Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3133382e39342e38332e302f32342d3332203d3e203532383333.roa
File:                     3133382e39342e38332e302f32342d3332203d3e203532383333.roa (raw, json)
Hash identifier:          W6UK/9OMmxcZfH73020S/kzTIQACO25Txh8RfnbCCiY=
Subject key identifier:   4B:B7:79:85:BC:F6:04:95:8D:9E:27:93:AF:E1:79:DC:0C:60:C7:18
Certificate issuer:       /CN=D2316250FCE6226188A17FFE2BFE6230E715A267
Certificate serial:       30AD174859BB283ED14D6303D0CE24A620E853AD
Authority key identifier: D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3133382e39342e38332e302f32342d3332203d3e203532383333.roa
Signing time:             Fri 13 Sep 2024 13:43:59 +0000
ROA not before:           Fri 13 Sep 2024 13:38:59 +0000
ROA not after:            Fri 12 Sep 2025 13:43:59 +0000
asID:                     52833
IP address blocks:        138.94.83.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ad:17:48:59:bb:28:3e:d1:4d:63:03:d0:ce:24:a6:20:e8:53:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2316250FCE6226188A17FFE2BFE6230E715A267
        Validity
            Not Before: Sep 13 13:38:59 2024 GMT
            Not After : Sep 12 13:43:59 2025 GMT
        Subject: CN=4BB77985BCF604958D9E2793AFE179DC0C60C718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:50:bd:cf:5a:93:f3:fc:ad:55:1f:a0:87:
                    5e:ab:19:30:3f:96:3c:33:ff:31:e1:23:f6:f4:9b:
                    d2:86:93:b4:9e:e5:30:86:5d:e2:fc:bf:44:e1:2d:
                    6a:6a:00:5d:f4:17:4e:1e:de:e2:f7:da:22:1e:84:
                    f5:29:7d:47:dd:62:ab:a6:04:60:a6:f7:3b:4e:56:
                    dd:8a:42:7b:03:53:71:5a:ce:02:fc:7d:d7:85:96:
                    fa:45:33:26:10:7e:17:f6:c0:02:99:87:84:2d:4e:
                    ec:21:63:b3:2d:e6:57:e4:d3:d8:7f:65:d2:9e:af:
                    1b:b1:3a:55:bc:fe:7b:91:33:13:c9:49:f1:3e:e7:
                    cb:e7:a5:13:a6:0f:96:41:06:b5:fe:a0:af:79:71:
                    5c:fd:e1:fa:f8:c9:34:5c:4e:77:76:c2:2d:43:90:
                    22:b1:f3:5d:ae:9f:85:af:4a:fe:48:f2:2c:72:be:
                    27:da:1a:ce:c2:11:ea:68:82:d5:44:0d:21:47:5c:
                    74:d2:9e:e8:ea:4c:52:ad:ab:37:1b:b8:cd:90:d2:
                    9c:83:99:c4:e7:86:68:f4:d5:94:06:9f:3e:c5:40:
                    95:ba:c8:4e:eb:98:47:b2:4e:7f:ba:45:4b:11:0a:
                    2b:49:72:ff:61:74:e2:c8:80:e1:4f:d8:5f:c6:c7:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:79:85:BC:F6:04:95:8D:9E:27:93:AF:E1:79:DC:0C:60:C7:18
            X509v3 Authority Key Identifier:
                keyid:D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/D2316250FCE6226188A17FFE2BFE6230E715A267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3133382e39342e38332e302f32342d3332203d3e203532383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:67:bc:48:3c:86:7a:40:29:4f:19:76:39:62:59:96:80:cd:
         84:07:84:cc:ef:63:26:86:48:59:7f:52:e4:38:5d:18:94:64:
         c1:14:65:af:32:81:7e:16:00:89:bc:0b:39:20:43:22:d8:5d:
         30:e0:57:b2:9a:57:2d:97:c1:13:05:dd:05:b0:10:11:a5:8b:
         cd:83:56:18:32:1e:04:72:66:b3:83:42:1f:a0:c0:f1:d1:01:
         d5:9a:7f:1c:51:03:00:d2:69:03:cd:e6:83:95:74:e5:3b:96:
         81:e9:7d:75:85:bf:75:3e:79:d5:1b:33:94:22:89:4b:aa:bb:
         2e:d9:33:c4:40:42:0f:98:c6:bd:84:22:bc:11:18:af:9e:aa:
         52:9a:f2:a3:bf:07:46:71:78:07:63:41:3a:f4:d3:2a:89:a7:
         51:70:d6:a5:99:5f:21:3b:03:eb:83:32:c4:6e:ec:2f:29:71:
         11:17:60:9d:4e:71:fa:68:cd:6f:0a:3f:ff:0c:11:64:62:6a:
         55:98:b0:8d:89:fe:0b:11:98:83:64:64:01:46:60:98:1f:f4:
         87:61:ad:8b:73:2c:d7:3b:07:f6:65:c5:74:32:5c:3f:cf:7e:
         e9:cd:8a:0e:6a:7e:1c:4a:2f:22:75:16:78:65:00:f6:5a:27:
         2e:d2:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:59:28 2024 by rpki-client on console-ams.rpki-client.org