Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3133312e302f32342d3234203d3e20323731353132.roa
File:                     3138312e3233322e3133312e302f32342d3234203d3e20323731353132.roa (raw, json)
Hash identifier:          /N/uLXuSF6Yf/c8GO34KEjR1aEuoSddXsk0RPPgDhno=
Subject key identifier:   28:A3:EA:E3:0C:25:7B:02:73:1A:4A:1C:24:2F:0F:81:68:EE:BB:07
Certificate issuer:       /CN=A8E21D506BD647922C7407C92DF2E0618175A5B3
Certificate serial:       5E5A0C82E46080F5F00790799DD04CDEEB81CD00
Authority key identifier: A8:E2:1D:50:6B:D6:47:92:2C:74:07:C9:2D:F2:E0:61:81:75:A5:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3133312e302f32342d3234203d3e20323731353132.roa
Signing time:             Tue 24 Oct 2023 02:15:56 +0000
ROA not before:           Tue 24 Oct 2023 02:10:56 +0000
ROA not after:            Tue 22 Oct 2024 02:15:56 +0000
asID:                     271512
IP address blocks:        181.232.131.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:0c:82:e4:60:80:f5:f0:07:90:79:9d:d0:4c:de:eb:81:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8E21D506BD647922C7407C92DF2E0618175A5B3
        Validity
            Not Before: Oct 24 02:10:56 2023 GMT
            Not After : Oct 22 02:15:56 2024 GMT
        Subject: CN=28A3EAE30C257B02731A4A1C242F0F8168EEBB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a4:6a:c8:d6:e6:52:46:d2:50:75:cf:5d:d0:
                    2a:64:df:8a:53:72:40:ac:51:4d:af:6c:79:f3:77:
                    01:00:a0:2f:1e:02:45:9d:ff:41:48:8f:06:dd:60:
                    66:7c:0b:ec:97:b4:aa:67:fa:6d:84:5e:3f:29:1e:
                    f8:25:f2:bd:39:77:1c:7d:5c:e9:db:04:d5:f5:00:
                    7b:65:b9:16:56:27:3e:8e:28:08:df:6a:63:4b:8f:
                    da:3b:0c:7c:f7:ab:9f:ed:f2:49:9c:f4:7b:f1:58:
                    1c:4a:43:07:bd:65:83:c6:c9:44:41:86:3f:9b:01:
                    1b:e0:bc:d3:3f:20:88:fe:f5:db:9e:05:24:13:b7:
                    f3:1e:3c:54:71:f8:12:31:86:be:76:fd:63:c3:fc:
                    4d:ea:95:3b:95:81:8d:9c:10:a6:33:83:77:15:05:
                    d8:70:2d:3c:0e:c7:9e:44:28:01:6f:b2:0e:72:1c:
                    ce:80:74:96:12:a1:64:1f:89:d3:a7:fd:32:e7:c8:
                    b1:21:cb:a7:8f:19:ee:23:31:52:97:c3:48:eb:9a:
                    59:ef:be:84:62:90:d3:1a:0a:a8:b4:23:84:97:31:
                    d1:56:60:55:6b:67:86:66:19:a8:9c:bb:95:59:a3:
                    5f:16:3a:c2:76:ef:30:4a:68:e0:8a:f6:59:e5:97:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:EA:E3:0C:25:7B:02:73:1A:4A:1C:24:2F:0F:81:68:EE:BB:07
            X509v3 Authority Key Identifier:
                keyid:A8:E2:1D:50:6B:D6:47:92:2C:74:07:C9:2D:F2:E0:61:81:75:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3133312e302f32342d3234203d3e20323731353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:6e:10:de:4e:f5:d2:64:3b:66:bc:69:45:b9:d8:f9:57:
         57:d3:e5:94:26:0f:d9:af:0b:07:1a:80:0c:3b:30:43:70:07:
         b0:25:5b:66:32:16:85:2f:8f:82:e0:53:a0:6b:cc:e5:de:d0:
         c6:03:c5:2b:28:d9:2e:ef:9f:7f:83:14:0f:7c:e8:b1:af:6d:
         99:44:9c:77:88:3c:ed:33:3a:24:9a:92:32:30:77:41:bc:a9:
         bd:5e:c8:01:b7:34:70:82:b8:31:a9:f5:e6:12:25:c3:f4:8e:
         2d:b2:83:ee:7c:e8:60:8e:88:ad:15:5f:c2:31:7d:87:75:fe:
         60:f2:0c:12:9c:46:a5:79:69:3e:74:ae:8a:bc:3b:4f:61:a7:
         a3:e7:6c:8d:71:ad:6e:28:dc:e4:e8:c7:28:0c:03:1c:e5:fc:
         b6:ee:de:f1:3e:7b:44:af:5c:ee:5f:b9:a1:04:6d:1f:bc:7d:
         ef:fd:af:e1:63:09:13:c4:db:21:9c:a8:f7:bd:6c:68:c0:82:
         9d:4f:b9:e1:5a:a4:68:35:50:88:7c:43:14:46:cc:df:95:ef:
         32:6f:e6:d6:ed:23:ec:68:a8:54:6e:4a:d2:e2:48:f0:a6:cf:
         ee:dd:39:da:a3:27:dc:dc:11:17:aa:7d:0f:1f:21:2f:1e:5d:
         c8:95:2a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 04:07:51 2023 by rpki-client on console-fra.rpki-client.org