Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa
File:                     3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier:          qouZYk/CVu7rmJTDYkCE20Gul6xsjzmFuSKLlZycnOs=
Subject key identifier:   9E:BB:5E:30:1E:E6:B2:BD:D2:86:A2:AA:FF:49:41:F9:A5:19:DE:9B
Certificate issuer:       /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial:       4704DF2B5F2CB06D21F81805825BF20618965BB2
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa
Signing time:             Thu 04 Apr 2024 18:08:17 +0000
ROA not before:           Thu 04 Apr 2024 18:03:17 +0000
ROA not after:            Thu 03 Apr 2025 18:08:17 +0000
asID:                     264197
IP address blocks:        138.97.148.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:04:df:2b:5f:2c:b0:6d:21:f8:18:05:82:5b:f2:06:18:96:5b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Validity
            Not Before: Apr  4 18:03:17 2024 GMT
            Not After : Apr  3 18:08:17 2025 GMT
        Subject: CN=9EBB5E301EE6B2BDD286A2AAFF4941F9A519DE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:17:2f:72:c0:16:0a:82:b8:0f:d0:a3:6a:55:
                    bd:2d:e8:2a:01:89:16:55:8b:36:db:52:1a:49:d1:
                    a7:6e:9a:fe:84:97:54:51:bb:55:31:34:28:ae:cc:
                    a9:5f:e5:d1:12:79:03:1e:73:11:ff:30:9e:cf:31:
                    67:6c:cd:98:03:bd:26:1b:11:eb:f6:82:bf:87:e4:
                    76:d2:6a:6a:89:b8:26:e6:bd:f1:5e:30:fe:46:79:
                    ed:73:65:9f:41:b2:b8:32:74:21:22:ff:65:3f:8c:
                    62:bd:e8:9e:6d:cd:a6:f3:82:57:bf:cd:f6:3b:4d:
                    c6:ab:1c:9a:bf:56:41:ff:83:70:cb:b5:94:f4:d6:
                    a1:67:13:e5:44:96:0a:02:2c:d3:ef:72:0f:08:9f:
                    9f:17:57:63:74:f1:4f:b5:38:f7:00:42:2c:cb:e7:
                    e1:58:c8:16:d8:9c:89:53:70:2f:3e:01:13:a5:06:
                    3b:05:d7:92:cb:0f:8d:fd:6a:af:19:59:f1:cf:f9:
                    d2:80:0c:b9:a3:9b:07:c0:a1:f2:86:b5:68:34:b5:
                    cc:ff:09:08:b4:88:47:5a:54:77:75:1e:01:08:33:
                    38:12:7f:aa:79:4b:a0:8c:b6:a6:f7:02:52:0e:62:
                    90:c6:df:f6:d3:d7:0a:a4:12:b8:ae:f9:50:aa:7f:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:5E:30:1E:E6:B2:BD:D2:86:A2:AA:FF:49:41:F9:A5:19:DE:9B
            X509v3 Authority Key Identifier:
                keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:6e:a2:51:2d:68:8a:a0:13:bb:cd:14:34:93:50:da:3e:
         80:de:25:04:1e:a5:c4:96:a8:f6:7d:2e:00:eb:7f:64:29:0b:
         d0:32:db:2d:1b:4b:d7:d6:4f:68:f3:08:3d:d9:04:11:2c:98:
         a0:d9:b5:a1:fe:e8:7f:71:48:52:84:79:f2:97:3a:3c:20:69:
         20:06:23:ab:b3:57:0d:98:38:64:ad:c5:13:b2:51:02:ee:09:
         7c:86:28:81:44:f2:e7:6d:f3:8a:98:aa:68:96:70:5c:08:ce:
         a8:1c:df:2f:42:d2:48:8b:cd:85:dc:4b:18:99:9a:c3:44:4b:
         bd:21:75:a4:01:87:57:4c:77:1e:af:7b:16:68:b3:fc:c8:cc:
         1d:d2:8e:f2:bd:88:eb:93:c1:91:c9:98:57:4e:e5:28:63:69:
         0a:0b:76:a2:29:90:5c:91:de:2d:36:95:58:0f:68:38:90:da:
         73:a2:76:a6:e9:11:98:0e:d6:e5:96:c8:7b:90:e5:a3:84:d1:
         80:2e:54:3f:91:5d:27:92:c2:fb:dc:e0:fc:85:a9:a5:5d:12:
         4b:9a:24:18:cf:61:8f:b0:1c:44:df:12:ee:0b:09:fe:4c:d6:
         2c:31:6c:e8:2a:92:a0:8a:db:51:05:e0:e2:fc:f1:32:73:e1:
         e8:72:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 20:45:20 2024 by rpki-client on console-fra.rpki-client.org