3d:15:da:33:5d:bb:a8:e3:1f:a5:3c:9d:83:72:0b:18:4a:
         2d:cd:d7:45:6b:59:58:73:73:f1:3f:9f:cd:47:12:b6:02:eb:
         39:0c:44:2c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTkkvi2pBa9acEUfOOKDKHFIVoQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIzMTYyNTBGQ0U2MjI2MTg4QTE3RkZFMkJGRTYyMzBF
NzE1QTI2NzAeFw0yNDA5MTMxMzM4MzZaFw0yNTA5MTIxMzQzMzZaMDMxMTAvBgNV
BAMTKEJBNzk1QjE1ODlDODgwODEzRjY1NEE2RTA0M0FCMTUyRTVBMjA1ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTT4unsE0tR95+qNt9xmm0OONE
Su2qZTCdy7EjGLR1XOoMjeUkwjr3XK4JuGiPY9r7CLrB5YTeEMViOF+MRRF0PWoz
fwpubq2vz6Uks5uOrzq+IE61IusRET/V2cbnvIoEL/2CGFpk2ur3u9J21CS/1597
9hshICZ2sNCC6fo8/vHL9jUVxcs2Pblg7kFL44xbDxcDmQHVX4HkKO6wx6q8CcR7
MG4kcPnO4npHAhhzAkCo5A8fcVk1GiaTRKTYacFFhljs0nbjbmyJ1IPoY06gmwKz
qc8SgyBNjTObo+BJ20YOutbzE+vyhLloT9Gi2glAian43LKsDOcy1GgpAumVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUunlbFYnIgIE/ZUpuBDqxUuWiBYIwHwYDVR0j
BBgwFoAU0jFiUPzmImGIoX/+K/5iMOcVomcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWhUdGNUaXdvblVSbkFOOER3ZVhKUFdNVHpFU3JqTFhMSkpkeHJpYm5m
TXQvMC9EMjMxNjI1MEZDRTYyMjYxODhBMTdGRkUyQkZFNjIzMEU3MTVBMjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMzE2MjUwRkNFNjIyNjE4
OEExN0ZGRTJCRkU2MjMwRTcxNUEyNjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FoVHRjVGl3b25VUm5BTjhEd2VYSlBXTVR6RVNyakxYTEpKZHhyaWJuZk10LzAv
MzEzMzM4MmUzOTM0MmUzODMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMjM4
MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIpeUTANBgkqhkiG9w0BAQsFAAOCAQEA4Hz6cUTFilMD
0x/0rfqIeUDpOJxPLo2Rs77M9OxoixW8xKUAFFyeno2r6zKrz6Ari4MruVJ/eaXG
cWx5q39q3OjgfQDaDfls1AgRnm9jhEJjJJtcwqG38yRB5EJaH2db+B3r7vJ2w83n
vvym111fHOvXBlunxkF7QKiC7U9hZkng3Ynxh9+LHKzIaFANiVyNw/5Wsa25rVR9
HvWperBIwJZWcrpn9cfiLY1L/GT94WYMOLx/tarSYazNlRpgTKGoxsjw2qCsRTX+
u0SEZr9hdfuJV1LkinKyCD0V2jNdu6jjH6U8nYNyCxhKLc3XRWtZWHNz8T+fzUcS
tgLrOQxELA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:27:45 2024 by rpki-client on console-fra.rpki-client.org