Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa
File:                     3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          x8MDoo6cEo+RP0JT/CzxC1Q+10ubHA4IaTXSZHWpvjw=
Subject key identifier:   CE:D3:23:F7:07:EC:6D:91:3E:DC:50:B9:3C:29:7B:6A:35:14:39:9C
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       79EE8C30BD13481C1C535E35DA77B4F4E924E5E9
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        138.185.87.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ee:8c:30:bd:13:48:1c:1c:53:5e:35:da:77:b4:f4:e9:24:e5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=CED323F707EC6D913EDC50B93C297B6A3514399C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:a8:81:f6:e1:48:68:42:89:f3:ad:d2:bc:
                    c0:5c:e3:d7:5f:07:d1:58:b7:d8:3f:e1:b5:82:91:
                    6e:79:d4:87:53:7a:5f:00:e5:fa:78:d6:15:20:29:
                    1c:c8:02:90:c0:d8:9c:6c:65:21:11:95:c6:6c:94:
                    8f:0a:d8:9a:40:fb:c6:4f:4e:fa:44:21:fe:5b:57:
                    8a:b4:ed:c5:5f:bd:f9:fb:7a:07:e7:1b:5e:5c:33:
                    9e:76:9b:2d:ee:88:e2:ef:ab:f0:48:f3:05:2b:bd:
                    87:ee:8c:76:f8:93:36:e9:5f:f1:3a:db:dc:58:4b:
                    09:40:e0:e9:c4:64:b5:46:23:32:dd:59:d5:dc:1b:
                    0e:4e:93:d6:1c:d6:66:88:79:5a:78:b5:59:a1:10:
                    3b:fa:48:5b:da:04:98:2d:16:39:98:bf:60:31:3a:
                    5e:84:57:9a:9d:e2:3e:f3:bb:92:f9:e3:57:66:45:
                    62:15:25:5d:e1:a2:de:8d:a3:0f:ae:25:0e:87:dc:
                    a6:11:9f:e9:79:bb:22:05:01:a8:98:d9:14:5a:69:
                    87:14:be:7a:6a:f3:34:63:38:1f:8f:1e:d6:4b:8c:
                    fe:72:b7:20:b5:7c:4d:4b:a8:a8:03:35:f4:6f:85:
                    9f:96:5b:f9:6e:4f:15:13:cc:91:1a:46:86:75:1f:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D3:23:F7:07:EC:6D:91:3E:DC:50:B9:3C:29:7B:6A:35:14:39:9C
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:6b:eb:30:09:0d:17:be:dd:4d:3c:35:55:ee:5b:c3:51:e6:
         4c:8a:57:42:2f:86:e1:33:fe:fc:b9:e7:5d:83:19:55:1e:6a:
         f0:45:98:83:1f:5f:35:12:ba:d7:eb:39:aa:d5:5a:36:9c:f0:
         a2:ff:4b:5b:7b:72:94:48:10:75:66:42:05:aa:76:3c:7b:97:
         e3:fe:3e:27:f6:32:d4:cb:07:29:fa:7c:b2:2a:f0:d8:54:73:
         dd:8c:80:5e:b2:e1:cb:08:27:59:a8:f8:22:39:86:0c:14:56:
         30:ef:85:2b:76:01:0b:4c:47:64:97:d4:f3:f8:69:9c:73:55:
         18:d7:30:04:e8:37:7b:2d:dc:de:cc:e2:38:f1:6c:18:65:54:
         c9:60:bd:21:1b:a8:2c:4a:5b:b3:57:b3:6d:58:41:3c:2b:02:
         2c:9d:43:57:17:59:14:f2:66:27:66:46:78:17:d6:97:0d:d0:
         fb:7a:a2:37:97:d0:bd:b1:5d:b6:f0:cc:d4:af:df:12:26:2a:
         c1:d7:67:3d:3f:55:ef:9b:3f:50:9e:4f:cc:c2:63:ff:c7:30:
         bc:ea:1d:08:91:db:f8:2d:51:d1:7b:aa:3b:95:49:32:2e:e1:
         ee:26:c5:37:0d:c1:5e:8f:20:6b:33:55:0a:f5:69:7d:5c:96:
         79:b5:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org