Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa
File:                     3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          ADIYNT4nEl88raXS1Dbp/278arCuntrvcksHdB2/cXE=
Subject key identifier:   28:F3:64:12:DC:71:04:D3:F6:93:D3:4D:D1:7C:F1:CD:49:96:D2:D1
Certificate issuer:       /CN=64E4B884F01FC9DC0000E111AE283F356C137547
Certificate serial:       5C2667F7746A9FF65F54BD9D822FAFBC8F2149B4
Authority key identifier: 64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa
Signing time:             Wed 03 Apr 2024 18:31:22 +0000
ROA not before:           Wed 03 Apr 2024 18:26:22 +0000
ROA not after:            Wed 02 Apr 2025 18:31:22 +0000
asID:                     262952
IP address blocks:        138.122.168.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:26:67:f7:74:6a:9f:f6:5f:54:bd:9d:82:2f:af:bc:8f:21:49:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E4B884F01FC9DC0000E111AE283F356C137547
        Validity
            Not Before: Apr  3 18:26:22 2024 GMT
            Not After : Apr  2 18:31:22 2025 GMT
        Subject: CN=28F36412DC7104D3F693D34DD17CF1CD4996D2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:98:6e:ea:2c:16:67:dc:77:09:1d:62:ca:
                    43:86:c9:92:be:12:c3:1d:62:00:e4:7a:20:83:b6:
                    aa:da:92:79:12:75:d9:a6:32:19:e2:62:20:ec:39:
                    e3:8b:04:76:b9:90:f8:c1:16:28:aa:ec:12:47:7f:
                    b6:74:16:6f:36:3f:fc:ee:5f:39:6d:f7:99:02:51:
                    8c:3e:f8:db:bf:d0:74:63:62:b7:4a:5e:8f:54:a5:
                    cb:73:ca:d2:51:29:f3:01:89:fd:87:e6:c9:72:e2:
                    50:89:5d:45:09:8c:30:64:85:e0:81:77:49:b1:59:
                    54:3e:2c:35:e4:f3:e1:c3:d7:99:7a:27:a8:e7:57:
                    31:1a:14:62:32:9d:26:79:18:6f:3f:7b:a3:70:0b:
                    44:58:da:36:d0:ad:e0:03:74:55:e8:77:09:bb:8f:
                    cc:fe:dc:62:f5:7e:9b:7e:24:e1:11:8e:cd:38:9f:
                    0e:bf:d2:1d:fa:ca:86:e9:59:49:79:5a:38:f5:e6:
                    0b:f8:5c:3a:13:4d:7d:1f:a5:01:f0:81:4d:89:74:
                    0c:9d:16:a8:50:0a:99:17:13:b3:0e:aa:c1:5a:ea:
                    aa:57:8b:54:2f:9b:0e:f8:b7:86:9a:55:3f:93:3e:
                    a8:dd:9c:86:61:19:1d:96:31:93:e8:83:f9:37:15:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:64:12:DC:71:04:D3:F6:93:D3:4D:D1:7C:F1:CD:49:96:D2:D1
            X509v3 Authority Key Identifier:
                keyid:64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:c2:3f:e7:ce:85:59:42:3e:ac:ea:8a:3a:07:35:34:76:06:
         51:cc:d2:d0:8d:09:47:8a:12:2e:26:e9:df:09:a2:c6:16:47:
         63:0c:07:6a:cd:b5:eb:26:9c:d7:6e:8d:52:39:11:4e:a1:01:
         0b:30:47:f1:d5:d7:d1:3e:4f:b6:8e:9a:2f:9c:83:2b:d4:40:
         51:33:99:b5:6c:8c:3f:25:b4:8f:08:c6:2c:32:ed:83:45:67:
         2a:ea:01:f6:17:1e:f0:0e:ac:8c:14:53:7c:30:43:81:ed:90:
         85:36:fa:a4:e0:7a:a6:6f:bc:92:45:98:04:04:bf:5c:12:12:
         c7:6a:e3:33:8f:7d:a2:e3:2a:5d:76:59:8b:30:02:23:6c:d7:
         33:63:50:50:62:58:3e:c4:d4:23:75:7f:fe:f9:06:f8:3c:5d:
         3e:2e:7f:ea:1e:6b:4c:53:27:16:5a:e8:64:22:29:61:0e:4d:
         6b:51:0f:42:94:f0:90:04:fd:78:df:a5:9b:36:05:d2:aa:5a:
         d3:5f:e4:e0:09:c6:b2:8c:2a:3d:ea:d8:9b:b1:20:a5:52:53:
         92:77:4b:a1:41:ee:3e:ed:0c:33:6e:e4:ef:9d:58:3f:9f:cf:
         cd:7d:19:66:bf:af:8f:a0:20:91:d5:6b:5d:a0:ce:70:3d:af:
         23:fc:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 04:24:08 2024 by rpki-client on console-fra.rpki-client.org