Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32332d3233203d3e20323634323437.roa
File:                     3133382e3131382e33322e302f32332d3233203d3e20323634323437.roa (raw, json)
Hash identifier:          3Uz7Cx8ukEP6HbbexTE/WE4j/8h8mVD7GPUqA5IV1T8=
Subject key identifier:   8A:BC:D4:5A:5A:AB:B3:97:9A:FB:36:A0:D2:2C:1D:1F:3A:D9:25:6C
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       5F0EA519E0BC9AB2149E6EDED34CA281BB238775
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32332d3233203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     264247
IP address blocks:        138.118.32.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0e:a5:19:e0:bc:9a:b2:14:9e:6e:de:d3:4c:a2:81:bb:23:87:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=8ABCD45A5AABB3979AFB36A0D22C1D1F3AD9256C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:b5:2e:95:0e:ce:9e:dd:5e:b0:81:fc:44:
                    26:b7:7b:41:d9:a9:f0:e3:7d:a8:97:3b:00:eb:3a:
                    16:14:77:fc:b3:ef:ab:d0:63:7c:7b:66:df:f4:c3:
                    55:56:6d:0a:65:ab:63:d4:32:6a:31:50:88:17:e7:
                    23:b2:ef:40:26:6f:00:66:cb:01:40:2c:b9:a0:70:
                    45:83:ad:4a:aa:ad:29:51:5f:b6:d6:31:d2:fc:78:
                    85:5a:77:14:34:0e:8c:f5:7f:fd:0e:f6:ff:9c:42:
                    0e:f4:17:c5:20:5f:86:d8:60:18:fd:dd:13:af:a1:
                    69:f8:7e:53:da:a5:39:60:80:e7:63:5a:f8:2b:da:
                    dd:50:31:1e:3c:6c:5c:c7:a8:6a:12:63:9e:8e:0d:
                    54:98:c2:77:a4:35:f6:07:24:02:a0:00:f7:d4:cd:
                    82:12:20:8d:96:22:e3:de:42:bc:8e:1b:40:3e:e2:
                    ca:07:9a:87:52:a4:b1:6a:91:4a:df:87:65:48:a0:
                    31:36:6e:2a:bf:b7:5b:0d:40:b1:57:45:6e:65:45:
                    69:45:70:d1:2c:ec:3f:eb:3e:e8:52:85:5c:32:fc:
                    93:db:05:9c:35:b3:e2:c0:5b:a6:6c:0b:d6:11:d6:
                    5a:7f:09:18:c8:56:83:5d:c4:0d:d3:bf:f1:52:0d:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:D4:5A:5A:AB:B3:97:9A:FB:36:A0:D2:2C:1D:1F:3A:D9:25:6C
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33322e302f32332d3233203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:14:43:6c:62:e3:5d:f0:b6:00:2f:8a:eb:4d:b8:df:a9:ce:
         77:18:f3:21:85:fb:75:16:d9:82:5d:a7:bf:57:68:9d:e3:c2:
         1c:ef:49:da:87:ba:8b:eb:69:8c:78:35:73:d3:44:bd:a8:3e:
         35:f8:c5:09:5a:9a:97:7d:48:e2:ba:2f:67:fa:11:4e:3d:22:
         0d:c3:c0:8c:9c:a8:3a:2d:3a:ad:72:db:68:08:45:ba:3f:12:
         7a:25:df:4a:50:d2:d3:6f:91:fa:e0:41:3e:45:5f:bb:4c:53:
         28:28:eb:b2:7b:99:6a:63:8b:66:13:ae:57:27:69:fc:2e:a7:
         51:eb:b2:3b:9c:3a:5e:23:99:2f:61:41:43:f0:45:a4:9d:61:
         d7:4e:17:06:27:38:04:c3:28:03:65:80:a4:4f:dd:2e:9f:4b:
         e9:0b:dd:f2:9b:63:b0:6c:cd:a6:75:5c:cd:cd:f9:3d:06:d2:
         26:8b:60:c2:e7:8a:22:09:33:eb:d3:9f:6a:50:52:69:09:d7:
         7f:41:9d:2b:ce:32:87:b4:2e:25:f3:41:79:3e:c8:f9:b1:40:
         ce:b5:b2:aa:fc:17:a2:9b:88:40:11:0f:ad:85:69:1c:23:55:
         c9:66:fe:26:ee:e0:12:8a:ae:45:ed:c1:aa:44:33:8f:5f:5b:
         15:22:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 23:44:29 2024 by rpki-client on console-ams.rpki-client.org