Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa
File:                     3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (raw, json)
Hash identifier:          41tD5U/jEYfkYg8tqmUlv58IpMVg+xGLPy6CO4tUFT4=
Subject key identifier:   3B:EC:35:F5:68:31:DF:2C:7E:B0:97:37:27:87:AD:2B:9E:C2:65:6A
Certificate issuer:       /CN=0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21
Certificate serial:       143290A938869F95A1739CB08C827970239C8613
Authority key identifier: 0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa
Signing time:             Fri 17 May 2024 13:20:36 +0000
ROA not before:           Fri 17 May 2024 13:15:36 +0000
ROA not after:            Fri 16 May 2025 13:20:36 +0000
asID:                     264316
IP address blocks:        138.122.40.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:32:90:a9:38:86:9f:95:a1:73:9c:b0:8c:82:79:70:23:9c:86:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21
        Validity
            Not Before: May 17 13:15:36 2024 GMT
            Not After : May 16 13:20:36 2025 GMT
        Subject: CN=3BEC35F56831DF2C7EB097372787AD2B9EC2656A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:b1:91:78:fd:06:9a:eb:8e:f2:43:e3:e7:
                    dd:8b:b2:65:e4:78:bf:83:49:9c:f2:39:00:c1:d8:
                    4f:f4:3e:20:4b:13:82:ab:c5:24:3e:28:a6:f5:3c:
                    06:76:e7:e2:da:3c:ff:95:6c:1c:cc:30:27:bd:bc:
                    57:93:3d:4a:21:af:55:e5:50:5c:bb:25:a7:a8:a2:
                    b3:23:83:bb:d4:9d:e3:24:5b:0b:fa:85:eb:8b:6d:
                    d6:32:eb:01:a1:f3:3e:a7:92:41:c0:47:da:1d:22:
                    2d:9b:bd:f0:13:b1:71:60:75:7b:56:5f:03:26:4d:
                    19:f6:9b:69:14:e3:5f:9a:8b:06:52:bc:74:34:c0:
                    92:e7:4f:6d:d3:6d:45:98:d1:5b:45:2a:65:db:48:
                    fb:d7:12:96:27:63:eb:5e:21:16:36:09:d4:32:1e:
                    63:ab:5f:e9:13:e0:b6:ae:e5:d0:6c:34:43:8a:c0:
                    23:c3:43:09:22:99:d4:99:06:aa:0c:53:7d:9e:71:
                    35:51:96:c8:1e:d4:b7:50:18:e7:ee:b7:2c:47:44:
                    7d:a8:42:66:52:b2:5c:e4:6b:8b:dc:51:11:88:fa:
                    cb:18:41:d0:18:fb:13:18:4e:fa:a8:97:cc:ef:0c:
                    41:77:1c:c3:48:24:6f:3b:ca:f8:2e:3c:c2:47:a9:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EC:35:F5:68:31:DF:2C:7E:B0:97:37:27:87:AD:2B:9E:C2:65:6A
            X509v3 Authority Key Identifier:
                keyid:0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:cc:89:17:03:02:2d:5a:bb:66:f7:0b:f0:b6:1a:3f:fe:
         34:b8:8f:e7:f2:51:09:a2:e8:a1:d3:98:5e:98:80:56:44:dc:
         99:b6:89:57:3d:a3:e0:a6:81:da:39:a2:e5:11:61:25:ca:3e:
         85:a0:e5:a5:69:4c:43:71:1e:0f:67:cd:6c:68:34:77:ed:90:
         97:2a:9b:85:d0:75:7b:10:d6:4f:86:89:1d:ff:a3:92:90:b3:
         75:8f:2e:de:b5:4e:32:55:f4:19:b1:97:50:56:c9:cf:2a:bc:
         3e:0e:7a:5b:5a:11:59:1e:c6:e2:0f:29:4f:37:ab:74:7c:3c:
         e0:b2:ee:00:82:78:f8:eb:61:e1:35:4e:d9:a1:b0:df:f7:c0:
         c8:23:48:00:db:0d:2f:55:17:15:e4:57:79:43:b2:69:b8:09:
         ee:50:b2:ec:c1:39:7d:87:e4:a8:23:45:de:2b:20:9d:32:87:
         9f:2a:83:ac:47:6c:a0:11:e4:61:a3:a6:64:9e:72:bb:5c:92:
         8b:94:43:ba:a0:71:a0:31:6f:70:dd:ab:0e:90:56:22:15:dc:
         29:7f:bc:71:4b:13:f2:0c:2f:d8:4f:1f:26:97:ac:91:a3:ed:
         87:ba:4d:5d:5b:c6:c7:2c:fe:ae:88:cb:42:00:9c:df:7e:13:
         ff:33:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 09:53:47 2024 by rpki-client on console-fra.rpki-client.org