Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34332e302f32342d3234203d3e20323633333834.roa
File:                     3133382e3138352e34332e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          vuw6UUn343x7PQKnZraEfoEXoOEe6R23IoRas7oLfsc=
Subject key identifier:   96:F3:50:6A:15:E3:80:CF:8B:5C:39:D4:B7:CF:4E:CB:38:53:9C:F9
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       754E040C753480CEBABFC4A7750EF771338CCFAA
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34332e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:54 +0000
ROA not before:           Thu 04 Apr 2024 13:24:54 +0000
ROA not after:            Thu 03 Apr 2025 13:29:54 +0000
asID:                     263384
IP address blocks:        138.185.43.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4e:04:0c:75:34:80:ce:ba:bf:c4:a7:75:0e:f7:71:33:8c:cf:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:54 2024 GMT
            Not After : Apr  3 13:29:54 2025 GMT
        Subject: CN=96F3506A15E380CF8B5C39D4B7CF4ECB38539CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:5f:f0:bb:bc:85:47:b6:af:9a:3c:af:2c:
                    cb:ed:fd:3d:ce:50:0f:c6:7b:22:49:00:3b:d6:e9:
                    01:c8:4e:f5:b4:43:76:80:58:4f:7f:10:76:55:37:
                    22:5d:e0:89:b1:1e:94:a4:86:48:6f:8e:9a:27:db:
                    7f:24:bb:f8:7b:32:00:c2:67:b0:45:92:4d:48:0e:
                    42:9d:38:4b:a3:1f:e7:0a:92:7a:40:8d:ec:88:40:
                    60:bd:cd:5f:f0:8b:b4:96:21:02:3b:9a:34:c4:f1:
                    28:4e:df:48:38:a1:c6:31:e7:1c:3d:91:a0:ee:fe:
                    d8:f8:9d:0c:fa:85:04:85:46:8b:5f:75:96:7b:17:
                    59:77:f5:33:bc:38:99:86:92:b3:6d:f9:ac:20:b2:
                    bf:c6:8f:4f:63:8b:fd:23:e8:25:09:82:c5:d0:54:
                    a8:73:ce:7f:ae:90:b3:70:74:42:18:50:90:7c:c1:
                    70:e2:60:28:62:b9:21:e4:be:42:72:ca:31:c8:e1:
                    1a:f2:49:f2:4a:e3:79:41:c2:03:90:48:2c:93:8c:
                    b3:9e:45:56:d7:45:59:89:c4:0a:da:64:be:aa:8c:
                    96:2c:b6:0a:f4:53:89:40:89:c9:8c:1b:8b:09:2c:
                    f6:ea:15:5b:79:90:48:4b:61:89:6b:23:62:e5:46:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F3:50:6A:15:E3:80:CF:8B:5C:39:D4:B7:CF:4E:CB:38:53:9C:F9
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34332e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:ce:5a:01:c0:4e:c1:71:6b:7c:fe:10:7e:0b:c6:3f:8f:
         00:50:dd:64:12:49:bf:3e:00:96:2b:98:3c:86:28:8b:76:83:
         c8:cc:dc:58:58:50:7e:ea:6d:25:e8:9d:28:72:cd:13:50:a5:
         7c:ee:8a:1e:9a:3b:b1:1a:a9:d6:49:85:a4:a1:96:7b:b0:4a:
         8a:23:01:d9:02:47:b5:93:9b:6d:5d:7a:1d:b8:10:e5:85:3d:
         d0:9b:90:e7:0c:ef:2f:4a:53:c9:5b:36:ff:26:36:a9:15:c3:
         a2:45:36:70:98:bf:ad:3d:ed:69:07:7d:5a:4f:c6:d1:5b:25:
         44:43:5c:62:73:a6:5a:4d:5d:fc:51:dc:3a:a3:3a:56:fe:a1:
         b6:5e:ea:0a:aa:c4:8c:c8:ad:da:fc:67:b0:0b:86:3e:33:d0:
         64:80:e5:8f:23:fa:a8:2f:e3:c4:7f:9e:46:73:c1:f1:14:64:
         e2:36:00:fa:9f:34:c3:11:91:d4:13:a5:0b:60:b3:a5:1c:34:
         97:89:cb:0a:7f:a7:09:59:bc:8e:42:ce:70:86:45:aa:25:29:
         a7:f8:c6:a2:a9:76:6c:82:05:a8:c7:6e:35:ad:f0:48:11:10:
         6d:e8:3c:47:fa:14:90:c5:29:86:c1:0a:a5:a1:45:07:53:bd:
         fa:db:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org