Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa
File:                     3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (raw, json)
Hash identifier:          lngcDtHaah2NQpllovr1gDdVTj69stQprV0vnuQWWqM=
Subject key identifier:   4F:4E:C6:30:07:22:B1:B7:09:B5:8A:96:BA:0C:94:FD:F1:6F:42:6F
Certificate issuer:       /CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
Certificate serial:       518BBDC8F569EEE724AB269B6E7D539CA3DF13F4
Authority key identifier: BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa
Signing time:             Mon 20 May 2024 19:10:23 +0000
ROA not before:           Mon 20 May 2024 19:05:23 +0000
ROA not after:            Mon 19 May 2025 19:10:23 +0000
asID:                     263947
IP address blocks:        138.255.15.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8b:bd:c8:f5:69:ee:e7:24:ab:26:9b:6e:7d:53:9c:a3:df:13:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
        Validity
            Not Before: May 20 19:05:23 2024 GMT
            Not After : May 19 19:10:23 2025 GMT
        Subject: CN=4F4EC6300722B1B709B58A96BA0C94FDF16F426F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:e4:8e:01:e1:88:07:fe:4a:ad:a3:28:66:
                    56:e3:54:b7:f2:3f:d8:85:50:92:e1:01:f5:ef:30:
                    8e:73:67:56:1c:55:86:2d:09:30:49:b8:13:52:81:
                    f2:5b:89:46:4b:46:e9:d8:ef:67:f8:f5:59:40:84:
                    68:cd:b3:8a:6e:ee:20:64:2e:3e:80:ba:d9:77:49:
                    3f:da:23:81:a5:3b:c6:c0:65:cd:5e:c6:46:2b:3a:
                    84:eb:e8:c7:e9:d6:9d:cf:a5:af:23:e2:92:6c:61:
                    96:aa:d4:87:c9:c6:db:87:81:54:16:fc:11:eb:c7:
                    9a:06:43:49:dd:d4:d9:16:4f:46:b9:e2:c6:d1:5b:
                    28:7b:32:50:2c:43:f1:0b:e7:19:10:e3:7b:10:a5:
                    9e:04:cc:0b:4c:ef:a5:a7:91:c8:7c:90:f1:b2:b7:
                    f4:f0:cf:36:81:59:47:18:88:75:1c:2a:5a:03:60:
                    b9:33:42:9a:df:6d:66:5d:c1:4f:c8:d7:a6:1f:a0:
                    e1:29:ba:ae:60:6e:59:6c:51:47:98:ed:74:1b:d0:
                    9b:de:be:61:e0:6a:d9:a6:e8:d0:b0:ae:c6:e5:2b:
                    c4:f2:d4:8c:0b:a7:17:ba:1d:49:83:98:c5:fd:04:
                    41:68:71:2b:f6:27:e0:42:d4:f0:82:24:63:98:a0:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:C6:30:07:22:B1:B7:09:B5:8A:96:BA:0C:94:FD:F1:6F:42:6F
            X509v3 Authority Key Identifier:
                keyid:BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:d6:8e:22:17:36:99:00:35:e2:bc:fe:44:fb:da:d0:86:
         75:01:30:d2:a5:e7:ac:3a:1d:66:5f:62:5b:b0:06:b8:7c:94:
         09:ed:1c:a7:5b:31:0b:83:12:8a:e5:03:e5:8f:ea:c7:e1:11:
         69:c7:56:90:fa:33:90:7b:d3:4e:1e:6e:8f:bd:9c:de:70:f7:
         00:04:89:7b:a8:6c:7a:2b:43:01:49:4e:d2:c7:ed:92:6c:4b:
         57:81:15:e7:e5:4f:5a:2b:0c:62:a3:4e:fa:8c:33:74:1d:b3:
         1f:5d:39:c6:bc:83:a3:6b:e4:7e:1d:5e:b3:32:dc:59:c7:8e:
         88:74:1f:d1:d8:ac:af:fe:f6:bd:03:af:31:cb:86:13:54:e1:
         ee:61:5b:fa:cf:79:a0:42:fb:5d:5f:6e:b0:c7:07:8c:b2:87:
         02:a9:6c:0e:cf:99:f9:a3:ee:d7:62:8e:84:5e:c2:23:e1:f6:
         17:50:b4:90:9f:2a:ca:7c:4d:6c:bb:cf:ef:e2:d0:6e:bc:6e:
         25:a0:e9:45:7b:8d:de:7e:7c:e1:b9:72:cf:0e:14:4e:b6:96:
         c3:b6:3e:37:60:4f:83:31:6f:d4:3d:cf:f2:f7:80:bf:90:f7:
         2a:cb:a4:f0:f3:65:5e:f2:bf:3f:d2:ad:5d:bf:d6:71:6d:8c:
         04:0b:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:44 2024 by rpki-client on console-ams.rpki-client.org