Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
File:                     3133382e39372e302e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          VDmtBHPR2DoIaTXx1M4l2BtOEBEa7HU0bcA/M1iqOlw=
Subject key identifier:   34:C1:59:31:0C:D9:01:62:A5:6E:14:BF:82:8B:A0:74:2E:46:CC:AF
Certificate issuer:       /CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
Certificate serial:       09EC1539C41E13D6F7C66614E72A48A10E46409B
Authority key identifier: D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
Signing time:             Thu 04 Apr 2024 08:11:35 +0000
ROA not before:           Thu 04 Apr 2024 08:06:35 +0000
ROA not after:            Thu 03 Apr 2025 08:11:35 +0000
asID:                     262346
IP address blocks:        138.97.0.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ec:15:39:c4:1e:13:d6:f7:c6:66:14:e7:2a:48:a1:0e:46:40:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
        Validity
            Not Before: Apr  4 08:06:35 2024 GMT
            Not After : Apr  3 08:11:35 2025 GMT
        Subject: CN=34C159310CD90162A56E14BF828BA0742E46CCAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:c5:7e:b2:a5:28:f1:5c:d4:34:d3:8e:ae:
                    2c:b2:0f:a1:25:05:82:64:a5:e5:44:ba:87:a1:7e:
                    01:fb:b7:33:90:51:e5:85:16:d9:68:e8:c7:8f:8e:
                    d8:38:23:3d:28:d9:6b:1e:af:2c:1f:6a:9f:c1:80:
                    d1:fa:4a:9e:c8:33:c1:74:3e:69:27:83:b9:36:55:
                    78:89:10:95:09:43:07:80:9b:4b:61:ee:af:ba:cc:
                    85:e2:64:f0:07:40:11:94:0e:6b:02:67:72:5f:c6:
                    4c:b8:a6:a3:14:94:6c:b7:85:95:da:a6:f2:4f:99:
                    f6:17:67:43:38:05:2a:c3:ae:c1:18:10:05:02:ee:
                    93:b4:0e:99:55:10:ec:b9:33:ec:52:3a:ee:15:d2:
                    e8:bc:0a:95:bf:0b:d5:0c:29:56:e2:be:41:96:f2:
                    8e:96:2a:ea:c7:dc:5f:45:21:06:f0:eb:53:69:06:
                    8d:e8:5a:59:68:c5:ee:d9:fd:c4:dc:87:39:5e:24:
                    2d:4e:38:48:c7:2c:db:f5:a4:f3:21:39:b9:51:48:
                    20:63:5f:75:91:26:0d:9f:b8:d9:10:d4:18:78:29:
                    2d:fb:71:aa:5b:30:07:59:41:a7:4d:9d:2b:78:e9:
                    67:74:5f:51:de:9c:84:26:c7:55:d5:02:a3:d8:64:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C1:59:31:0C:D9:01:62:A5:6E:14:BF:82:8B:A0:74:2E:46:CC:AF
            X509v3 Authority Key Identifier:
                keyid:D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3133382e39372e302e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:0c:3f:86:f0:04:ed:dc:75:fd:06:8b:53:53:8a:22:56:38:
         a5:0e:b0:73:59:e6:63:17:b7:2a:9a:80:77:1e:04:5e:f2:35:
         7d:a4:e2:cc:48:b3:1a:ac:7f:88:0b:65:10:e1:75:04:01:0d:
         65:29:ca:bb:43:08:7f:a3:7a:b0:da:d4:b6:ac:07:82:8a:f9:
         ec:51:cf:00:bd:44:f3:e6:94:b4:e4:f5:cc:1b:9b:d5:dd:e9:
         33:53:18:3d:08:e0:80:1b:59:16:fa:6e:ed:3c:15:b4:9c:54:
         84:98:2f:b7:26:77:9c:8d:0a:b3:7f:9f:41:d3:01:31:60:c5:
         4b:16:3e:0f:86:1f:f8:de:cc:73:34:59:05:d3:f2:da:60:7a:
         95:aa:b5:6f:91:da:ac:cb:cf:e1:f3:ae:1b:b4:92:c0:df:a3:
         5b:56:f1:fa:d5:fa:3c:ee:70:97:62:d0:08:64:19:80:28:47:
         67:0a:dc:45:21:66:ba:11:b9:a4:a0:ca:2e:35:e6:a9:bb:99:
         3d:db:0e:18:d0:e5:ab:99:b6:81:77:98:57:aa:26:d6:0e:c2:
         95:18:f7:ac:39:aa:d7:7d:cb:d6:0d:5a:11:96:35:99:0a:53:
         d9:2e:a1:0e:5c:c1:e1:68:44:16:29:82:e7:82:93:b9:8b:c8:
         41:8d:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 07:42:58 2024 by rpki-client on console-fra.rpki-client.org