Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/3133312e3136312e32382e302f32322d3234203d3e20323634333630.roa
File:                     3133312e3136312e32382e302f32322d3234203d3e20323634333630.roa (raw, json)
Hash identifier:          FYQNfCKMaEQ1WvzK3D+jBDyDs1h6p69+/3gfQ+inE8s=
Subject key identifier:   00:0D:2B:36:26:09:8F:C8:A0:69:95:6F:E2:39:4C:D6:A0:77:B7:9C
Certificate issuer:       /CN=04E9838264C8C3EFF1299FCE9474ACE037A792A2
Certificate serial:       3B4CCD3CE9B035C6374C799A62605B7F08014B55
Authority key identifier: 04:E9:83:82:64:C8:C3:EF:F1:29:9F:CE:94:74:AC:E0:37:A7:92:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E9838264C8C3EFF1299FCE9474ACE037A792A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/3133312e3136312e32382e302f32322d3234203d3e20323634333630.roa
Signing time:             Tue 29 Oct 2024 15:34:52 +0000
ROA not before:           Tue 29 Oct 2024 15:29:52 +0000
ROA not after:            Tue 28 Oct 2025 15:34:52 +0000
asID:                     264360
IP address blocks:        131.161.28.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4c:cd:3c:e9:b0:35:c6:37:4c:79:9a:62:60:5b:7f:08:01:4b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E9838264C8C3EFF1299FCE9474ACE037A792A2
        Validity
            Not Before: Oct 29 15:29:52 2024 GMT
            Not After : Oct 28 15:34:52 2025 GMT
        Subject: CN=000D2B3626098FC8A069956FE2394CD6A077B79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:14:d4:e8:49:b4:42:57:15:84:5e:67:3e:a7:
                    ca:40:6d:64:50:38:b9:c7:6b:33:b6:33:09:7b:7d:
                    3d:be:25:3b:cc:e2:4c:51:44:c0:fe:07:3d:98:72:
                    8c:95:90:c2:f5:dc:7e:16:60:25:8a:4e:eb:22:bd:
                    cb:c4:87:ad:50:f4:3c:db:89:96:80:8b:6f:e4:62:
                    9d:23:6a:d4:26:c3:42:d4:44:c4:2e:23:69:23:60:
                    64:dd:64:ef:34:de:62:ee:e4:81:6d:38:d0:f9:e9:
                    6b:7b:f3:56:a1:12:cd:dd:93:38:f4:d5:bd:2c:54:
                    69:86:3e:73:7b:32:f1:fa:d6:ca:f5:e7:f3:a5:db:
                    f2:65:80:97:b8:d8:5b:ed:ee:a7:a1:18:4a:33:e6:
                    90:19:cc:bd:84:32:29:8b:c4:72:4c:2f:03:1d:9b:
                    9f:a3:bc:8f:da:c2:c9:88:79:40:fc:11:98:43:89:
                    80:a9:df:98:53:5c:bc:20:40:60:12:14:bd:81:b1:
                    aa:84:20:75:c7:f5:31:70:ab:b8:08:6b:16:71:8f:
                    b0:2c:69:cb:a3:97:d3:e1:45:ab:d0:a2:ff:19:9d:
                    84:c7:d8:8c:1b:55:6f:4e:fb:85:51:11:75:69:c0:
                    6f:bb:34:99:c7:3a:64:48:e9:dc:02:97:cb:bb:b8:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0D:2B:36:26:09:8F:C8:A0:69:95:6F:E2:39:4C:D6:A0:77:B7:9C
            X509v3 Authority Key Identifier:
                keyid:04:E9:83:82:64:C8:C3:EF:F1:29:9F:CE:94:74:AC:E0:37:A7:92:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/04E9838264C8C3EFF1299FCE9474ACE037A792A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E9838264C8C3EFF1299FCE9474ACE037A792A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/3133312e3136312e32382e302f32322d3234203d3e20323634333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:a1:a9:c4:d6:ab:17:88:c9:18:f1:84:73:9d:17:49:3e:ad:
         d0:6f:4b:87:04:b7:b8:1f:cf:96:80:7f:30:57:e5:b2:15:de:
         c2:b6:01:cb:91:d1:1f:ba:97:26:c3:7f:ec:ed:fb:ea:c5:10:
         b4:5f:c3:5f:1f:63:cd:24:7e:3b:39:c7:fb:6d:73:63:69:0e:
         c7:2b:de:0c:47:55:b8:4e:6b:9d:f0:7b:51:f9:0d:5c:66:4d:
         99:3a:8a:b7:71:26:cd:c0:4a:3c:28:de:fd:1a:21:5a:2e:f7:
         87:e4:3e:82:f7:da:62:a3:c0:cd:22:77:56:32:8f:80:69:95:
         e2:c7:56:5a:50:91:f2:47:e1:82:bc:f0:8a:66:00:62:b4:a0:
         07:db:16:4d:34:df:4f:d8:58:a6:66:2b:80:44:e2:48:85:9a:
         0f:a9:c3:22:c0:5a:49:10:e6:94:1f:05:c3:eb:12:0d:9d:0f:
         07:7f:c5:9f:cf:d7:05:13:3c:61:06:4a:40:2c:59:83:1f:41:
         f7:0b:dd:aa:df:22:a9:c8:3c:eb:82:eb:87:83:96:ca:10:83:
         f6:75:0e:27:11:a4:ec:6f:82:8d:64:29:91:93:ea:82:08:0e:
         3a:d3:82:76:f3:00:51:b4:9b:5a:1e:5b:94:a5:95:8c:d2:7a:
         e0:9a:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:16:11 2024 by rpki-client on console-ams.rpki-client.org