Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa
File:                     3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          c3pQMDUm5n01wHcBZe8a4ShTQAeAdtB6hs1KSoBkhFw=
Subject key identifier:   BC:3A:EA:75:81:7A:03:67:85:65:1F:41:90:06:95:A7:0F:B6:44:C5
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       47545A17BFF60DB47218E3336C50ED257C291F3A
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa
Signing time:             Mon 16 Sep 2024 08:30:47 +0000
ROA not before:           Mon 16 Sep 2024 08:25:47 +0000
ROA not after:            Mon 15 Sep 2025 08:30:47 +0000
asID:                     262293
IP address blocks:        138.94.108.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:54:5a:17:bf:f6:0d:b4:72:18:e3:33:6c:50:ed:25:7c:29:1f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Sep 16 08:25:47 2024 GMT
            Not After : Sep 15 08:30:47 2025 GMT
        Subject: CN=BC3AEA75817A036785651F41900695A70FB644C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:f3:6f:e3:97:e3:b0:32:c8:86:49:54:de:
                    e6:0f:51:f3:74:f6:22:65:9d:6b:18:71:a5:9c:3a:
                    41:3f:80:93:27:67:75:17:15:18:3d:a3:99:5d:fc:
                    5c:56:65:5a:ee:d1:75:9e:c2:8a:2b:fb:c6:c8:dd:
                    f4:bb:32:2f:d0:5e:b5:73:44:03:ee:6e:53:5e:28:
                    ed:15:9d:94:8e:58:6b:02:2d:2e:38:e1:2c:a8:6d:
                    52:f5:01:1e:08:5e:ee:65:a8:b0:33:17:3b:99:2b:
                    d2:04:51:ef:cc:ee:c2:80:f1:2b:80:ff:bb:d4:23:
                    7a:19:c5:33:10:b8:44:e0:b8:4f:b0:4b:cc:71:17:
                    87:89:58:66:00:3b:b2:0e:3e:18:4d:68:bb:45:9f:
                    42:81:10:81:3a:91:b7:44:30:ec:1c:8e:8e:e1:e7:
                    76:5e:07:8e:8f:d7:90:63:dc:00:5e:d8:c1:d9:96:
                    b4:64:9e:68:bd:18:eb:0b:01:df:56:30:87:a8:40:
                    fe:b0:d3:17:c8:38:49:bb:97:42:fc:b8:8d:e8:80:
                    3c:2c:22:88:52:ef:11:d8:63:55:b9:b1:29:5d:01:
                    19:92:f9:5b:28:fe:ec:3d:b7:21:5c:e9:88:10:d9:
                    e8:cf:fd:97:68:f9:f7:17:b5:23:9d:b4:2d:08:d9:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:EA:75:81:7A:03:67:85:65:1F:41:90:06:95:A7:0F:B6:44:C5
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:77:5c:ea:36:d8:3e:e9:88:73:75:21:5b:90:3d:fa:ff:00:
         b9:bb:d8:63:89:db:c2:9c:14:d4:69:73:74:7c:e0:c9:48:d2:
         3f:ce:5f:9f:2b:a0:df:0a:08:b2:29:7e:20:34:0d:78:dc:95:
         59:62:51:80:03:0a:42:8c:7c:a8:95:2b:02:8e:bb:b4:08:6b:
         42:2d:b7:f4:6d:2f:ba:f4:48:e0:af:a1:c1:4e:39:56:e4:88:
         e1:0c:92:5e:72:97:13:d2:61:fd:b0:c0:d7:d4:1f:61:a9:02:
         7e:6e:b2:8e:df:45:ef:4b:3a:73:2d:3c:d1:9a:59:d5:46:c6:
         71:95:6b:59:0e:bd:d7:59:50:72:b1:ed:94:26:6d:69:0d:60:
         b3:30:01:07:64:0d:56:77:d1:01:3f:20:3a:93:45:26:d2:99:
         19:d4:07:44:4c:54:9c:79:af:65:98:98:f5:f0:03:93:3e:76:
         32:fe:79:f3:73:2b:dc:2c:11:9b:81:c2:15:32:5c:b3:3f:e7:
         45:07:30:ec:36:06:5b:29:35:38:c0:0f:a3:a8:40:2c:6f:88:
         9b:2f:cc:0e:32:ff:fd:f3:5d:41:e5:14:ce:17:67:73:6b:fe:
         77:3d:e1:e4:cb:f7:bc:ff:dd:f4:4e:fb:e3:ad:05:fb:b9:f4:
         13:d6:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 01:01:23 2024 by rpki-client on console-fra.rpki-client.org