Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32322d3232203d3e203631373332.roa
File:                     3133312e37322e3130342e302f32322d3232203d3e203631373332.roa (raw, json)
Hash identifier:          uheYRBbFKeP80sK6dMzXVnFxtA/Ojzl05nOEJVWcjUI=
Subject key identifier:   C2:4E:BF:B0:5B:8D:B0:64:B5:6E:93:1A:8F:18:40:CB:52:D6:D4:1B
Certificate issuer:       /CN=8529A7F829766A6E814929022549D58021B37145
Certificate serial:       794C87ED1D97BD516890D8C289DC50B4947A2853
Authority key identifier: 85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32322d3232203d3e203631373332.roa
Signing time:             Wed 15 Feb 2023 21:14:06 +0000
ROA not before:           Wed 15 Feb 2023 21:09:06 +0000
ROA not after:            Wed 14 Feb 2024 21:14:06 +0000
asID:                     61732
IP address blocks:        131.72.104.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4c:87:ed:1d:97:bd:51:68:90:d8:c2:89:dc:50:b4:94:7a:28:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8529A7F829766A6E814929022549D58021B37145
        Validity
            Not Before: Feb 15 21:09:06 2023 GMT
            Not After : Feb 14 21:14:06 2024 GMT
        Subject: CN=C24EBFB05B8DB064B56E931A8F1840CB52D6D41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:37:8d:3c:cb:4f:e1:98:6c:e3:ee:ae:7e:
                    a8:af:05:5f:c9:6e:56:9c:f5:fd:b5:4d:87:72:60:
                    34:40:d1:43:31:05:de:e9:a8:de:ab:e1:f8:48:91:
                    e5:78:78:eb:98:fb:fc:08:1d:d8:b5:ed:de:9d:aa:
                    59:3b:e6:11:45:d4:80:8d:2b:1e:69:57:a7:fa:08:
                    ee:fd:29:3d:c0:31:8f:19:32:42:d6:e9:f6:fb:1c:
                    7d:9b:44:ed:78:e4:a2:68:a7:00:98:2e:55:15:15:
                    ba:54:16:70:56:84:d8:ce:29:2b:0b:94:c8:58:2a:
                    bb:22:8e:be:da:cb:bb:5f:45:42:7f:1a:d8:13:81:
                    a5:79:12:83:31:64:f8:94:fc:6b:c3:e5:15:8a:9c:
                    f0:93:a8:0a:09:4f:88:98:ad:e7:64:3f:d5:83:c8:
                    99:02:b4:9b:20:73:6a:3f:07:2f:f6:f0:8e:14:bb:
                    0b:21:60:58:20:15:05:30:81:60:0d:ed:42:18:b5:
                    ed:6a:7a:45:26:f1:37:ab:cc:ac:d1:12:af:85:33:
                    56:ae:0c:7c:f6:50:f7:da:88:39:eb:d6:15:7b:2f:
                    cd:8f:9b:49:6b:cb:4e:05:7c:15:83:7d:d5:2c:0f:
                    fd:7b:0d:e7:71:2a:5e:b7:f1:1c:09:a7:7e:14:d4:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:BF:B0:5B:8D:B0:64:B5:6E:93:1A:8F:18:40:CB:52:D6:D4:1B
            X509v3 Authority Key Identifier:
                keyid:85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32322d3232203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:c4:d1:86:71:73:f1:79:2c:52:49:4e:7b:5b:70:36:04:
         9b:67:cc:ad:34:72:42:ca:14:29:7d:94:bd:57:97:fb:9c:5a:
         a8:9d:b3:95:0e:9d:92:19:04:13:95:99:30:87:24:64:ad:63:
         1c:98:a0:1d:1b:06:ab:22:51:0c:06:01:1d:33:97:59:c3:50:
         5a:ed:26:8c:c4:86:52:8f:f8:19:d4:59:5e:cd:18:f2:cc:98:
         81:04:f1:10:52:e2:22:a7:af:77:5f:fd:be:dc:34:df:24:58:
         7c:f4:cb:b6:15:66:2e:d8:db:73:b6:01:3a:d6:4f:ba:d0:bd:
         56:09:17:ec:0e:9c:a7:1c:a5:85:ad:5a:e9:e4:48:23:af:be:
         8f:12:7d:88:fb:b7:86:db:ee:93:5e:18:41:a5:b2:bf:12:2e:
         12:07:6a:b9:ca:1d:6b:bb:07:e3:bd:6a:21:36:9e:2e:42:61:
         4e:8d:f8:64:51:9b:91:85:89:10:0d:d7:e7:c3:1e:ab:cd:08:
         6b:bb:16:17:0d:ad:7e:ff:b8:10:63:be:81:6a:43:6b:db:27:
         39:8f:07:53:0e:d9:64:fb:d7:6d:61:a6:13:c3:0e:b5:d7:36:
         3d:4d:04:6e:c0:81:7f:65:00:71:55:69:bc:e9:39:57:94:32:
         6e:c3:40:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 15:05:12 2023 by rpki-client on console-ams.rpki-client.org