Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          yH0FTbMYwLvjjp+pj4jJULUO9oVQVMiDAQX2LoaI5HA=
Subject key identifier:   9A:DE:37:73:B0:36:46:58:56:08:B1:A9:89:87:D9:6C:BE:18:49:28
Certificate issuer:       /CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
Certificate serial:       2F49546DFFDD50AB847E8D3A4D0911E10024665C
Authority key identifier: 0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa
Signing time:             Thu 04 Apr 2024 11:35:01 +0000
ROA not before:           Thu 04 Apr 2024 11:30:01 +0000
ROA not after:            Thu 03 Apr 2025 11:35:01 +0000
asID:                     263887
IP address blocks:        138.204.129.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:49:54:6d:ff:dd:50:ab:84:7e:8d:3a:4d:09:11:e1:00:24:66:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
        Validity
            Not Before: Apr  4 11:30:01 2024 GMT
            Not After : Apr  3 11:35:01 2025 GMT
        Subject: CN=9ADE3773B03646585608B1A98987D96CBE184928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:82:18:cd:c0:64:df:4c:b9:02:4b:3b:29:
                    2b:94:2d:23:45:25:61:22:1d:6e:fb:f0:b7:80:4e:
                    74:22:26:5a:a8:7c:4e:f8:19:40:c3:ad:04:e5:52:
                    1a:0d:ab:bb:fb:8d:33:bd:07:20:b2:fd:5f:15:04:
                    89:f0:e5:b7:c5:8a:34:b2:41:9f:69:da:86:23:75:
                    b6:ee:51:fc:d8:4f:08:09:81:70:e2:a6:82:ba:71:
                    3f:87:6f:38:a6:1f:26:f8:6f:e6:75:64:05:c7:ba:
                    2d:1d:c1:29:14:25:7d:df:b7:89:5e:34:5a:23:13:
                    37:96:fc:a7:46:de:94:db:b3:1a:f5:d5:f3:2a:10:
                    13:82:e8:48:7c:07:54:40:38:a8:d5:e2:2e:08:a3:
                    b8:dc:76:0b:93:4c:a5:86:b6:aa:3c:05:af:8b:10:
                    0e:5a:fb:2c:ac:cc:ca:66:0e:25:ea:76:08:03:ac:
                    6d:b1:82:b7:ea:7e:91:41:cc:19:01:93:8f:ab:f8:
                    1f:a8:c0:c1:8c:d8:d6:0e:a7:3a:7a:6e:45:79:eb:
                    96:39:56:c7:ab:7a:60:60:c1:5d:37:4d:b9:3f:4c:
                    fc:4d:7d:93:0e:6a:f1:b3:62:0d:fa:d2:3b:ee:0e:
                    d2:88:3f:99:f3:8c:7a:aa:e1:03:9f:85:25:3c:54:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DE:37:73:B0:36:46:58:56:08:B1:A9:89:87:D9:6C:BE:18:49:28
            X509v3 Authority Key Identifier:
                keyid:0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:84:41:93:3f:3e:62:a6:76:31:96:91:b8:a9:c1:12:8f:10:
         6a:b3:a9:52:c3:4d:00:5d:1b:c7:52:60:60:c5:1e:ff:94:dc:
         5e:34:a2:8b:8d:30:f8:b0:af:5b:a6:b1:49:d7:2a:e4:d1:d4:
         bf:d1:b3:6e:09:45:0d:83:4c:23:7e:9c:ee:1a:36:d8:e6:26:
         87:f8:31:20:5a:c6:60:cf:bf:34:41:a1:54:6d:61:ec:e8:25:
         f9:2e:cf:cc:09:6c:a0:8d:3a:e8:06:54:9c:ba:15:1d:38:81:
         aa:f5:26:23:cc:3f:20:dc:f8:49:e5:38:9c:8a:63:e2:e9:e2:
         03:b4:db:2d:55:b4:77:02:f6:86:af:76:09:ea:6a:7d:74:a7:
         d2:1e:d9:c8:65:65:41:cb:27:14:c4:3a:02:71:d3:58:7f:7e:
         82:68:2b:eb:4f:d8:59:24:a1:ad:cf:af:44:bc:93:9c:41:1a:
         d0:25:67:68:7c:2d:46:16:ce:39:f2:2c:04:96:3a:90:e6:f1:
         ad:25:e4:e8:60:8b:4f:69:b6:5a:db:8c:76:71:90:f1:54:f6:
         d7:9f:cd:76:5b:00:48:38:e2:95:40:00:7b:46:75:cd:62:7e:
         1b:28:69:96:3d:ff:9c:82:4f:1f:38:f2:73:36:c6:39:ce:1b:
         94:39:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org