Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          a81csKdip/11VGtUDfn7tHIF/BWJMmRyMafuevA8Om8=
Subject key identifier:   6E:0B:C7:A3:79:61:58:24:26:D8:B4:FA:17:5E:A6:4B:7E:3A:64:9E
Certificate issuer:       /CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
Certificate serial:       53EACE160602974D0D1EA46AB56791D125D4898E
Authority key identifier: 94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
Signing time:             Mon 16 Sep 2024 23:45:30 +0000
ROA not before:           Mon 16 Sep 2024 23:40:30 +0000
ROA not after:            Mon 15 Sep 2025 23:45:30 +0000
asID:                     263920
IP address blocks:        138.185.241.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ea:ce:16:06:02:97:4d:0d:1e:a4:6a:b5:67:91:d1:25:d4:89:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
        Validity
            Not Before: Sep 16 23:40:30 2024 GMT
            Not After : Sep 15 23:45:30 2025 GMT
        Subject: CN=6E0BC7A37961582426D8B4FA175EA64B7E3A649E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:58:5e:33:78:4e:f2:3a:d1:dc:40:45:c8:
                    37:35:66:0b:59:56:f2:4a:b8:2e:69:70:88:c9:3b:
                    2f:c9:5a:0b:8f:f0:28:39:ba:f5:7b:cf:5e:5b:d8:
                    d0:59:fd:3c:2f:80:49:50:a5:b7:e2:16:3c:cb:b0:
                    39:94:18:db:86:4b:94:48:fb:27:b3:47:6c:bb:77:
                    32:89:a3:64:6f:dd:a0:d1:0e:29:7f:0f:6e:02:8f:
                    a2:7d:95:1b:06:48:42:08:30:2e:7b:61:19:d1:d0:
                    4b:d4:e6:1e:68:93:9f:36:a2:3e:03:06:d2:d7:bb:
                    72:e7:9a:d5:24:5b:e7:6e:ae:60:35:78:64:57:d3:
                    60:f3:08:97:9e:99:d0:d5:56:9a:79:05:29:d6:e7:
                    26:6f:d6:76:a3:69:4f:bf:79:54:a8:27:fa:f9:67:
                    98:a2:0c:aa:42:b5:7a:04:ce:24:69:7b:d8:ca:f2:
                    bd:0d:62:bc:10:e4:06:67:e3:8e:77:72:e8:fd:85:
                    d3:96:8c:0a:6d:10:28:c0:83:9b:ea:05:5e:ca:8a:
                    b8:49:28:a5:2d:62:2b:a5:aa:15:a6:9b:4f:26:6e:
                    d7:31:5e:cc:14:17:7f:b4:de:31:14:a6:4f:e5:7d:
                    8c:2e:fc:75:f7:48:6f:13:c5:be:07:6d:8d:4e:78:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:C7:A3:79:61:58:24:26:D8:B4:FA:17:5E:A6:4B:7E:3A:64:9E
            X509v3 Authority Key Identifier:
                keyid:94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b9:f3:14:22:44:b1:ab:dc:d9:63:b4:b3:77:21:32:45:6f:
         9c:57:69:04:d4:dd:15:f6:3e:36:79:1e:6d:3f:32:3c:aa:ec:
         9b:e8:6c:c2:4d:4e:2c:1c:d0:4d:e2:59:aa:57:71:d8:e6:cc:
         98:88:22:13:cf:44:aa:dd:5d:89:e7:32:ea:b9:84:43:c5:ce:
         86:5a:35:c7:d6:21:c2:5a:fb:a1:70:ff:9c:c3:3e:da:bf:75:
         51:57:3f:9f:31:e1:f6:c1:d3:d9:bd:a5:81:d2:8e:8f:26:09:
         3e:53:ad:03:45:6c:8a:01:55:5c:c2:e4:48:96:b4:50:b0:85:
         c7:c1:b7:81:fd:00:87:f5:58:82:02:dd:99:ff:a5:2d:cb:ed:
         97:dc:19:de:a5:d8:1c:26:57:6b:39:6f:20:a3:a5:7a:88:5a:
         3b:c3:78:6c:90:8e:24:6b:3d:84:6c:87:fb:10:b7:88:dc:5d:
         a9:ea:87:22:dc:7f:8f:be:72:5b:d4:18:46:a0:c1:5e:a3:76:
         1c:3c:7a:81:0f:fc:f6:e1:29:64:c1:13:c5:ad:7f:4d:b6:b2:
         bc:b5:71:95:c3:86:c3:2b:1e:c2:5f:0c:e7:3e:43:a3:6c:51:
         a4:a5:0d:57:3a:05:34:4d:c5:78:d4:28:63:47:ab:39:20:19:
         73:cd:2f:6f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU+rOFgYCl00NHqRqtWeR0SXUiY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRCQTBFNjg2NUFDNDlFNEEwRjhCMTQ4NDBGMzIxQjU1
NzNBRjg4RDAeFw0yNDA5MTYyMzQwMzBaFw0yNTA5MTUyMzQ1MzBaMDMxMTAvBgNV
BAMTKDZFMEJDN0EzNzk2MTU4MjQyNkQ4QjRGQTE3NUVBNjRCN0UzQTY0OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBVheM3hO8jrR3EBFyDc1ZgtZ
VvJKuC5pcIjJOy/JWguP8Cg5uvV7z15b2NBZ/TwvgElQpbfiFjzLsDmUGNuGS5RI
+yezR2y7dzKJo2Rv3aDRDil/D24Cj6J9lRsGSEIIMC57YRnR0EvU5h5ok582oj4D
BtLXu3LnmtUkW+durmA1eGRX02DzCJeemdDVVpp5BSnW5yZv1najaU+/eVSoJ/r5
Z5iiDKpCtXoEziRpe9jK8r0NYrwQ5AZn4453cuj9hdOWjAptECjAg5vqBV7KirhJ
KKUtYiulqhWmm08mbtcxXswUF3+03jEUpk/lfYwu/HX3SG8Txb4HbY1OeOULAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbgvHo3lhWCQm2LT6F16mS346ZJ4wHwYDVR0j
BBgwFoAUlLoOaGWsSeSg+LFIQPMhtVc6+I0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC85NEJBMEU2ODY1QUM0OUU0QTBGOEIxNDg0MEYzMjFCNTU3M0FGODhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QkEwRTY4NjVBQzQ5RTRB
MEY4QjE0ODQwRjMyMUI1NTczQUY4OEQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq58TANBgkqhkiG9w0BAQsFAAOCAQEANbnz
FCJEsavc2WO0s3chMkVvnFdpBNTdFfY+NnkebT8yPKrsm+hswk1OLBzQTeJZqldx
2ObMmIgiE89Eqt1diecy6rmEQ8XOhlo1x9Yhwlr7oXD/nMM+2r91UVc/nzHh9sHT
2b2lgdKOjyYJPlOtA0VsigFVXMLkSJa0ULCFx8G3gf0Ah/VYggLdmf+lLcvtl9wZ
3qXYHCZXazlvIKOleohaO8N4bJCOJGs9hGyH+xC3iNxdqeqHItx/j75yW9QYRqDB
XqN2HDx6gQ/89uEpZMETxa1/TbayvLVxlcOGwysewl8M5z5Do2xRpKUNVzoFNE3F
eNQoY0erOSAZc80vbw==
-----END CERTIFICATE-----
Generated at Mon Oct 7 06:34:34 2024 by rpki-client on console-fra.rpki-client.org