Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa
File:                     3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa (raw, json)
Hash identifier:          tFzAOrAD4uOYBzvlt0RpoycC9RpcxTgNWWaTSVJDlY4=
Subject key identifier:   44:8A:48:AC:3A:DA:06:2E:5E:69:86:16:94:53:EC:61:FD:26:6B:F1
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       0A94262935AED2B52143F59171D53DD119B6F0F5
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:54 +0000
ROA not before:           Thu 04 Apr 2024 13:24:54 +0000
ROA not after:            Thu 03 Apr 2025 13:29:54 +0000
asID:                     263384
IP address blocks:        138.185.40.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:94:26:29:35:ae:d2:b5:21:43:f5:91:71:d5:3d:d1:19:b6:f0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:54 2024 GMT
            Not After : Apr  3 13:29:54 2025 GMT
        Subject: CN=448A48AC3ADA062E5E6986169453EC61FD266BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:34:1b:c3:d6:2b:cb:45:c8:2d:64:4a:a2:
                    d4:f1:e8:47:fd:e3:d1:15:72:b2:d3:b4:ae:ed:37:
                    cf:e5:6f:31:03:c7:9a:ae:06:61:d0:64:43:ed:df:
                    e3:30:bc:d9:cc:30:67:a5:fc:cc:ca:98:8d:9e:ce:
                    35:f1:ba:5d:75:f3:e7:a2:9d:75:06:66:2a:51:3b:
                    2d:a1:2b:28:bb:1c:49:c5:f1:ec:69:fd:40:24:19:
                    d6:dc:16:8e:82:33:bc:40:2c:c4:2b:cf:ee:16:14:
                    7d:2e:85:35:0a:74:5f:2f:9d:cb:b9:b7:69:9f:a4:
                    9a:18:39:08:05:cd:70:f2:b5:78:c2:1c:14:62:c3:
                    dc:e8:63:7a:64:dd:75:9f:39:32:06:b8:5a:35:29:
                    6d:d9:81:79:f4:dd:31:ce:30:4f:cf:69:a7:2e:7c:
                    8d:8a:bd:25:7b:c2:3f:12:d1:1c:74:b1:0e:0a:91:
                    13:89:6d:46:6d:71:d7:b4:af:2e:3a:ad:8d:74:b4:
                    01:85:5f:b2:ce:10:30:5e:a0:11:34:b4:22:07:f0:
                    01:38:43:92:36:98:8d:76:98:61:d0:45:09:38:3f:
                    3a:f3:3b:ac:14:c4:8a:6e:34:ff:1b:81:fd:ce:26:
                    df:58:bb:e7:2e:6e:0e:b6:3a:ca:62:e7:35:e6:41:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:48:AC:3A:DA:06:2E:5E:69:86:16:94:53:EC:61:FD:26:6B:F1
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:56:d8:5b:16:b0:73:69:76:90:3a:0b:be:6f:cb:34:85:b8:
         95:3e:ad:7d:19:7b:80:d5:fc:39:3b:a6:10:7e:ff:1f:65:37:
         75:82:fe:9e:04:75:7b:aa:c6:1d:b2:8c:a9:5b:7e:62:92:3b:
         c4:e0:be:ee:f0:26:e2:94:f1:35:35:ff:7e:e9:25:8c:63:6e:
         32:21:9e:19:bb:75:c2:e0:54:78:1b:0f:91:72:59:47:5a:8d:
         a8:de:00:c1:5a:09:e8:3d:fe:92:81:27:fd:d9:4d:2d:46:b9:
         c0:c0:14:0b:6f:55:09:d3:0f:01:38:75:2d:07:a3:a9:39:53:
         05:f2:61:bc:22:ba:0c:95:32:cc:9d:1b:37:7a:f0:79:cd:62:
         dc:8c:83:76:03:48:b5:3c:47:85:2b:21:04:6a:e8:19:1e:76:
         a1:df:32:a9:e1:0f:d6:58:f7:f3:d1:22:db:55:01:3a:5f:7e:
         cd:6b:af:95:bb:56:29:0e:a7:48:0e:85:a5:6b:b4:ee:a2:a9:
         3f:94:fb:d0:d1:83:c6:64:9a:dc:c6:03:bb:5a:ff:d4:51:89:
         3f:6e:45:02:9e:65:5d:29:2d:1c:77:d2:9d:dd:1c:80:b0:07:
         62:cc:f6:f4:ca:a6:60:c7:b1:e1:64:f7:4e:45:71:cd:bb:f0:
         a7:65:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org