Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/3133382e3138352e38342e302f32342d3234203d3e20323634333434.roa
File:                     3133382e3138352e38342e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          RLSqxNJmNpRM7+MF1PFbaojn21lFfMHc9kdrn145XvE=
Subject key identifier:   B0:41:60:17:2C:DE:47:DB:91:C7:6F:59:F6:3E:4E:4D:1C:76:FB:BB
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       2E92EF24574619529A01187409EC542087B54657
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/3133382e3138352e38342e302f32342d3234203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:35 +0000
ROA not before:           Wed 03 Apr 2024 21:19:35 +0000
ROA not after:            Wed 02 Apr 2025 21:24:35 +0000
asID:                     264344
IP address blocks:        138.185.84.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:92:ef:24:57:46:19:52:9a:01:18:74:09:ec:54:20:87:b5:46:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:35 2024 GMT
            Not After : Apr  2 21:24:35 2025 GMT
        Subject: CN=B04160172CDE47DB91C76F59F63E4E4D1C76FBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:08:9b:c7:ba:f9:19:38:0e:ef:b7:47:f1:
                    21:68:43:48:bc:a5:ce:42:fa:ea:ab:1a:d4:a3:54:
                    26:95:51:d8:5b:95:cb:5f:e1:d5:03:48:87:29:cd:
                    43:7d:cb:d5:d0:0c:ca:31:1e:05:c0:d0:33:1b:07:
                    3a:e8:bb:42:3c:b7:3b:d1:4b:15:6a:11:97:2b:58:
                    c4:93:03:e8:b4:35:8b:1b:80:e3:4d:c6:d0:42:dc:
                    1d:c3:35:42:11:71:ac:07:a7:12:f5:14:d9:a0:52:
                    ba:5a:90:d2:b1:90:80:52:f9:5a:47:25:11:9b:e3:
                    9d:79:de:8b:87:f6:e9:2b:d6:a3:d1:6f:bf:f7:85:
                    9f:ca:86:8d:8f:fb:dc:76:98:f2:26:58:73:1c:4d:
                    c9:67:2d:06:3a:72:f0:12:60:58:a2:33:9c:2d:aa:
                    4a:e2:a0:1e:d3:2b:c9:40:f0:47:7d:d7:f4:b0:d6:
                    03:76:cf:01:34:f0:ed:22:56:4a:aa:46:1f:c5:dd:
                    2c:32:18:ce:6a:80:98:c0:fa:a4:06:f1:84:f1:d4:
                    6a:05:b0:a1:e0:b9:a3:4d:17:29:69:7f:56:93:d1:
                    11:13:da:be:06:12:ef:4a:7d:f1:38:39:f2:de:e8:
                    1a:db:02:8a:c2:5e:69:ba:18:34:61:94:8a:1e:ce:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:41:60:17:2C:DE:47:DB:91:C7:6F:59:F6:3E:4E:4D:1C:76:FB:BB
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/3133382e3138352e38342e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c8:ca:d4:dc:18:38:bd:e9:3d:ba:89:88:00:c4:88:99:bb:
         02:82:1d:eb:bc:d4:0e:96:11:34:d5:14:e0:17:d0:a3:b7:33:
         b5:44:f3:b5:74:23:41:14:39:e2:58:a4:dc:79:5a:bc:d6:3a:
         fe:a2:eb:b0:5e:00:13:d2:14:1c:11:98:76:b6:fc:9a:98:2f:
         02:40:91:5e:09:82:c0:00:a6:92:35:50:53:5a:9c:14:16:43:
         23:ce:50:96:66:23:7c:e3:cf:49:d1:6f:a5:64:82:ce:2b:5b:
         16:21:f4:b3:c5:ef:5b:a9:a6:0b:36:42:88:2d:d1:fe:1a:86:
         88:ee:fe:aa:19:bf:8b:95:89:c7:8e:6f:26:71:7b:33:1d:f4:
         c8:e5:da:35:3f:b1:ee:ba:c2:10:57:ba:31:80:42:4e:c6:bb:
         f9:c9:d7:56:b2:6f:0e:79:76:75:ab:3a:fe:19:e9:a6:24:42:
         c9:9c:a0:92:32:36:95:8f:10:bc:7b:61:30:a8:07:54:50:34:
         c6:17:e0:01:29:f0:29:03:db:cb:2b:e0:56:66:8b:80:48:3c:
         73:b7:9f:3c:65:f1:c5:5e:57:54:b1:84:9f:a9:2c:02:5d:a8:
         d4:68:88:9f:44:55:66:41:11:31:a7:bc:0d:d0:04:f7:98:bf:
         c7:41:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org