Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39342e302f32342d3234203d3e203238313635.roa
File:                     3133382e3230342e39342e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          +iVu3Ol0Z19dVaQ7yqsi1jIrTLh+GSyDpQmcEbew4dg=
Subject key identifier:   EC:34:E4:B6:29:81:55:0B:27:E4:8F:69:2D:A5:19:A8:82:38:55:84
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       19AFDCF2FB0ABA625D8FD9E5A34193A39E2B30D5
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39342e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:46:26 +0000
ROA not before:           Mon 01 Jul 2024 18:41:26 +0000
ROA not after:            Mon 30 Jun 2025 18:46:26 +0000
asID:                     28165
IP address blocks:        138.204.94.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:af:dc:f2:fb:0a:ba:62:5d:8f:d9:e5:a3:41:93:a3:9e:2b:30:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:41:26 2024 GMT
            Not After : Jun 30 18:46:26 2025 GMT
        Subject: CN=EC34E4B62981550B27E48F692DA519A882385584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:86:47:10:db:2b:32:bc:8d:70:2c:90:16:
                    98:a1:09:6d:9f:84:40:c3:3e:fe:b1:2b:72:4c:09:
                    aa:58:1c:90:43:fe:72:21:81:1a:84:fd:d3:58:1d:
                    d4:c7:44:18:6c:ae:55:7c:c3:24:11:11:83:ba:15:
                    04:54:9e:a6:8c:d3:f1:70:ac:49:ad:0d:67:6d:48:
                    ac:b0:ac:ea:f2:b6:50:5d:a8:cd:0f:ad:a1:de:12:
                    7d:41:ad:dd:b9:45:63:6c:04:2f:c8:36:4e:da:ce:
                    73:d8:b3:d1:05:e0:d8:b5:f1:51:de:47:db:96:54:
                    06:f9:af:58:a0:ce:12:fd:78:ff:f4:61:a8:c0:25:
                    1a:4c:63:13:5b:e8:64:5c:c5:d8:20:88:4e:5a:4d:
                    a5:01:38:5f:a8:40:1a:f5:0f:05:da:09:4a:aa:9a:
                    dc:70:cb:26:62:4c:3d:55:74:a9:c3:42:c6:45:5d:
                    70:e1:c5:f0:6a:d0:39:3b:be:c6:71:54:43:52:7d:
                    92:c2:3a:35:30:06:41:51:f1:a0:91:1a:76:bb:a8:
                    24:fb:74:20:c4:66:ec:79:2f:90:7d:54:31:c2:b0:
                    03:95:c2:cd:40:f4:4c:9d:b2:87:8d:4c:88:80:34:
                    bd:d4:8e:30:2d:17:ab:66:14:0b:8f:97:92:f3:a9:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:E4:B6:29:81:55:0B:27:E4:8F:69:2D:A5:19:A8:82:38:55:84
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39342e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:64:67:79:7b:12:3e:e0:e7:5a:34:bd:a6:01:ef:8c:be:c5:
         c1:19:03:49:3a:b5:5d:9d:a4:0d:fb:62:f4:3a:fd:17:69:52:
         d2:d9:73:f7:ac:fc:a9:4c:67:2d:08:bd:d4:65:e4:af:9a:bd:
         03:e3:2f:39:7d:02:97:e2:7d:95:86:25:e7:c9:9b:a5:92:4b:
         22:0a:6d:9f:f7:be:63:cd:4e:e9:34:c0:7e:c3:79:08:73:35:
         92:e6:32:7f:04:b6:0c:6e:50:bc:f4:c3:0e:34:d5:18:63:55:
         df:91:00:3a:d0:17:94:7c:c6:93:3e:1c:e6:33:88:28:62:83:
         25:f5:b5:77:36:8b:a6:87:d4:46:5e:5c:b3:95:eb:ba:97:3b:
         9e:ee:48:4d:1c:e4:0b:38:49:0b:13:59:36:db:c5:ba:de:1e:
         35:e3:77:68:55:b7:6b:a6:4f:f4:dd:99:1c:03:ef:f2:16:03:
         5b:33:06:33:b3:dd:08:31:60:57:96:81:1c:6e:f8:bf:a5:82:
         c5:50:ab:86:10:c7:75:10:69:a5:c8:27:04:a3:49:26:59:b3:
         e0:f2:d5:1f:fe:60:b6:4a:d8:3a:f7:05:37:2f:d8:14:63:4b:
         2c:92:93:35:e1:51:33:7a:81:80:f3:30:00:65:26:ea:34:c1:
         d3:b5:85:f8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGa/c8vsKumJdj9nlo0GTo54rMNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExODQxMjZaFw0yNTA2MzAxODQ2MjZaMDMxMTAvBgNV
BAMTKEVDMzRFNEI2Mjk4MTU1MEIyN0U0OEY2OTJEQTUxOUE4ODIzODU1ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveYZHENsrMryNcCyQFpihCW2f
hEDDPv6xK3JMCapYHJBD/nIhgRqE/dNYHdTHRBhsrlV8wyQREYO6FQRUnqaM0/Fw
rEmtDWdtSKywrOrytlBdqM0PraHeEn1Brd25RWNsBC/INk7aznPYs9EF4Ni18VHe
R9uWVAb5r1igzhL9eP/0YajAJRpMYxNb6GRcxdggiE5aTaUBOF+oQBr1DwXaCUqq
mtxwyyZiTD1VdKnDQsZFXXDhxfBq0Dk7vsZxVENSfZLCOjUwBkFR8aCRGna7qCT7
dCDEZux5L5B9VDHCsAOVws1A9EydsoeNTIiANL3UjjAtF6tmFAuPl5LzqUhrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7DTktimBVQsn5I9pLaUZqII4VYQwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzMzM4MmUzMjMwMzQyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAisxeMA0GCSqGSIb3DQEBCwUAA4IBAQBLZGd5exI+
4OdaNL2mAe+MvsXBGQNJOrVdnaQN+2L0Ov0XaVLS2XP3rPypTGctCL3UZeSvmr0D
4y85fQKX4n2VhiXnyZulkksiCm2f975jzU7pNMB+w3kIczWS5jJ/BLYMblC89MMO
NNUYY1XfkQA60BeUfMaTPhzmM4goYoMl9bV3Noumh9RGXlyzleu6lzue7khNHOQL
OEkLE1k228W63h4143doVbdrpk/03ZkcA+/yFgNbMwYzs90IMWBXloEcbvi/pYLF
UKuGEMd1EGmlyCcEo0kmWbPg8tUf/mC2Stg69wU3L9gUY0sskpM14VEzeoGA8zAA
ZSbqNMHTtYX4
-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org