Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
File:                     3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa (raw, json)
Hash identifier:          ERW97DCwfnt8ryx+ZumpSOKaxaWtW6lfGPQ4/Ilvnro=
Subject key identifier:   39:8F:A3:F4:BB:5D:10:F9:F3:51:D8:54:12:48:8C:C6:56:E8:DA:48
Certificate issuer:       /CN=29D3E0DFE7A631ED085D28B245B431803B99F625
Certificate serial:       2A000EFDD635E8810731904885E2A9AD0610A708
Authority key identifier: 29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
Signing time:             Thu 04 Apr 2024 16:57:03 +0000
ROA not before:           Thu 04 Apr 2024 16:52:03 +0000
ROA not after:            Thu 03 Apr 2025 16:57:03 +0000
asID:                     264293
IP address blocks:        138.121.120.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:00:0e:fd:d6:35:e8:81:07:31:90:48:85:e2:a9:ad:06:10:a7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D3E0DFE7A631ED085D28B245B431803B99F625
        Validity
            Not Before: Apr  4 16:52:03 2024 GMT
            Not After : Apr  3 16:57:03 2025 GMT
        Subject: CN=398FA3F4BB5D10F9F351D85412488CC656E8DA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:84:71:8d:f7:e2:4a:49:2f:84:89:3b:f5:
                    56:03:94:95:9a:bc:ae:c0:1a:bc:91:88:44:c5:3c:
                    02:4f:6e:2c:46:d4:32:07:e7:78:e3:e0:c8:a0:de:
                    6f:d7:01:f1:aa:2c:99:74:d4:da:a4:d7:24:c2:1a:
                    e9:32:91:62:3d:9c:41:dc:aa:e9:2a:bc:d8:7d:04:
                    6b:a9:ae:97:27:16:0d:4f:56:08:37:e3:00:ac:5f:
                    6c:2b:cc:9b:b9:0b:df:cc:71:e1:60:31:08:8a:57:
                    27:ef:08:60:ad:a2:66:d9:5c:e6:62:e7:3a:ad:e8:
                    a5:19:6d:6d:59:cc:81:0d:45:13:f8:55:e4:1e:3b:
                    5c:9b:04:dd:e6:bb:f8:b1:76:bc:cc:2f:2b:36:4d:
                    78:3e:91:84:03:70:59:05:8e:96:2d:a4:75:78:94:
                    d6:3f:18:47:77:b6:e6:f4:12:b7:cf:24:ff:12:3e:
                    3b:52:ce:27:e0:29:e7:d2:be:3f:dc:0a:5d:2b:1b:
                    1e:9c:1f:d8:de:a7:e5:13:18:06:eb:7a:72:33:09:
                    5a:f4:53:12:65:f6:ed:9f:a0:35:74:4f:47:e7:70:
                    5c:70:b1:11:3a:77:a6:a1:b0:d9:56:08:3c:4c:bc:
                    38:42:21:39:1b:dd:24:71:4e:71:d0:36:d0:85:65:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8F:A3:F4:BB:5D:10:F9:F3:51:D8:54:12:48:8C:C6:56:E8:DA:48
            X509v3 Authority Key Identifier:
                keyid:29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/29D3E0DFE7A631ED085D28B245B431803B99F625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:05:09:f5:98:27:c7:32:ac:d1:55:2b:84:6d:68:8e:f6:a2:
         5f:62:c1:f6:8a:80:70:5f:5e:9f:ff:6f:ab:05:be:eb:fe:eb:
         f1:11:28:02:58:80:c1:2e:39:ee:75:ab:f4:b0:08:15:87:d9:
         11:9a:4a:a6:fb:86:5e:75:4a:a7:fd:1a:ce:78:40:11:d9:37:
         f7:94:72:8d:fe:d7:2b:8e:1e:62:6b:cb:7c:01:12:9c:ac:cc:
         ef:53:04:2f:4f:dc:80:67:b1:f7:81:25:f9:c6:3a:50:2a:cb:
         99:90:62:3e:37:53:3a:bf:bc:c1:ad:7d:c9:45:03:2c:fb:2e:
         17:3f:a0:a4:62:63:ff:1f:85:4f:ee:a3:6a:79:90:8a:18:17:
         1e:48:27:5c:a3:26:bb:90:68:4a:5e:31:b1:30:f9:cb:05:8d:
         2e:7b:85:e9:e5:52:09:c9:0f:5c:45:25:66:f0:01:2d:46:fa:
         aa:b4:af:16:fa:bc:18:a3:1b:c5:b3:f1:c9:e9:d8:7f:d2:58:
         55:ce:f7:61:7b:8e:a9:0f:e0:99:bf:c9:f2:86:aa:2e:95:68:
         0a:55:6d:87:4e:51:75:75:2a:0b:a0:70:21:98:35:c2:03:23:
         21:eb:41:6e:05:5e:e0:93:ed:02:36:10:82:69:03:d1:fd:f9:
         a7:54:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org