Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa
File:                     3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa (raw, json)
Hash identifier:          ujSOEfbvRrQBDJYrhzTdcSM9SbAkubBSzJeqApB+Q90=
Subject key identifier:   CE:8F:2C:D3:EB:8E:9D:63:DA:6F:78:15:6F:74:A5:49:E8:C6:5B:9A
Certificate issuer:       /CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
Certificate serial:       6F5DF538C930FF5A23F3131862C9DDE2494FFDBB
Authority key identifier: 94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa
Signing time:             Mon 16 Sep 2024 23:45:30 +0000
ROA not before:           Mon 16 Sep 2024 23:40:30 +0000
ROA not after:            Mon 15 Sep 2025 23:45:30 +0000
asID:                     263920
IP address blocks:        138.185.242.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5d:f5:38:c9:30:ff:5a:23:f3:13:18:62:c9:dd:e2:49:4f:fd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
        Validity
            Not Before: Sep 16 23:40:30 2024 GMT
            Not After : Sep 15 23:45:30 2025 GMT
        Subject: CN=CE8F2CD3EB8E9D63DA6F78156F74A549E8C65B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:05:98:0b:a0:b3:93:b5:fe:8b:7b:3a:03:
                    c8:2d:b8:1b:a5:d4:22:9a:56:61:9f:5a:17:b1:f3:
                    f4:ae:f4:a6:92:22:17:09:38:07:e0:a1:d0:ef:df:
                    ef:8c:c8:4e:4f:e0:92:6f:fd:c7:80:ab:cb:f6:7c:
                    e2:a4:ed:ed:bc:7c:37:42:30:12:b6:80:8a:6a:95:
                    c9:7d:fe:ad:07:e4:0e:8f:b2:2f:98:d7:09:f0:c9:
                    89:1a:ef:55:99:f0:0d:9b:92:d3:ef:f2:f7:e9:ad:
                    e1:19:63:96:61:83:eb:73:0c:9b:d5:0b:78:7e:d8:
                    c7:46:4e:8a:95:7a:d3:1c:c4:d4:b8:2a:b9:56:3b:
                    10:d5:55:d8:98:95:71:cf:c1:0a:2b:ce:88:b6:6a:
                    14:87:d4:b9:60:3a:20:28:d9:87:c9:cb:a8:fb:b2:
                    58:4e:53:24:f2:d1:e1:dc:19:ec:bd:b3:e2:e9:db:
                    f5:d7:db:24:c5:92:a8:e9:cc:4f:6c:89:e7:ff:06:
                    bc:1e:91:da:e6:76:d4:13:15:bb:7f:fd:dd:84:48:
                    60:64:a2:a0:46:70:55:40:31:34:c5:9e:48:c1:65:
                    15:59:88:43:6d:e6:df:dd:67:1a:ea:01:43:28:10:
                    35:26:16:a4:f7:4c:3f:e5:a2:d7:06:38:dc:ba:96:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8F:2C:D3:EB:8E:9D:63:DA:6F:78:15:6F:74:A5:49:E8:C6:5B:9A
            X509v3 Authority Key Identifier:
                keyid:94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:a3:76:b0:31:a5:23:b9:99:94:8c:f9:f0:27:b7:c9:86:
         9b:4b:62:80:49:a7:b5:aa:b6:ac:dc:88:71:25:c3:25:3c:f0:
         b3:ec:88:cf:f2:54:13:58:e7:7c:0b:86:af:d6:b3:71:8d:6a:
         67:65:42:e1:3b:44:29:80:05:59:ea:4d:84:4a:ca:5a:3f:d7:
         b5:73:62:b4:77:60:78:73:d4:bc:68:ea:ac:32:d0:63:2f:ec:
         b8:71:d3:a7:45:19:6e:11:b2:73:b6:8b:13:b5:12:f7:8d:e9:
         ca:f0:da:c6:53:5d:c5:37:47:5c:ae:88:fa:a6:dc:2c:57:42:
         16:0a:6d:cd:06:4b:0a:79:eb:6b:39:c3:66:a9:12:93:e8:8a:
         cf:02:a8:4c:db:1f:fb:50:e8:42:bf:58:99:ce:a8:a0:6f:86:
         40:a7:59:d2:77:21:54:a0:d6:77:98:82:37:0e:9d:01:36:4c:
         c9:39:6e:a9:10:09:7a:66:6a:63:f5:c1:60:0d:ea:1e:e1:5a:
         94:c8:14:b4:3f:be:f5:44:39:cd:fd:9b:27:35:57:05:1b:b0:
         c8:26:fe:e4:93:df:0d:53:d2:9d:6f:c2:28:11:ab:97:43:02:
         83:0d:f9:a9:93:14:4f:da:5c:76:d3:09:20:c5:b0:e7:7a:36:
         b5:a3:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 06:34:34 2024 by rpki-client on console-fra.rpki-client.org