Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa
File:                     3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa (raw, json)
Hash identifier:          gRNlfSTTChPJQyJ1YFxLS4YujcdkySLQklvQBV6NYZk=
Subject key identifier:   2E:E8:EE:B9:DC:7A:21:E4:C4:BB:7E:D6:7F:BC:3B:3C:BD:87:7E:8F
Certificate issuer:       /CN=F69806C292D733D0A7BD46A6448D288ADCBE75E8
Certificate serial:       5D78B2A98279A3D5C6E4B7EB3566A12D828E4FA5
Authority key identifier: F6:98:06:C2:92:D7:33:D0:A7:BD:46:A6:44:8D:28:8A:DC:BE:75:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa
Signing time:             Fri 05 Apr 2024 04:03:55 +0000
ROA not before:           Fri 05 Apr 2024 03:58:55 +0000
ROA not after:            Fri 04 Apr 2025 04:03:55 +0000
asID:                     270870
IP address blocks:        138.59.154.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:78:b2:a9:82:79:a3:d5:c6:e4:b7:eb:35:66:a1:2d:82:8e:4f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69806C292D733D0A7BD46A6448D288ADCBE75E8
        Validity
            Not Before: Apr  5 03:58:55 2024 GMT
            Not After : Apr  4 04:03:55 2025 GMT
        Subject: CN=2EE8EEB9DC7A21E4C4BB7ED67FBC3B3CBD877E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:d7:79:26:eb:dd:b0:c3:68:c1:ce:77:68:
                    d6:74:8a:17:00:76:5c:86:fc:68:0f:a1:0b:1c:7c:
                    fc:0e:6a:01:13:08:3e:5e:1d:ae:31:e1:c7:2d:30:
                    96:28:f6:be:a7:2b:0a:0e:bd:19:39:96:7d:56:4d:
                    ff:ce:e0:48:a4:46:d5:c8:20:48:e6:db:1a:45:8f:
                    9a:3d:a6:97:f8:7b:fb:60:54:7d:5d:52:21:0c:ec:
                    fb:89:30:17:82:b9:40:86:a5:de:79:d5:7c:93:31:
                    83:e0:9f:9c:ac:41:2e:11:b7:83:45:6f:6f:79:0a:
                    d4:aa:f0:a3:07:4c:38:5c:ce:e2:af:1d:61:48:23:
                    99:8c:66:13:a5:8c:ea:18:f8:cc:17:4d:d9:89:22:
                    a4:51:3e:3e:a8:d5:04:32:fa:d8:98:9d:c7:3d:c1:
                    d0:7e:3d:62:52:17:47:3b:d0:d1:62:92:29:a4:f1:
                    16:1e:4f:f0:eb:e1:a2:7d:90:a3:b8:ab:fa:81:a4:
                    ff:a2:33:fe:31:a0:60:f4:8e:95:28:06:f9:1c:88:
                    1c:db:bf:3d:21:4e:dd:4a:5b:dd:83:af:cd:d8:b7:
                    cf:3b:d0:7f:3e:04:ea:c3:fb:db:11:7c:d6:43:c4:
                    37:1a:c7:ea:4e:c0:61:66:2f:76:ab:d2:94:ac:2b:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:EE:B9:DC:7A:21:E4:C4:BB:7E:D6:7F:BC:3B:3C:BD:87:7E:8F
            X509v3 Authority Key Identifier:
                keyid:F6:98:06:C2:92:D7:33:D0:A7:BD:46:A6:44:8D:28:8A:DC:BE:75:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:56:1b:65:dd:88:66:25:43:4d:26:83:d3:d3:70:00:94:c4:
         9d:07:00:07:41:e5:52:d5:10:4b:f6:7c:96:1d:b6:00:7c:a3:
         68:85:81:f8:04:f2:64:80:4f:53:16:2b:bb:48:e9:c7:d4:48:
         b7:99:ef:92:1b:a3:f1:13:d4:f2:a9:04:cb:81:7b:50:04:2c:
         ac:8d:9c:6e:dd:8e:be:de:b7:99:c9:23:f1:14:54:2c:fb:53:
         e6:09:47:fd:7b:a1:68:51:80:b3:e6:ca:c7:12:78:fa:96:38:
         91:14:58:35:18:87:b8:06:29:23:26:00:7a:82:a9:12:b3:87:
         72:c7:b5:ab:f5:5b:27:d6:5a:ac:99:df:c5:af:ff:f9:91:7c:
         2d:a5:97:44:24:b4:6b:51:3b:84:64:c8:b5:a1:cf:81:63:b8:
         2f:23:9b:f9:aa:c8:7f:16:92:93:f7:ba:ae:09:ae:de:00:30:
         77:cf:3a:ff:50:9f:7a:4e:ed:94:32:c8:15:88:45:86:31:65:
         65:04:b8:fe:27:eb:c5:5f:d4:a7:39:f7:23:43:73:35:0a:bf:
         23:01:e1:78:41:e4:88:c4:c4:ae:a0:f4:a9:68:dc:d7:66:71:
         0b:9a:1b:db:6d:27:1f:c6:21:52:6a:09:de:d6:30:ed:ce:d6:
         fd:c8:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 06:02:51 2024 by rpki-client on console-ams.rpki-client.org