Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e302e3232342e302f32322d3234203d3e20323730383134.roa
File:                     3133382e302e3232342e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          /5gLDZw+nFKrJ8R8MfEbsMLTHGyCxGk/sC3rSy3ZJlw=
Subject key identifier:   D4:1B:BC:81:44:8A:C9:2D:F8:FE:7A:47:89:26:43:A7:72:85:CF:BA
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       201A64A34A53EFFA645B692B4C993FE68045D1F7
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e302e3232342e302f32322d3234203d3e20323730383134.roa
Signing time:             Fri 09 Aug 2024 17:34:43 +0000
ROA not before:           Fri 09 Aug 2024 17:29:43 +0000
ROA not after:            Fri 08 Aug 2025 17:34:43 +0000
asID:                     270814
IP address blocks:        138.0.224.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:64:a3:4a:53:ef:fa:64:5b:69:2b:4c:99:3f:e6:80:45:d1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:29:43 2024 GMT
            Not After : Aug  8 17:34:43 2025 GMT
        Subject: CN=D41BBC81448AC92DF8FE7A47892643A77285CFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:9a:48:41:87:19:87:1b:66:d5:db:11:fa:
                    53:95:43:a5:ac:b8:27:fc:71:c2:df:89:f1:9b:99:
                    46:97:8d:54:fe:d2:bc:f4:bc:f9:c4:8d:1e:f7:aa:
                    f6:e4:f4:a6:66:23:f7:b6:17:fd:f2:57:6d:52:91:
                    87:5e:48:4e:8b:d0:d2:59:61:f0:11:e8:80:39:89:
                    5a:d1:64:02:4a:f2:7a:50:89:f4:32:01:ce:b9:03:
                    98:25:e0:d7:c9:cd:a2:fa:b8:20:0f:07:43:19:49:
                    70:74:ef:2b:48:01:58:e8:ae:25:c7:6b:da:71:44:
                    c5:71:80:47:df:eb:6c:68:14:fa:c4:72:31:38:f9:
                    05:9c:f7:ad:d4:01:de:5a:b2:fd:90:40:75:91:5a:
                    26:e6:b4:53:b2:5e:46:ab:f1:ab:66:ac:d1:bc:7d:
                    35:26:2e:a5:86:81:e1:f9:5b:f7:e2:b4:4e:bb:9c:
                    a9:61:b8:39:d1:74:ed:0a:e8:1e:8b:79:aa:bb:a0:
                    8d:e0:09:aa:ad:63:87:92:d0:df:f6:46:08:dc:8f:
                    ca:10:ba:43:df:e3:c6:c2:98:6c:b4:41:1e:5b:3e:
                    2f:23:2f:6c:de:25:e4:df:67:a7:7c:a4:11:ce:ff:
                    ba:58:6a:4c:ab:76:4d:95:95:41:b6:19:67:3c:62:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1B:BC:81:44:8A:C9:2D:F8:FE:7A:47:89:26:43:A7:72:85:CF:BA
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e302e3232342e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:01:9c:18:db:1c:f1:1e:f3:c0:5e:3f:a2:80:a8:3d:0f:
         83:45:2e:fc:01:44:9b:4d:48:e4:90:66:d4:f6:9a:fd:23:96:
         28:ca:ab:55:fa:83:dd:fb:ff:59:3f:0b:fa:02:1e:cb:a9:c7:
         d3:31:3a:ab:85:cc:04:e7:73:f0:ba:b4:dc:63:2e:ac:2d:f9:
         7f:de:18:88:d5:8d:5a:18:6a:10:7f:1c:a8:c4:90:d8:f1:4f:
         11:38:1f:34:44:0d:4b:4b:02:f6:58:04:c8:c9:ea:9a:29:84:
         95:97:40:84:2e:e9:da:d9:e9:ee:a0:79:38:27:60:e9:f4:87:
         ee:b2:67:ed:bc:49:36:98:f6:cc:d5:0f:96:40:93:51:4e:54:
         2d:67:08:65:26:00:d7:0a:9a:98:86:40:a9:d3:6c:32:e0:0d:
         2c:8a:d6:06:13:8c:43:82:8f:c4:32:4e:51:c7:e6:8a:a4:6e:
         69:56:da:fe:02:f1:b0:99:d7:00:43:60:56:f4:11:d6:d6:d7:
         32:c3:ce:aa:46:38:70:8b:4c:64:a6:2d:a9:c8:35:0d:5e:79:
         46:6b:b1:ba:0a:4c:de:62:89:be:c0:da:86:c6:b3:8e:e1:88:
         64:33:9c:47:f0:e5:9c:11:2a:96:2c:a0:af:ca:8a:bc:f3:6b:
         73:d8:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org