Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa
File:                     3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa (raw, json)
Hash identifier:          QS+8mBpZS4iTU1Yc+cEhrJYfx0ItpYxmll8AqekVnls=
Subject key identifier:   23:08:D8:0A:40:B1:C7:ED:44:55:09:06:3B:5E:5C:C2:C7:3E:29:92
Certificate issuer:       /CN=342948E5982CDA2084F137CA767229C586B23DE6
Certificate serial:       281DA0508D9E21D1DAB1AF9D10ED7F0C8FBEA658
Authority key identifier: 34:29:48:E5:98:2C:DA:20:84:F1:37:CA:76:72:29:C5:86:B2:3D:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342948E5982CDA2084F137CA767229C586B23DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa
Signing time:             Thu 04 Apr 2024 13:55:10 +0000
ROA not before:           Thu 04 Apr 2024 13:50:10 +0000
ROA not after:            Thu 03 Apr 2025 13:55:10 +0000
asID:                     263988
IP address blocks:        138.255.188.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1d:a0:50:8d:9e:21:d1:da:b1:af:9d:10:ed:7f:0c:8f:be:a6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342948E5982CDA2084F137CA767229C586B23DE6
        Validity
            Not Before: Apr  4 13:50:10 2024 GMT
            Not After : Apr  3 13:55:10 2025 GMT
        Subject: CN=2308D80A40B1C7ED445509063B5E5CC2C73E2992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:15:fd:6f:26:2a:b9:ea:86:a8:9b:bb:08:
                    62:dd:1e:9d:e5:28:98:3c:55:58:ce:ca:f6:1e:92:
                    f6:25:36:f2:0f:9b:a5:7f:a6:4d:b0:93:55:f9:da:
                    0d:e7:10:c8:81:02:1a:f8:10:94:10:d2:be:1f:5c:
                    fa:db:83:3e:a5:83:06:ed:77:86:6d:07:8e:72:a4:
                    01:ea:24:df:3e:d1:cc:f8:5c:06:dd:00:47:9f:08:
                    be:af:c3:3e:2e:63:42:5c:73:69:1a:cf:63:0e:cb:
                    ad:07:d6:78:1d:de:73:91:b8:b4:92:b9:79:e1:00:
                    59:bc:a1:74:d3:63:09:e9:82:d0:36:8e:a4:5b:3f:
                    85:5b:48:4e:f7:ee:e7:f0:0d:4e:5d:a0:df:46:e9:
                    6f:97:05:e3:c1:79:fd:8b:a7:54:99:c3:45:58:2a:
                    b7:a3:c8:73:e7:7b:d2:74:7b:04:ac:3e:8d:29:89:
                    03:44:35:93:4a:ea:4f:dd:7b:80:4b:c1:89:1d:1d:
                    69:8d:8f:90:1a:19:92:5a:ab:32:f9:5c:7c:16:12:
                    20:6a:7f:87:f1:83:43:7c:25:9c:40:72:04:e2:c8:
                    54:06:a9:69:97:50:5d:06:4a:1f:d9:3a:cc:d6:04:
                    2f:0b:0b:5c:5b:e4:ea:1f:88:9f:5a:3b:71:70:9a:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:08:D8:0A:40:B1:C7:ED:44:55:09:06:3B:5E:5C:C2:C7:3E:29:92
            X509v3 Authority Key Identifier:
                keyid:34:29:48:E5:98:2C:DA:20:84:F1:37:CA:76:72:29:C5:86:B2:3D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/342948E5982CDA2084F137CA767229C586B23DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342948E5982CDA2084F137CA767229C586B23DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/1/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:84:e9:fd:de:c9:c2:92:cd:2a:24:aa:ea:05:d7:32:76:db:
         c7:f9:6d:80:b1:16:51:5a:48:28:38:ca:79:a6:10:55:64:7d:
         46:6e:f7:76:d3:8d:00:f8:fd:48:9c:92:d4:a5:81:6d:2b:fc:
         77:dc:06:7d:b2:e7:ee:94:7d:a7:9d:49:de:c4:82:e6:e8:f7:
         85:6e:f4:a7:57:ba:54:26:92:aa:8b:7d:77:b0:c2:11:8d:6b:
         7b:92:90:55:f4:c3:3f:7c:43:70:18:09:12:84:25:c6:32:f6:
         fe:80:60:58:24:7b:01:f6:df:50:20:a9:0b:55:16:01:16:f4:
         87:59:fb:96:92:a2:a5:1a:15:1c:2d:e9:d7:09:b6:be:91:fe:
         7c:7a:aa:d1:19:5e:44:fa:0e:de:b8:b3:1d:98:99:7d:3f:44:
         24:73:7a:75:bf:61:59:07:67:c7:31:d7:4d:e4:80:bf:de:db:
         7f:56:ae:2f:41:6d:f5:87:fa:f0:b0:28:db:61:33:3e:10:ed:
         21:d4:97:76:fd:1b:3c:e3:9c:63:47:f4:c3:48:91:c5:f2:1a:
         10:68:e0:e1:d6:6d:c8:41:c3:f4:f1:42:b0:05:25:b6:af:29:
         22:fc:71:a4:ca:f3:df:88:d2:13:5c:59:87:03:c8:62:61:e9:
         0f:dc:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 09:16:33 2024 by rpki-client on console-fra.rpki-client.org