Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa
File:                     3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa (raw, json)
Hash identifier:          gO1mVlWVztiZ0pDuONgUCS2lbLlgV08bdEu1WXx/+xw=
Subject key identifier:   BD:F4:3D:F5:5C:E8:7F:E5:54:B4:4A:7D:8D:9D:00:C0:A9:2F:E8:59
Certificate issuer:       /CN=29D3E0DFE7A631ED085D28B245B431803B99F625
Certificate serial:       476AFFA843B335460C509E0B7166BE54ABF81838
Authority key identifier: 29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa
Signing time:             Thu 04 Apr 2024 16:57:02 +0000
ROA not before:           Thu 04 Apr 2024 16:52:02 +0000
ROA not after:            Thu 03 Apr 2025 16:57:02 +0000
asID:                     264293
IP address blocks:        138.121.122.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:ff:a8:43:b3:35:46:0c:50:9e:0b:71:66:be:54:ab:f8:18:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D3E0DFE7A631ED085D28B245B431803B99F625
        Validity
            Not Before: Apr  4 16:52:02 2024 GMT
            Not After : Apr  3 16:57:02 2025 GMT
        Subject: CN=BDF43DF55CE87FE554B44A7D8D9D00C0A92FE859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:82:45:49:f2:f3:4c:8d:d3:13:3a:ff:b1:
                    8b:f6:7f:f5:12:7b:26:62:4a:24:76:eb:2d:b9:92:
                    d2:e0:83:68:3e:1d:cb:9a:d2:7b:77:dd:7c:f6:04:
                    d1:36:d7:b6:8e:43:b0:82:de:3a:ac:bb:3c:f7:59:
                    4e:11:30:ad:65:cf:d4:c9:4f:45:b4:a9:51:cd:e5:
                    82:28:25:e8:8e:d5:f4:40:56:b8:e0:ac:10:2d:56:
                    7c:4b:1d:b5:8d:7f:49:87:8b:d0:9b:4b:ed:18:f8:
                    78:04:20:53:8d:68:df:e2:60:bc:86:f4:f0:11:57:
                    0e:82:b9:15:83:0b:03:d0:62:8c:68:75:90:30:4b:
                    35:68:f7:cc:43:14:56:ca:96:62:b5:c8:fd:ba:47:
                    ae:ee:aa:fd:46:54:2c:84:21:37:49:3b:66:e9:74:
                    ba:f9:4a:98:02:b0:89:65:91:f5:4d:be:2c:cc:aa:
                    ea:42:aa:e4:c1:a4:e1:db:11:05:e9:a3:fd:9b:e9:
                    dd:37:c2:e3:8f:07:cf:15:bf:79:33:c5:75:f0:b9:
                    cb:1e:97:10:4e:ae:69:fd:13:7b:83:d9:18:64:ea:
                    ea:0e:d8:75:21:c6:33:ee:fe:74:18:3f:fe:08:4b:
                    b3:87:62:b1:64:ce:dd:af:37:cb:b1:ef:5f:18:b0:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F4:3D:F5:5C:E8:7F:E5:54:B4:4A:7D:8D:9D:00:C0:A9:2F:E8:59
            X509v3 Authority Key Identifier:
                keyid:29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/29D3E0DFE7A631ED085D28B245B431803B99F625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132322e302f32332d3233203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:04:37:b2:46:ed:40:39:50:a3:db:36:86:f5:5c:62:03:40:
