Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/3133382e39342e3137362e302f32322d3234203d3e203532363535.roa
File:                     3133382e39342e3137362e302f32322d3234203d3e203532363535.roa (raw, json)
Hash identifier:          7l9IqpYBogQL5OAZizkVTf2dm/J9GatrJh5UYFOTziQ=
Subject key identifier:   A2:D1:25:92:7D:55:79:08:AC:91:E2:11:56:96:1E:7B:28:70:5C:1D
Certificate issuer:       /CN=2554E829901F5A24F36854F269A43B52C5F8EB7B
Certificate serial:       14668674A9A2CC60A1D4B7026A309F73CC5D09B4
Authority key identifier: 25:54:E8:29:90:1F:5A:24:F3:68:54:F2:69:A4:3B:52:C5:F8:EB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/3133382e39342e3137362e302f32322d3234203d3e203532363535.roa
Signing time:             Wed 10 Apr 2024 13:27:26 +0000
ROA not before:           Wed 10 Apr 2024 13:22:26 +0000
ROA not after:            Wed 09 Apr 2025 13:27:26 +0000
asID:                     52655
IP address blocks:        138.94.176.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:66:86:74:a9:a2:cc:60:a1:d4:b7:02:6a:30:9f:73:cc:5d:09:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2554E829901F5A24F36854F269A43B52C5F8EB7B
        Validity
            Not Before: Apr 10 13:22:26 2024 GMT
            Not After : Apr  9 13:27:26 2025 GMT
        Subject: CN=A2D125927D557908AC91E21156961E7B28705C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:ec:64:5f:32:ed:13:e2:14:ec:2b:10:83:
                    40:4a:2b:eb:aa:09:70:15:8f:16:4b:ab:ec:47:3a:
                    e2:63:48:05:c5:4d:7a:e3:d2:6d:93:b6:2b:b8:b9:
                    0a:e4:30:93:e1:ec:6f:a1:f3:90:91:12:9b:15:f1:
                    fd:b4:dc:92:e6:71:d3:ae:55:c6:7a:f6:30:d3:1f:
                    a9:83:5c:90:4d:f7:6f:0c:29:38:8f:75:86:30:eb:
                    8f:e6:ba:71:2c:9a:f7:52:e4:6b:c6:a7:e3:83:14:
                    c8:11:87:eb:0b:f2:33:50:b1:b5:88:20:02:e1:f4:
                    6c:f8:d5:c4:64:85:52:e1:c4:36:87:62:c7:8e:8e:
                    3e:ef:d0:68:71:a0:8e:f0:2f:b2:75:c1:d0:ef:f7:
                    f8:ad:12:89:4c:c2:4d:1b:17:b1:2a:8a:09:2c:25:
                    f6:ac:a0:91:c8:63:be:2d:9a:d9:9f:77:5b:f5:53:
                    41:cf:ac:52:84:d7:48:5f:05:2e:68:70:f9:5f:c2:
                    60:82:6b:2f:37:83:bd:d6:9a:39:37:f5:dd:6c:98:
                    5e:a8:73:58:ce:32:08:30:21:79:a3:f4:88:8c:8e:
                    b4:54:fd:72:8e:26:5c:ce:d6:8b:62:e1:e0:73:50:
                    ca:dc:71:b2:a3:28:f3:18:5b:66:4c:93:44:43:6c:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D1:25:92:7D:55:79:08:AC:91:E2:11:56:96:1E:7B:28:70:5C:1D
            X509v3 Authority Key Identifier:
                keyid:25:54:E8:29:90:1F:5A:24:F3:68:54:F2:69:A4:3B:52:C5:F8:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/3133382e39342e3137362e302f32322d3234203d3e203532363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:a7:98:49:14:19:df:d2:63:be:d0:09:3a:a4:fa:79:95:
         6a:73:6d:bb:05:85:79:8d:1e:f5:c1:f3:a3:40:18:8b:0b:c8:
         74:85:a7:95:63:cb:ef:45:bf:ba:a5:88:d9:28:e7:15:f1:a8:
         0a:19:4e:e2:7f:29:e2:1d:8a:40:c1:7f:bb:7e:03:53:7d:ea:
         3e:c4:97:1c:fc:83:09:8c:58:a9:a2:54:42:dd:ab:20:24:3a:
         2d:5d:a8:f0:81:8a:4c:9c:db:f4:ea:11:18:ea:5a:17:f3:61:
         02:38:36:cc:1d:17:ba:ce:e2:ae:81:7e:4f:41:c7:d3:bb:64:
         a3:ae:40:67:22:57:36:cc:cf:63:e6:92:7a:da:25:05:90:6f:
         09:8e:58:cb:39:6b:62:d5:29:38:5b:04:27:89:15:52:ce:3b:
         ed:02:37:63:0a:09:85:24:b7:e5:da:96:22:23:74:c2:dd:ed:
         8d:12:81:c7:5e:57:e5:f3:d5:a8:8d:42:3a:76:6f:3c:62:40:
         fa:32:8a:53:6d:64:69:86:9a:00:c0:c7:21:f9:4e:e3:69:f0:
         45:74:f2:02:25:c4:59:f4:e4:5c:f4:5e:c0:4c:f4:4d:17:93:
         75:e4:78:36:f2:c8:8c:44:b6:6b:00:36:6a:7b:4b:6b:03:a0:
         f6:05:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:15 2024 by rpki-client on console-ams.rpki-client.org