Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa
File:                     3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa (raw, json)
Hash identifier:          mzVvVjdXA+goImdEyujwsmD9qTwj6IdJGrd6S5eS0ic=
Subject key identifier:   64:AB:41:D8:78:FE:02:0C:F1:CA:40:B9:DA:77:0C:31:68:31:41:EC
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       638971CE61120CF19D09FC1DB7905D7A06649DAB
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:52 +0000
ROA not before:           Thu 04 Apr 2024 13:24:52 +0000
ROA not after:            Thu 03 Apr 2025 13:29:52 +0000
asID:                     263384
IP address blocks:        138.185.40.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:89:71:ce:61:12:0c:f1:9d:09:fc:1d:b7:90:5d:7a:06:64:9d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:52 2024 GMT
            Not After : Apr  3 13:29:52 2025 GMT
        Subject: CN=64AB41D878FE020CF1CA40B9DA770C31683141EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:87:d8:fd:a0:26:8f:ef:65:fc:7b:60:0d:
                    3a:6b:9c:7b:37:05:1a:11:87:23:e6:86:cb:e1:f6:
                    3e:82:20:bb:05:45:50:4b:70:25:9f:91:68:f8:89:
                    da:e0:20:31:e5:ae:f6:1a:17:dc:78:37:5d:e5:7a:
                    55:c7:30:1d:8d:8c:42:c2:25:0e:ff:70:c3:85:fc:
                    76:ad:3a:8e:f5:a0:60:29:3c:38:d0:96:61:d8:7c:
                    f8:51:3d:30:da:41:76:a1:0a:77:c8:a1:29:28:e8:
                    9c:47:65:ff:6f:28:53:b5:9a:f3:d0:e3:d2:23:80:
                    21:9f:53:30:de:bc:c1:25:f1:8b:07:dd:83:ef:33:
                    f3:9c:f4:a3:53:b8:6c:83:f3:9e:9e:36:15:5c:0e:
                    b3:a0:ea:fd:bc:d9:51:15:d6:e4:31:41:8a:9c:f3:
                    53:5f:aa:64:cb:08:5b:e7:6c:90:b9:da:3c:51:85:
                    33:84:6b:4a:7f:eb:f4:eb:5b:a1:fc:e7:05:76:bf:
                    ea:ca:fa:72:70:4e:14:db:6c:af:be:94:e4:2e:02:
                    f1:9d:07:87:7e:e5:ab:63:db:83:f0:ac:3a:23:3c:
                    76:da:07:20:58:2d:6c:ee:0a:b7:32:64:be:58:2a:
                    65:9a:dd:81:6d:a5:34:03:16:5f:1f:14:1b:cc:6c:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AB:41:D8:78:FE:02:0C:F1:CA:40:B9:DA:77:0C:31:68:31:41:EC
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:c1:fd:5e:ff:c8:e1:24:03:7c:94:c4:8b:c7:d7:f1:c5:fb:
         14:9e:2b:f4:58:42:ab:a7:bf:bc:c9:89:71:c2:23:95:2e:7a:
         69:2b:ee:c6:2b:8b:64:e2:0d:e8:d0:16:58:a3:83:a9:51:7f:
         93:5e:ae:bd:37:dc:e4:96:c6:b4:e2:6c:d7:bf:b1:6b:97:4c:
         1e:31:36:42:f2:e4:c6:05:ca:6d:cd:3c:f1:b7:25:39:e3:b4:
         ab:a2:59:6f:ff:57:0a:a4:48:91:33:2a:02:4c:20:1a:1a:14:
         ab:4c:a7:3c:32:ce:55:1e:10:f8:a7:d9:7b:8a:a9:fe:89:25:
         b0:22:cb:11:5d:97:c8:47:e4:33:96:d2:2c:e3:0a:11:d8:4d:
         c9:87:3d:4e:98:b5:65:41:c3:ec:e8:51:94:63:82:cf:db:a1:
         96:65:b6:ad:40:a3:30:8d:17:bc:a4:05:1d:35:49:d4:ff:2b:
         ac:ed:f2:95:f0:3d:b8:54:32:86:0b:7c:f8:42:bc:4e:5f:ac:
         2b:37:f3:91:3a:44:4d:bd:75:9f:7a:90:9a:b0:b1:1a:97:d7:
         07:48:9e:b6:e8:12:38:5b:3b:30:70:91:ec:a4:a2:e7:84:07:
         82:57:b6:1d:85:74:25:54:0f:db:f4:80:b2:a6:80:49:a9:3c:
         ea:ad:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org