         58:a6:cd:bc:93:eb:fd:98:f6:7d:3a:5c:fc:11:b6:86:41:5f:
         cf:bb:f5:34:46:db:7a:ce:d1:46:00:a4:70:f6:3c:5e:5e:54:
         52:cd:48:2e:e6:76:db:8b:11:6d:f7:52:33:c0:42:d6:24:67:
         34:28:4e:45:cc:66:c9:f3:05:14:e1:e4:9d:75:de:b9:ac:2c:
         c4:ae:24:d8:27:6f:be:27:9a:b4:a2:cc:50:20:a3:e1:24:17:
         6f:ab:4b:54:74:2c:90:d0:20:80:19:68:15:90:bb:06:19:b3:
         7d:84:3b:70:73:fa:08:95:b1:b3:8b:7b:64:3c:65:01:e8:7c:
         9f:a7:1a:6d:e4:d1:9b:4c:4f:03:61:bf:d5:ea:be:6c:43:9a:
         19:04:47:58:ba:16:52:76:dd:fb:d7:61:8c:82:e8:5d:69:ae:
         4e:36:c7:ef:47:a8:a4:69:55:ea:f5:32:d5:0f:99:b0:25:d0:
         13:89:c3:15:6e:7c:a3:2d:1d:ba:ae:10:53:9b:4b:02:62:bc:
         e3:a0:99:37:9e:6f:2c:cf:f9:8d:1f:c8:ca:bf:ab:ed:54:7a:
         82:36:ec:ba:68:67:68:79:53:6f:cf:b5:e1:7c:12:e2:62:2c:
         94:19:ca:9c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR2r/qEOzNUYMUJ4LcWa+VKv4GDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlEM0UwREZFN0E2MzFFRDA4NUQyOEIyNDVCNDMxODAz
Qjk5RjYyNTAeFw0yNDA0MDQxNjUyMDJaFw0yNTA0MDMxNjU3MDJaMDMxMTAvBgNV
BAMTKEJERjQzREY1NUNFODdGRTU1NEI0NEE3RDhEOUQwMEMwQTkyRkU4NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWoJFSfLzTI3TEzr/sYv2f/US
eyZiSiR26y25ktLgg2g+Hcua0nt33Xz2BNE217aOQ7CC3jqsuzz3WU4RMK1lz9TJ
T0W0qVHN5YIoJeiO1fRAVrjgrBAtVnxLHbWNf0mHi9CbS+0Y+HgEIFONaN/iYLyG
9PARVw6CuRWDCwPQYoxodZAwSzVo98xDFFbKlmK1yP26R67uqv1GVCyEITdJO2bp
dLr5SpgCsIllkfVNvizMqupCquTBpOHbEQXpo/2b6d03wuOPB88Vv3kzxXXwucse
lxBOrmn9E3uD2Rhk6uoO2HUhxjPu/nQYP/4IS7OHYrFkzt2vN8ux718YsCjhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvfQ99Vzof+VUtEp9jZ0AwKkv6FkwHwYDVR0j
BBgwFoAUKdPg3+emMe0IXSiyRbQxgDuZ9iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW
RmgvMS8yOUQzRTBERkU3QTYzMUVEMDg1RDI4QjI0NUI0MzE4MDNCOTlGNjI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RDNFMERGRTdBNjMxRUQw
ODVEMjhCMjQ1QjQzMTgwM0I5OUY2MjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dha3R0Q2syaktDMnlxU2d6aXpySnJyWTVhZ3pzWjJ3N0JRcXZrWEZYVkZoLzEv
MzEzMzM4MmUzMTMyMzEyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp5ejANBgkqhkiG9w0BAQsFAAOCAQEArwQ3
skbtQDlQo9s2hvVcYgNAWKbNvJPr/Zj2fTpc/BG2hkFfz7v1NEbbes7RRgCkcPY8
Xl5UUs1ILuZ224sRbfdSM8BC1iRnNChORcxmyfMFFOHknXXeuawsxK4k2Cdvviea
tKLMUCCj4SQXb6tLVHQskNAggBloFZC7BhmzfYQ7cHP6CJWxs4t7ZDxlAeh8n6ca
beTRm0xPA2G/1eq+bEOaGQRHWLoWUnbd+9dhjILoXWmuTjbH70eopGlV6vUy1Q+Z
sCXQE4nDFW58oy0duq4QU5tLAmK846CZN55vLM/5jR/Iyr+r7VR6gjbsumhnaHlT
b8+14XwS4mIslBnKnA==
-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org