Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3232203d3e203631383632.roa
File:                     3133382e3138352e3137322e302f32322d3232203d3e203631383632.roa (raw, json)
Hash identifier:          5Ve6LkdZKM8EF24CLKA9/tcGgIWRv9YVMeQ5z3or5lY=
Subject key identifier:   13:41:64:80:5F:3E:7A:83:02:F1:A7:72:21:F8:97:2F:01:15:17:62
Certificate issuer:       /CN=DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B
Certificate serial:       149DB6C0E3F9A068F22817D4E28AD26AA89A743F
Authority key identifier: DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3232203d3e203631383632.roa
Signing time:             Tue 24 Sep 2024 18:03:13 +0000
ROA not before:           Tue 24 Sep 2024 17:58:13 +0000
ROA not after:            Tue 23 Sep 2025 18:03:13 +0000
asID:                     61862
IP address blocks:        138.185.172.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9d:b6:c0:e3:f9:a0:68:f2:28:17:d4:e2:8a:d2:6a:a8:9a:74:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B
        Validity
            Not Before: Sep 24 17:58:13 2024 GMT
            Not After : Sep 23 18:03:13 2025 GMT
        Subject: CN=134164805F3E7A8302F1A77221F8972F01151762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:92:ba:c6:cb:9a:f6:fa:39:b3:5f:14:b6:
                    88:a1:3f:fa:e0:7b:82:83:8d:df:56:eb:94:b2:10:
                    a1:f7:2a:d0:0d:bf:e5:53:a8:0d:d8:b6:fe:23:1f:
                    1b:56:ec:63:90:6b:d4:6b:c4:be:eb:0d:f5:67:17:
                    7d:a0:d4:c2:96:28:b8:41:44:6c:d1:da:5d:fe:e6:
                    f6:94:8c:58:8c:ed:c3:a3:5a:77:c9:2d:67:e1:e3:
                    56:9d:8d:71:ec:cf:75:a1:cd:4a:2b:21:0f:6d:79:
                    95:d5:85:9b:4a:f4:e1:ff:ef:5e:62:61:8c:d7:a2:
                    fd:d7:f5:4b:9a:93:5f:37:83:7e:9d:b5:f3:99:f2:
                    8e:91:fd:28:41:08:27:d8:95:55:da:82:56:45:72:
                    10:7a:7d:65:41:e2:3e:c6:bc:d9:e9:4f:60:1d:af:
                    a8:bc:09:12:00:de:dd:5c:a3:89:41:23:d8:d4:83:
                    17:91:40:b3:5b:2e:5f:f4:71:83:2e:2e:ad:de:6c:
                    46:a8:2a:0f:89:83:7a:0c:9a:6e:76:63:27:81:2d:
                    b9:2c:77:91:04:12:58:dc:a6:e9:0d:7f:c7:bb:c2:
                    31:1c:5e:71:db:8d:0e:41:ed:8b:7d:4f:9a:75:10:
                    b1:92:af:42:66:97:db:40:34:78:3c:30:c0:48:4a:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:64:80:5F:3E:7A:83:02:F1:A7:72:21:F8:97:2F:01:15:17:62
            X509v3 Authority Key Identifier:
                keyid:DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3232203d3e203631383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:74:4a:6a:c7:76:81:2d:0e:a8:f2:63:ad:5e:2f:b8:12:4b:
         07:d5:6a:1c:5e:01:8b:ab:4c:df:56:4b:93:5f:b0:3d:29:10:
         53:a7:27:a5:aa:37:2e:50:2b:3b:2f:77:99:a2:6b:bb:6e:c6:
         c4:40:aa:1e:aa:e9:0d:b6:cf:e0:c4:05:16:c2:8a:f5:24:b7:
         e5:a2:5b:5b:d2:f0:61:1b:da:6f:c9:1a:e9:8f:1e:7f:df:28:
         12:35:cb:10:57:ca:b0:a8:16:4e:9b:47:a6:86:dd:2a:27:58:
         7f:78:cb:aa:c1:19:03:ff:98:cc:a6:c1:bd:db:08:a1:54:03:
         55:ea:e7:53:73:5c:4f:51:64:b0:08:76:19:a0:ff:60:9f:74:
         af:57:75:47:a7:b5:ab:ab:cd:fe:d9:2f:bc:65:a0:40:c6:70:
         d4:0a:31:13:38:74:b1:c3:a3:67:d6:c2:67:e4:15:07:92:50:
         1b:87:3c:a8:3b:14:7e:ff:38:88:c4:ad:72:72:6e:8d:56:a0:
         1a:a6:90:1d:c4:36:df:a4:ea:af:2f:1f:57:cb:b0:ea:75:e9:
         c7:2f:95:ba:b4:4e:cd:fe:09:f7:24:4b:31:73:1b:13:f0:f7:
         69:ad:f0:29:43:11:c5:7e:40:64:4b:a5:42:fb:5e:0e:f1:48:
         fe:5f:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 12:47:48 2024 by rpki-client on console-fra.rpki-client.org