Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
File:                     3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          pSwtBSWWbF8/KW9VRTxRSUz4ScNF4vz8gDyrYub4SY8=
Subject key identifier:   52:1A:10:65:68:A9:5C:64:CA:21:EE:9A:C4:F8:0E:AB:1F:F1:01:FA
Certificate issuer:       /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial:       52D48F8C486EB5F0EBC8D82D7ABC07111EEFE6
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
Signing time:             Wed 12 Jun 2024 13:15:04 +0000
ROA not before:           Wed 12 Jun 2024 13:10:04 +0000
ROA not after:            Wed 11 Jun 2025 13:15:04 +0000
asID:                     262272
IP address blocks:        138.36.180.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:8f:8c:48:6e:b5:f0:eb:c8:d8:2d:7a:bc:07:11:1e:ef:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
        Validity
            Not Before: Jun 12 13:10:04 2024 GMT
            Not After : Jun 11 13:15:04 2025 GMT
        Subject: CN=521A106568A95C64CA21EE9AC4F80EAB1FF101FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:f0:e8:bc:3d:0f:8d:9b:c3:a9:68:3a:7a:
                    ae:84:fe:7d:53:4d:59:d5:5d:16:53:08:5c:cd:a9:
                    aa:9a:cf:40:ba:80:e7:94:19:95:7f:73:8e:78:f3:
                    a0:2d:ba:2e:be:3d:0b:97:9f:df:ab:cf:8c:34:ef:
                    7a:3b:1b:be:67:49:63:96:24:94:4d:c9:14:34:d8:
                    57:3a:39:88:15:6f:21:7a:bd:39:6e:4d:7f:ad:51:
                    e9:66:e7:65:d7:45:6c:ba:d8:4b:8f:4e:d4:fe:7d:
                    43:37:a6:7d:98:de:7a:65:f6:09:76:09:a1:5a:bf:
                    74:ec:7d:79:57:9f:b8:72:65:01:22:ac:c3:1b:08:
                    8f:0b:ad:d7:7f:7a:d9:ff:36:21:fe:cf:11:3b:3a:
                    ed:70:6b:c3:4e:da:a6:4d:53:41:a1:bf:48:32:31:
                    61:95:75:3d:c8:67:36:93:70:17:c1:50:6d:cc:af:
                    5b:32:ca:3b:f4:47:0c:11:50:d8:79:e7:a1:ec:aa:
                    66:92:e2:f9:c0:1f:99:7d:9e:24:a7:9d:a0:e6:7d:
                    33:18:9b:d7:b6:7a:bb:55:f2:2a:4a:3a:ad:82:25:
                    9b:21:3b:84:36:8a:e4:b2:2c:d1:da:da:72:b3:49:
                    ef:a4:1b:de:35:45:94:a8:ad:bb:c8:bf:09:37:6c:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1A:10:65:68:A9:5C:64:CA:21:EE:9A:C4:F8:0E:AB:1F:F1:01:FA
            X509v3 Authority Key Identifier:
                keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:14:8c:d4:84:ee:12:cf:b8:92:0a:7f:5b:76:78:2d:88:dd:
         e5:4f:57:82:f3:93:2a:f9:ce:a2:26:f2:f3:71:93:57:f4:f9:
         e3:ff:b9:02:91:82:e9:4c:91:8a:c6:42:f6:c7:b7:10:d5:4a:
         fc:6e:4f:54:38:38:0b:d0:93:93:7d:67:9f:59:28:77:c3:6c:
         7d:0a:f3:62:1a:4e:37:14:94:6c:08:16:e8:0d:f6:22:80:31:
         f5:5e:cb:73:5c:61:bd:42:75:b7:03:e7:f5:28:ce:37:31:31:
         f5:2f:12:bb:19:9a:cd:c2:a6:d8:e1:6c:2d:b4:99:a2:ec:54:
         9a:75:b2:f4:4a:a2:4c:92:ff:9a:f8:99:f3:d3:2b:41:e5:6a:
         41:af:9c:94:1a:4b:c0:35:25:2e:0c:a6:dc:85:5a:92:b4:40:
         ed:7f:6b:ed:08:09:c8:7f:41:46:67:94:0a:46:ba:2e:86:61:
         2e:9b:c7:41:04:bd:23:b6:81:66:aa:42:85:c6:01:63:3b:5d:
         61:80:9e:71:78:54:31:e2:46:ee:26:aa:d1:d5:31:38:56:58:
         33:9f:15:1b:f0:61:31:16:2a:9b:cc:09:43:2c:24:45:02:fd:
         dc:f7:09:d7:bc:85:0b:83:3e:c2:3e:97:94:53:93:1b:66:70:
         51:bc:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:40:59 2024 by rpki-client on console-ams.rpki-client.org