Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa
File:                     3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa (raw, json)
Hash identifier:          I3t7NBeDB8R4udLo+4GjqcA/oTnaeunKtjLsG5u11nk=
Subject key identifier:   D6:06:4B:44:8F:E3:38:74:F2:BE:B6:4A:E6:47:85:2A:91:9C:36:92
Certificate issuer:       /CN=F5B1AADB3E77F88400EF6BADDE09B2D75E04071B
Certificate serial:       5990D8352F2A4CE3C9F182B355810A6E1F054AE7
Authority key identifier: F5:B1:AA:DB:3E:77:F8:84:00:EF:6B:AD:DE:09:B2:D7:5E:04:07:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa
Signing time:             Wed 07 Aug 2024 18:57:33 +0000
ROA not before:           Wed 07 Aug 2024 18:52:33 +0000
ROA not after:            Wed 06 Aug 2025 18:57:33 +0000
asID:                     264221
IP address blocks:        138.117.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:90:d8:35:2f:2a:4c:e3:c9:f1:82:b3:55:81:0a:6e:1f:05:4a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B1AADB3E77F88400EF6BADDE09B2D75E04071B
        Validity
            Not Before: Aug  7 18:52:33 2024 GMT
            Not After : Aug  6 18:57:33 2025 GMT
        Subject: CN=D6064B448FE33874F2BEB64AE647852A919C3692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:fe:f2:66:fb:d9:5e:0b:3f:8a:07:98:8e:
                    a4:ce:38:b6:04:35:80:2e:7f:f4:58:21:81:c8:2d:
                    57:a9:09:78:5e:5d:3f:f2:9f:be:40:0d:33:1e:0f:
                    33:cb:b3:90:a6:2c:3e:80:23:e2:bd:5e:77:5a:5a:
                    eb:12:37:47:81:ea:c0:e2:1b:b6:69:67:18:51:5e:
                    79:a1:b7:ba:c0:0f:5e:51:76:85:f6:31:f8:bb:d9:
                    c5:2f:8a:b3:45:07:54:43:dd:98:75:9c:1b:ae:b3:
                    7e:9f:f3:85:98:80:a3:60:1c:ac:db:69:6b:ce:75:
                    43:26:76:8c:75:5a:5c:2f:e4:a1:ea:b6:86:a3:66:
                    de:41:7c:36:c7:a4:52:2a:e5:58:75:58:ed:3b:c0:
                    7e:32:ff:8d:c3:a6:ba:42:bc:83:58:ab:aa:81:2a:
                    d5:06:3c:2e:5a:47:e9:42:be:bb:eb:76:fc:57:cb:
                    e8:24:3c:16:d3:03:35:8b:14:b0:ed:af:0a:99:c6:
                    5d:a5:38:a5:6a:c2:d1:48:56:0f:7a:7e:3e:27:76:
                    ba:44:3b:8f:9a:22:ff:7b:1f:df:55:9d:7c:8c:d1:
                    c4:a5:46:3d:56:ff:f5:25:44:5d:b0:e3:25:23:1d:
                    a0:d3:ab:9a:2f:5b:b8:e0:e4:06:db:09:af:69:f5:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:4B:44:8F:E3:38:74:F2:BE:B6:4A:E6:47:85:2A:91:9C:36:92
            X509v3 Authority Key Identifier:
                keyid:F5:B1:AA:DB:3E:77:F8:84:00:EF:6B:AD:DE:09:B2:D7:5E:04:07:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:73:66:a9:2b:5e:6e:95:32:99:c6:fd:ff:d0:f7:03:d4:18:
         ff:ad:a1:aa:fb:39:db:2e:d8:f4:5b:48:bb:17:84:1b:5a:1f:
         6e:7f:5b:27:c1:c7:bb:5e:af:49:f3:c5:d9:9c:05:da:df:fe:
         da:ed:59:7f:15:bd:7d:38:6b:52:3e:54:08:f0:ed:f5:72:3f:
         a0:16:ac:1b:f7:26:e7:48:42:a5:11:67:37:cf:fc:09:7b:99:
         24:a8:6b:c8:40:26:a4:76:9d:15:c8:3d:5c:76:0b:86:07:3b:
         2b:68:61:44:64:6d:8e:34:74:db:e8:4f:ff:5c:19:b2:ca:3d:
         eb:b9:ee:10:a9:6f:fe:4c:80:68:5f:25:4c:99:04:6b:4f:1e:
         c9:82:dc:bb:8f:3c:12:1f:e1:6a:c5:6d:0c:52:aa:0e:5a:b6:
         e8:21:8d:98:18:a8:35:d1:b0:d7:d7:d8:de:8d:22:c0:6f:48:
         96:c8:79:a6:e7:3e:2c:ce:2c:ac:1c:19:c3:b3:ed:86:f1:73:
         a5:37:13:ef:64:e8:a4:e5:31:29:3d:5c:fd:a7:fa:cb:7c:f2:
         b5:c1:d8:91:14:ab:a4:c8:4f:41:bc:85:34:f2:df:7f:22:90:
         e4:3a:9c:d0:2a:3c:d9:f5:9f:af:f2:71:94:d5:1d:42:e6:8e:
         23:5e:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org