Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa
File:                     3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa (raw, json)
Hash identifier:          F4EF+59ZShHkm8RYfJcJ43fxrmjzYtiOQUErwYN2zeI=
Subject key identifier:   18:FF:35:C1:71:D4:F1:66:DA:A8:81:DF:1A:37:F3:6C:17:42:F8:EB
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       2BA9CCA4564D65F3D273432AAA011EBBB4675239
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        138.204.184.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a9:cc:a4:56:4d:65:f3:d2:73:43:2a:aa:01:1e:bb:b4:67:52:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=18FF35C171D4F166DAA881DF1A37F36C1742F8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:ac:85:c3:15:c9:ee:ef:50:04:af:2c:31:
                    8d:4d:7e:70:17:08:c7:f3:45:0f:b6:39:13:2e:d2:
                    8f:49:dc:98:63:3f:db:32:31:28:a0:78:65:04:fe:
                    0c:62:b9:66:2d:22:a8:60:2c:63:8a:c8:de:e0:e8:
                    56:00:34:16:02:5c:93:29:25:8e:6f:6d:e4:ff:22:
                    13:ad:b8:6f:37:9a:6d:ba:5f:34:49:8d:35:f6:2d:
                    c1:02:6b:ca:bc:46:d7:e9:cc:28:33:c5:d4:26:4e:
                    67:1c:14:8f:b0:17:74:f2:05:45:19:05:da:1d:e7:
                    d0:ff:81:e8:bc:87:90:69:5f:be:73:50:2b:a0:28:
                    be:47:6b:5e:b0:ef:0e:63:8f:9c:66:9a:84:95:e2:
                    15:c0:52:dd:c6:56:59:57:1f:2d:7d:a0:d4:ff:d5:
                    5b:44:23:13:9e:a5:14:0f:22:f7:9f:8f:91:8e:ab:
                    2e:d6:e2:44:1b:ec:41:5a:92:57:62:a6:db:4d:46:
                    a1:f1:80:ff:b9:a9:41:33:d0:19:4e:1b:15:60:0c:
                    c4:4d:c9:b8:e8:92:7a:8e:81:92:8f:b5:af:2b:0b:
                    d3:72:75:a2:04:32:24:97:a4:ae:0e:73:01:94:36:
                    5a:e4:c9:2e:0b:3e:b1:9a:1b:be:35:4a:18:05:1a:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FF:35:C1:71:D4:F1:66:DA:A8:81:DF:1A:37:F3:6C:17:42:F8:EB
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:82:ea:bf:5f:06:19:bb:8b:92:69:ae:76:ac:ed:63:66:a4:
         76:c6:a5:54:4d:43:2a:42:d8:89:0c:03:a0:f2:97:22:64:8b:
         a2:af:1e:89:b3:f9:82:05:33:a6:00:3c:48:f3:18:80:23:3e:
         94:a3:4b:06:89:0c:6a:8d:84:a0:36:9b:ba:2f:7c:b3:eb:62:
         9c:b6:39:46:37:71:27:4b:c0:f0:84:a2:b5:65:4d:5a:3a:92:
         f4:9e:7c:0d:5c:3d:ab:1e:f0:f5:41:8e:54:87:9a:49:6c:35:
         39:e8:51:b2:33:da:32:29:b5:9c:23:9d:7d:82:58:0c:e0:a7:
         5a:c2:16:c1:59:16:b8:e9:f8:f7:f3:26:ef:dc:b4:14:0e:e2:
         3e:22:aa:bb:4a:8b:04:1c:11:97:06:00:96:c2:1b:2e:fd:ab:
         84:30:79:03:89:ae:91:34:90:41:f0:8d:dc:f6:56:21:17:03:
         6a:cf:8a:c1:e3:80:eb:a8:10:81:2f:79:c3:c6:2b:0b:bd:be:
         bf:49:da:bc:68:ee:2a:98:d2:56:b2:c2:da:26:8f:9e:63:d0:
         f9:a8:2a:56:93:43:a0:5b:ee:76:1d:04:38:da:d8:18:ff:a5:
         63:f1:84:3b:ab:c3:0b:ba:c4:71:24:c5:0b:a7:dd:cf:ed:d5:
         d9:f0:c3:ad
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUK6nMpFZNZfPSc0MqqgEeu7RnUjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCNDVFODZBQkUzOUFCQTFENUU2MTdENEE4QkJDRjM0
ODUxMEVFODAeFw0yNDA0MDUwMTQxMzNaFw0yNTA0MDQwMTQ2MzNaMDMxMTAvBgNV
BAMTKDE4RkYzNUMxNzFENEYxNjZEQUE4ODFERjFBMzdGMzZDMTc0MkY4RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYqyFwxXJ7u9QBK8sMY1NfnAX
CMfzRQ+2ORMu0o9J3JhjP9syMSigeGUE/gxiuWYtIqhgLGOKyN7g6FYANBYCXJMp
JY5vbeT/IhOtuG83mm26XzRJjTX2LcECa8q8RtfpzCgzxdQmTmccFI+wF3TyBUUZ
Bdod59D/gei8h5BpX75zUCugKL5Ha16w7w5jj5xmmoSV4hXAUt3GVllXHy19oNT/
1VtEIxOepRQPIvefj5GOqy7W4kQb7EFakldipttNRqHxgP+5qUEz0BlOGxVgDMRN
ybjoknqOgZKPta8rC9NydaIEMiSXpK4OcwGUNlrkyS4LPrGaG741ShgFGjyXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGP81wXHU8WbaqIHfGjfzbBdC+OswHwYDVR0j
BBgwFoAUcLRehqvjmrodXmF9Sou880hRDugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmt2eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdS
ekovMS83MEI0NUU4NkFCRTM5QUJBMUQ1RTYxN0Q0QThCQkNGMzQ4NTEwRUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQjQ1RTg2QUJFMzlBQkEx
RDVFNjE3RDRBOEJCQ0YzNDg1MTBFRTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZrdnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzEv
MzEzMzM4MmUzMjMwMzQyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMuDANBgkqhkiG9w0BAQsFAAOCAQEAaYLq
v18GGbuLkmmudqztY2akdsalVE1DKkLYiQwDoPKXImSLoq8eibP5ggUzpgA8SPMY
gCM+lKNLBokMao2EoDabui98s+tinLY5RjdxJ0vA8ISitWVNWjqS9J58DVw9qx7w
9UGOVIeaSWw1OehRsjPaMim1nCOdfYJYDOCnWsIWwVkWuOn49/Mm79y0FA7iPiKq
u0qLBBwRlwYAlsIbLv2rhDB5A4mukTSQQfCN3PZWIRcDas+KweOA66gQgS95w8Yr
C72+v0navGjuKpjSVrLC2iaPnmPQ+agqVpNDoFvudh0EONrYGP+lY/GEO6vDC7rE
cSTFC6fdz+3V2fDDrQ==
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:08 2024 by rpki-client on console-ams.rpki-client.org