Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32322d3234203d3e203238313635.roa
File:                     3133382e35392e3134382e302f32322d3234203d3e203238313635.roa (raw, json)
Hash identifier:          0ZPjWErPRNHSAUDjh93JWYxBWLVCr48PuLKtbu4pf8w=
Subject key identifier:   E9:42:9E:82:26:1E:02:B9:F2:80:3C:DC:7B:BB:82:AC:53:A7:19:FD
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       6FAAC5F5B8A4BE923D53E917CB16564E38211620
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32322d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:27:13 +0000
ROA not before:           Mon 01 Jul 2024 19:22:13 +0000
ROA not after:            Mon 30 Jun 2025 19:27:13 +0000
asID:                     28165
IP address blocks:        138.59.148.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:aa:c5:f5:b8:a4:be:92:3d:53:e9:17:cb:16:56:4e:38:21:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:22:13 2024 GMT
            Not After : Jun 30 19:27:13 2025 GMT
        Subject: CN=E9429E82261E02B9F2803CDC7BBB82AC53A719FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:bf:f2:2e:70:84:57:45:fa:fe:6a:8a:f5:
                    67:5c:52:ba:c4:f1:33:f7:7a:6c:46:18:b3:31:40:
                    44:3c:75:dd:fa:4d:1e:da:d9:cd:45:d6:82:8f:64:
                    e9:bc:96:a0:86:31:cb:08:ee:dd:c8:5b:df:53:9e:
                    63:c6:63:ba:0a:2e:38:53:a9:3c:6a:be:4c:a3:25:
                    40:1f:e7:3d:7c:6b:b7:41:f4:7b:c1:64:e8:66:19:
                    02:5a:57:29:16:4a:ef:a3:30:41:2b:4f:3e:10:4f:
                    0b:d0:6c:b8:c7:7b:67:b2:ad:cd:0c:ac:42:37:79:
                    69:a8:49:54:be:fc:c3:60:fa:20:7e:c8:da:f5:17:
                    0f:26:e4:2a:2d:99:d7:da:f6:aa:1a:88:4c:4c:e6:
                    ab:4d:cd:a0:51:a2:56:54:58:ad:f7:8c:95:6a:d8:
                    39:f5:27:4a:a2:06:5b:c8:49:49:b6:6d:e2:48:5e:
                    4e:46:c3:47:3d:7b:8e:d1:8b:10:a6:8b:f0:7c:f9:
                    f3:a1:5d:76:2d:66:2b:34:77:9b:59:c0:0a:84:96:
                    ca:e3:d7:51:60:a9:33:a1:4f:12:b3:5a:a9:90:75:
                    1d:ad:4f:16:d7:3e:7f:bc:1d:1c:2e:00:08:9e:73:
                    39:3e:41:ae:77:db:df:51:36:7b:b3:5c:64:72:0d:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:42:9E:82:26:1E:02:B9:F2:80:3C:DC:7B:BB:82:AC:53:A7:19:FD
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3134382e302f32322d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:37:05:f8:10:88:65:b8:a4:76:6d:54:40:dd:38:a6:13:cd:
         7d:8d:cd:e3:a9:7f:2c:d5:0f:41:a0:26:26:2e:f0:e4:17:ae:
         79:c0:5f:cd:16:35:f9:2d:21:19:b1:46:29:a6:8e:82:59:3c:
         f4:e5:e9:ff:49:25:be:9c:43:0a:c9:63:a8:9b:a9:3e:46:a1:
         e3:b5:d3:42:ef:97:03:42:f3:df:a2:8a:74:46:17:2c:8b:32:
         5b:f8:82:23:41:18:26:92:08:1f:56:02:80:8c:44:fd:e3:91:
         ef:db:75:cb:97:47:ed:f8:62:f8:96:16:42:08:6d:b1:5c:b4:
         4b:95:42:70:a9:0f:18:14:59:35:dc:be:bd:a4:7f:95:6c:d5:
         9e:22:44:3f:b5:75:9d:3b:56:6c:71:4b:1e:46:a8:cf:bd:39:
         3b:74:8d:36:8a:c4:2d:d8:ff:11:0c:44:fc:61:10:af:63:84:
         ff:0c:8c:5e:8b:23:17:e9:7e:85:04:14:94:02:27:00:ac:19:
         bc:fa:1a:7d:73:d2:f1:d8:f2:a1:a5:85:c5:e9:cf:e0:2f:d2:
         a4:20:60:e1:e2:42:c8:f8:10:90:2a:b2:40:0c:f0:79:70:aa:
         db:9b:41:72:7d:c3:60:f5:c5:18:a0:34:91:b2:42:1b:fa:e4:
         d8:7c:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org