Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231362e302f32342d3234203d3e20323632333532.roa
File:                     3133312e37322e3231362e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          7ftUnsKEFgr1oxVcQAcJd8vbK8aRCbvOiYNUuOp2S/g=
Subject key identifier:   7F:78:DE:0C:D8:F8:7E:61:6C:D1:9C:52:B8:88:24:A9:BE:1E:A8:5F
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       1BD81B95F13C5AF63488B567597F172D1BD2A8AB
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231362e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:28 +0000
ROA not before:           Thu 04 Apr 2024 15:18:28 +0000
ROA not after:            Thu 03 Apr 2025 15:23:28 +0000
asID:                     262352
IP address blocks:        131.72.216.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d8:1b:95:f1:3c:5a:f6:34:88:b5:67:59:7f:17:2d:1b:d2:a8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:28 2024 GMT
            Not After : Apr  3 15:23:28 2025 GMT
        Subject: CN=7F78DE0CD8F87E616CD19C52B88824A9BE1EA85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:bf:b6:92:37:ef:01:f7:f8:d5:72:57:37:
                    eb:9b:85:e5:bb:8a:69:08:7b:2a:55:80:58:2b:d7:
                    a2:3e:3d:87:5b:6a:16:aa:c2:76:21:d5:5b:1c:ef:
                    18:41:2e:5b:df:96:f1:ea:36:a9:f8:18:4a:fe:69:
                    c9:90:85:eb:56:79:55:e0:35:b9:4d:0a:da:56:01:
                    57:c1:63:92:5e:a9:0d:45:46:6f:47:1e:22:75:99:
                    96:ca:03:7c:a1:61:da:80:29:64:6c:22:a6:7e:15:
                    80:97:7c:c4:3b:8d:b1:ed:b1:f0:e6:3b:a6:5e:ef:
                    d8:c8:4c:f5:20:c6:27:9b:fa:33:15:8e:64:eb:ee:
                    ad:be:48:66:38:31:4d:3a:87:2c:ae:55:ea:0b:4b:
                    9d:12:4b:a1:13:7b:23:4b:ab:00:81:e7:0c:f3:83:
                    89:42:5d:b8:19:65:7d:a5:a4:af:3e:4a:2f:99:94:
                    37:6c:ae:8d:1a:3a:06:3c:6b:21:15:40:2c:43:4d:
                    9e:1d:4c:2d:95:54:c9:14:20:86:89:e3:3c:5a:34:
                    f7:df:0e:cc:6b:62:3b:de:ac:ac:f8:c0:73:ec:64:
                    86:f5:9f:b3:87:e6:73:ee:c3:4c:62:f4:ac:f5:74:
                    41:1d:1b:69:3a:28:cb:e7:30:fb:fa:e9:2a:d4:dd:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:78:DE:0C:D8:F8:7E:61:6C:D1:9C:52:B8:88:24:A9:BE:1E:A8:5F
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3133312e37322e3231362e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:69:76:c2:7c:3f:04:aa:52:09:ad:2e:5d:78:84:67:7a:9d:
         30:0d:7b:88:48:7c:5e:c4:2e:9e:59:31:39:23:a8:8c:72:29:
         e2:0c:58:42:c4:b7:19:1c:59:90:75:ba:49:02:d7:87:3b:e8:
         78:ad:13:a8:c2:85:f2:55:34:ec:60:50:d8:ca:d7:6b:c6:63:
         af:11:33:3f:2a:25:16:6b:3e:6a:74:a9:71:c7:a8:40:9f:dd:
         73:01:60:4f:46:3b:cc:78:bd:bf:f3:31:78:f7:e4:c7:52:69:
         bd:b6:be:6c:a0:a2:dd:fd:d7:cb:51:78:9d:5b:a3:38:59:54:
         b0:4d:f4:40:fb:50:49:d8:bc:9a:46:5a:02:f1:98:3d:5f:7f:
         8a:f6:ab:53:1c:a3:de:9b:d1:bb:6d:bc:0c:81:f8:11:92:a3:
         d6:3e:9d:81:66:7b:05:e5:4e:87:91:43:4c:ed:c4:93:4a:bc:
         d2:81:ad:16:22:72:4a:6f:e7:ae:f6:b0:60:28:05:f7:f8:3f:
         da:ef:a0:db:3b:b1:90:69:34:e5:51:34:b8:6a:6b:3e:fa:47:
         4a:57:79:86:2c:e0:11:9e:21:16:1d:38:1a:7e:75:19:e5:3f:
         1f:df:9c:51:3c:a4:8c:51:a2:de:59:be:a5:62:5b:15:6f:b3:
         9c:aa:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 20:59:18 2024 by rpki-client on console-fra.rpki-client.org