Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa
File:                     3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa (raw, json)
Hash identifier:          9DcjndQB1OIIMXiRv3wXOFzVdQK7G1w+sYTRnD50J1A=
Subject key identifier:   16:9E:39:AE:60:D4:7D:3A:5E:99:F7:2A:F1:4B:B7:A5:20:00:77:3F
Certificate issuer:       /CN=F69806C292D733D0A7BD46A6448D288ADCBE75E8
Certificate serial:       78DE979B8E90C5E7971A3EFEDC0D52140CF722C1
Authority key identifier: F6:98:06:C2:92:D7:33:D0:A7:BD:46:A6:44:8D:28:8A:DC:BE:75:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa
Signing time:             Fri 05 Apr 2024 04:03:53 +0000
ROA not before:           Fri 05 Apr 2024 03:58:53 +0000
ROA not after:            Fri 04 Apr 2025 04:03:53 +0000
asID:                     270870
IP address blocks:        138.59.152.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:de:97:9b:8e:90:c5:e7:97:1a:3e:fe:dc:0d:52:14:0c:f7:22:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69806C292D733D0A7BD46A6448D288ADCBE75E8
        Validity
            Not Before: Apr  5 03:58:53 2024 GMT
            Not After : Apr  4 04:03:53 2025 GMT
        Subject: CN=169E39AE60D47D3A5E99F72AF14BB7A52000773F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:0c:8f:d3:14:f5:8a:d5:de:04:49:3c:bf:
                    41:00:28:99:0d:e5:01:64:a2:5b:ef:24:f4:b6:20:
                    e4:bc:72:08:4b:3f:e1:e9:a0:2a:fa:3e:cc:9b:fd:
                    9c:d8:54:92:44:35:9d:bf:91:ae:23:0b:3d:64:e0:
                    ff:04:9f:cc:8c:53:75:a4:2c:ae:d0:6c:b8:5c:5c:
                    21:75:be:2c:ff:8f:02:92:df:f7:ff:8d:82:6b:7a:
                    d4:e8:b3:95:7c:0c:c2:9b:bb:8a:22:a9:ed:ff:98:
                    bb:22:a0:2c:50:b4:ae:c4:2f:bf:aa:eb:49:7c:a0:
                    d2:a3:86:0e:6d:6b:e6:b7:23:28:46:db:85:b9:65:
                    da:f7:d6:2b:a4:b8:af:9c:68:b9:67:28:65:32:d1:
                    03:22:79:ad:96:49:26:78:ba:e8:52:48:04:25:79:
                    be:ae:4b:a5:bd:5b:19:22:d7:b1:18:12:e1:47:03:
                    a0:c8:22:b9:f3:ec:1a:d5:bb:01:3f:2c:0a:02:0d:
                    84:f4:1c:cb:f5:b1:8d:4a:cb:95:89:0b:b2:43:2a:
                    27:d5:e9:3c:c7:17:04:54:d6:0d:a1:f2:ac:da:1e:
                    2b:d6:57:c0:75:6c:4e:02:67:ec:d2:ec:bd:70:09:
                    36:ea:7c:54:94:f8:32:45:d9:ba:9f:3b:41:1e:58:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:39:AE:60:D4:7D:3A:5E:99:F7:2A:F1:4B:B7:A5:20:00:77:3F
            X509v3 Authority Key Identifier:
                keyid:F6:98:06:C2:92:D7:33:D0:A7:BD:46:A6:44:8D:28:8A:DC:BE:75:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:ef:10:a4:9d:d0:e8:87:21:f0:b5:85:00:bd:6c:06:d1:
         2e:0d:da:55:3b:35:c4:08:87:83:a4:90:06:fa:f7:af:a5:fd:
         d5:91:0e:a5:0c:ca:96:99:69:6c:4f:12:16:4f:b1:c1:d4:eb:
         ff:7c:01:ab:66:08:3c:63:6b:1e:6e:dc:00:b4:0e:a2:a1:d6:
         11:1f:2e:5f:a6:04:c9:18:d3:01:1f:9d:ec:3d:f6:94:2e:10:
         88:05:b7:67:11:08:35:53:60:35:1c:50:7f:28:6c:c2:df:fd:
         3d:43:85:1d:ff:bf:2f:ef:0b:f1:d0:cf:2a:a8:96:84:66:e4:
         9b:b0:12:ba:59:49:21:26:d9:93:dd:4f:c2:18:58:dd:b2:05:
         6b:e9:cd:4a:d8:7b:37:f3:b3:38:bd:4a:6b:12:7e:0b:64:5e:
         d1:58:2d:67:0b:43:8f:c9:77:f7:3d:b7:d9:24:ec:a0:d6:61:
         8f:d0:c7:d0:24:bc:72:b6:c5:13:c3:20:28:0a:bb:7f:36:03:
         55:ef:16:bb:74:69:ac:28:0c:70:1d:d1:13:c4:bb:75:21:20:
         66:6b:8f:15:72:17:31:ad:9b:73:97:d4:81:46:46:fe:09:c7:
         2c:61:10:1b:b2:90:65:89:d8:06:e8:8e:20:c5:bf:b2:a9:13:
         d0:30:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 06:02:51 2024 by rpki-client on console-ams.rpki-client.org