Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa
File:                     3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa (raw, json)
Hash identifier:          3M66R0y+pJTifqM4Ua2rispsvMcj2v18lObkwQDfDQY=
Subject key identifier:   8F:0E:D5:CE:95:AD:4E:F6:30:0D:DE:93:02:89:0B:89:FA:B2:3D:2B
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       13B903DA0A219BA165A2AB5102C047A21A2394E4
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        138.204.184.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b9:03:da:0a:21:9b:a1:65:a2:ab:51:02:c0:47:a2:1a:23:94:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=8F0ED5CE95AD4EF6300DDE9302890B89FAB23D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:85:c7:e5:01:d0:80:58:52:2a:9e:e7:5f:
                    c0:fa:04:7a:4a:f7:80:03:82:77:87:aa:0e:0e:32:
                    b9:be:96:1c:3c:0d:d5:70:83:a9:85:eb:7e:2a:37:
                    84:db:40:7c:57:eb:a1:cb:d8:0b:b6:47:8f:41:29:
                    aa:cd:c4:ff:d2:4c:44:7b:a2:fc:ce:29:e5:32:56:
                    b2:aa:36:10:93:03:86:ef:b6:47:c0:e2:67:9b:e2:
                    01:63:fb:58:13:97:17:2a:5b:8d:22:b4:8c:e2:1a:
                    93:cb:e7:e4:11:47:21:da:ce:b1:15:36:a5:c3:52:
                    d9:83:2a:16:d2:85:35:6e:b5:4a:a7:9f:ef:b7:7c:
                    be:32:f6:26:72:a8:fe:6c:4a:41:34:a6:cc:ee:bc:
                    4a:36:ba:7d:17:aa:58:99:57:aa:3a:b3:bd:c2:fc:
                    64:30:48:8c:cc:e0:28:c1:02:ab:69:02:db:ad:f1:
                    2e:87:e9:9e:e4:c2:2e:b2:87:a8:7c:4e:ad:3f:fa:
                    31:f4:b3:cc:3a:05:c3:51:45:3c:5b:8e:52:4a:b6:
                    ab:89:0a:ee:48:79:70:b3:70:ce:6c:b2:6d:e5:68:
                    4c:c4:bc:85:12:ae:97:b6:e4:2f:70:bc:d8:4b:37:
                    22:b6:9b:85:c2:b5:81:92:31:a9:d2:7a:77:c5:4d:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0E:D5:CE:95:AD:4E:F6:30:0D:DE:93:02:89:0B:89:FA:B2:3D:2B
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:f8:ed:c1:9e:34:9b:73:18:f7:a4:84:b5:7b:42:d1:0a:
         d8:e9:c1:66:5e:e4:bb:32:22:94:f9:aa:d9:94:5d:9b:1e:61:
         31:17:6a:37:2b:e0:d2:7b:10:62:7b:39:19:1f:5b:94:d8:80:
         06:f6:73:4c:0b:18:4e:e2:48:f1:c9:71:5a:9d:32:83:df:b9:
         b3:90:b3:b1:47:9a:2e:85:e6:73:eb:db:a4:d8:0b:ad:6e:14:
         1e:44:03:86:e4:f3:db:b0:4e:f0:0d:4e:90:a3:95:4f:3c:f8:
         05:00:52:8e:36:02:5c:a0:cd:84:0d:d2:84:7a:c3:cc:53:73:
         2b:2e:e1:2f:6c:fa:b9:ec:81:b8:f5:38:21:62:f3:f4:4f:bb:
         8d:c8:4c:0c:dd:06:6a:ce:fc:ec:07:a9:d7:f9:1c:01:76:85:
         00:b0:13:d4:14:07:1d:46:74:42:ec:ab:0e:d3:52:ae:1d:2c:
         b5:6d:eb:6d:5f:12:e7:70:da:25:54:0f:33:d4:3d:51:81:b8:
         a8:ae:a2:78:05:f9:44:5d:8a:ea:65:e5:94:af:55:df:12:f7:
         c0:e2:2e:07:08:82:9d:53:1f:e1:aa:99:69:ca:2f:54:0a:7a:
         99:3f:de:03:59:8a:b7:37:01:af:23:10:28:7b:e0:53:aa:a9:
         63:9d:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:08 2024 by rpki-client on console-ams.rpki-client.org