Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32332d3233203d3e203631373236.roa
File:                     3133312e37322e39362e302f32332d3233203d3e203631373236.roa (raw, json)
Hash identifier:          E2D73K5Cl1TQbsuWJxxvzF19udvIjC66PMXzr6Co6BY=
Subject key identifier:   25:6B:2E:15:93:3A:19:10:A3:60:FD:BE:55:35:0C:C3:E1:3A:9B:E7
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       6F544011C2336AC8892880D64000599BA342920E
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32332d3233203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:43 +0000
ROA not before:           Tue 06 Feb 2024 18:17:43 +0000
ROA not after:            Tue 04 Feb 2025 18:22:43 +0000
asID:                     61726
IP address blocks:        131.72.96.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:54:40:11:c2:33:6a:c8:89:28:80:d6:40:00:59:9b:a3:42:92:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:43 2024 GMT
            Not After : Feb  4 18:22:43 2025 GMT
        Subject: CN=256B2E15933A1910A360FDBE55350CC3E13A9BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:ed:d2:cd:a6:70:99:bd:d4:58:5a:b1:83:
                    52:27:63:89:b9:51:32:57:95:01:4f:ec:86:4b:73:
                    4a:4f:dd:d1:eb:ad:46:05:c4:b8:6f:a5:aa:6d:a8:
                    fb:ed:57:7b:08:d7:af:12:2b:3d:3c:a8:48:b5:02:
                    31:94:9f:e3:28:06:0f:d6:ad:54:85:13:ae:ee:00:
                    6d:9a:e9:df:b4:87:0e:01:5b:b2:00:d6:1a:af:7e:
                    6d:e6:41:ba:eb:7c:57:e7:fd:bb:f0:ca:71:6c:ed:
                    67:a2:a3:91:e5:26:0e:79:b7:d3:4b:f6:e2:9c:ad:
                    c1:da:27:53:84:0e:ca:0c:d3:b8:6e:23:2f:e5:4b:
                    4f:12:5e:df:96:1e:40:53:e5:36:d6:c4:4e:06:ee:
                    69:4f:9a:15:8f:6f:e8:e6:b6:3a:67:02:f8:4f:c7:
                    8b:32:8d:b3:c0:57:04:07:96:a7:aa:14:80:f9:2a:
                    52:49:86:24:6b:a2:15:90:52:e9:75:19:4a:f2:4b:
                    8b:ba:aa:14:f0:b9:16:33:da:e0:58:b3:3c:d8:9c:
                    d6:61:ae:6f:e3:96:85:3a:86:65:b4:48:d6:f8:30:
                    84:8b:f2:62:bb:8e:2c:5d:d6:29:7c:69:59:0e:aa:
                    b9:89:65:6b:b8:45:bc:78:aa:9b:36:e0:af:12:10:
                    74:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:2E:15:93:3A:19:10:A3:60:FD:BE:55:35:0C:C3:E1:3A:9B:E7
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32332d3233203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:40:9e:54:45:4f:c4:4f:ee:08:f7:d7:8d:eb:bb:fb:15:ba:
         65:f3:a9:5d:1f:b6:f6:58:d3:47:df:a8:4f:29:35:16:7b:c6:
         cc:16:71:d6:b3:28:08:05:40:13:13:fb:2c:aa:b3:2a:ee:58:
         11:0a:c5:7b:97:80:d3:22:f1:39:cd:c6:63:dd:34:b2:2d:28:
         8d:8e:cc:cd:19:2d:80:d1:a8:ca:47:07:8f:6e:6c:d7:7d:8e:
         6a:31:15:1e:69:f2:bc:48:24:4e:4a:61:f9:76:e8:6b:5b:75:
         35:8c:e4:7a:04:a6:44:fd:c4:71:9b:3d:68:b6:09:11:37:c0:
         d7:a2:71:b3:13:af:75:38:71:02:aa:61:a2:d0:fa:61:55:00:
         30:5b:df:65:a6:eb:03:b5:6a:2a:09:8d:b3:14:cb:6e:e7:30:
         22:70:0a:a0:d0:08:50:25:5e:2c:0a:0e:98:74:32:72:55:c8:
         e5:4e:ce:78:5e:46:70:8e:44:7c:a1:05:8f:30:d5:ae:c0:71:
         4f:fa:07:05:45:5a:9c:32:e0:96:f3:a9:01:dd:a3:ba:a4:dc:
         5a:dc:3b:fc:03:d3:e9:62:3e:04:19:f8:99:81:c4:32:5b:eb:
         fb:14:2f:41:9d:03:2b:54:69:63:d2:09:0c:2d:de:4e:99:f4:
         2e:f3:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 05:02:00 2024 by rpki-client on console-ams.rpki-client.org