Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa
File:                     3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier:          xKjM8wvTVLmTES9KDOXL0AqM0RMWlecEcPLKQrl1DQk=
Subject key identifier:   F1:3D:42:17:A2:25:E1:8D:4A:84:F6:89:B0:0F:FC:C0:28:9B:6F:B2
Certificate issuer:       /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial:       39AF86575EF4E7E22496842FF47E12A7B7FAE5DD
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa
Signing time:             Thu 04 Apr 2024 18:08:17 +0000
ROA not before:           Thu 04 Apr 2024 18:03:17 +0000
ROA not after:            Thu 03 Apr 2025 18:08:17 +0000
asID:                     264197
IP address blocks:        138.97.150.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:af:86:57:5e:f4:e7:e2:24:96:84:2f:f4:7e:12:a7:b7:fa:e5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Validity
            Not Before: Apr  4 18:03:17 2024 GMT
            Not After : Apr  3 18:08:17 2025 GMT
        Subject: CN=F13D4217A225E18D4A84F689B00FFCC0289B6FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:74:49:49:05:aa:01:ce:e3:a3:87:bd:67:
                    54:d1:18:84:de:84:75:96:d9:2a:cc:41:ff:9b:6a:
                    e4:53:6d:7d:9d:a9:24:c4:0b:c5:56:09:d7:a0:ad:
                    20:4c:1e:39:9c:76:1c:11:cd:5f:42:73:42:a4:c6:
                    e7:28:e1:31:ee:cc:0b:fb:0d:8c:e5:5a:b8:e6:97:
                    1c:d7:73:32:57:a6:34:e6:d4:4c:20:f5:4f:d4:44:
                    96:6f:0c:48:18:19:47:e8:0d:cc:95:41:0b:b1:29:
                    e5:39:f0:72:81:6a:49:11:96:65:c3:11:b9:16:cf:
                    f5:f8:53:8f:49:d7:bd:0d:48:91:a3:d6:e7:f6:0f:
                    26:d9:a8:ba:e5:77:f3:7e:e8:1e:38:5b:38:01:65:
                    11:ba:cc:44:fe:49:90:5c:af:d7:2c:ae:31:6e:b0:
                    20:7d:02:76:d9:75:6a:23:e0:e4:36:bc:8a:89:4a:
                    ed:0b:46:ff:a7:dc:5d:f0:ca:88:a7:fd:36:66:55:
                    0d:07:8c:57:fb:a7:fa:03:9f:e1:77:2e:6d:17:30:
                    c0:3c:f7:5a:25:a4:94:08:6e:c2:b5:73:35:b0:60:
                    52:9c:3c:4b:b1:90:4e:61:b6:41:d0:6c:a2:6e:22:
                    7b:3b:8b:8e:62:cd:1d:73:e8:4a:52:5f:b9:37:cf:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3D:42:17:A2:25:E1:8D:4A:84:F6:89:B0:0F:FC:C0:28:9B:6F:B2
            X509v3 Authority Key Identifier:
                keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:c4:0a:12:53:2e:79:64:f0:db:47:bb:41:d4:6a:29:b0:
         2c:4a:4a:23:51:48:96:1c:40:c6:ff:78:a8:e6:ca:6a:4e:03:
         af:b2:89:5a:da:19:f7:60:00:e9:ff:12:b4:e7:d1:de:20:25:
         83:dd:73:d2:a7:93:ac:28:4f:4e:e2:bf:ab:26:cd:54:f9:08:
         3f:0f:c9:c3:ec:f8:fb:34:bd:71:60:32:a9:03:03:02:a2:da:
         8d:e3:12:98:81:73:27:d2:b9:fe:91:64:e1:82:f0:6f:ef:6a:
         c5:28:8b:02:cb:42:51:ea:83:21:a6:62:34:58:32:dc:76:4f:
         a4:b5:4b:8e:4c:3a:aa:8a:ca:96:66:4a:a9:b8:b5:0d:ec:86:
         ec:d7:34:ae:d6:a6:c1:92:55:c4:4e:fa:26:d0:27:1b:8a:09:
         0e:98:a4:a2:e1:c2:ae:62:c9:86:c5:81:50:e5:8e:0c:46:8f:
         7c:d4:0c:4d:63:9b:79:44:a0:1f:62:c6:85:53:9a:ec:3e:c4:
         41:f9:60:a3:ff:72:86:5f:ba:d0:09:a8:b6:89:ce:38:3e:c6:
         4b:a6:80:7d:fd:e9:83:da:98:3e:f6:d2:17:c9:5d:7d:44:91:
         82:00:56:6e:98:6d:2e:f9:5b:f1:b5:fe:70:bd:9e:ef:b9:18:
         c3:ab:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 20:45:20 2024 by rpki-client on console-fra.rpki-client.org