Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa
File:                     3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          a7yY2V06TQfCGjqsfLquqpljtY7Kox1ZNuldpZEhSys=
Subject key identifier:   A9:63:6C:AC:39:CA:A0:62:07:8D:5A:44:77:06:1A:E0:90:A1:20:38
Certificate issuer:       /CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
Certificate serial:       0F94EC16DA99071DCF4BA56CCB36B1F494A0957D
Authority key identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa
Signing time:             Thu 04 Apr 2024 17:31:50 +0000
ROA not before:           Thu 04 Apr 2024 17:26:50 +0000
ROA not after:            Thu 03 Apr 2025 17:31:50 +0000
asID:                     53048
IP address blocks:        132.255.179.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:94:ec:16:da:99:07:1d:cf:4b:a5:6c:cb:36:b1:f4:94:a0:95:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
        Validity
            Not Before: Apr  4 17:26:50 2024 GMT
            Not After : Apr  3 17:31:50 2025 GMT
        Subject: CN=A9636CAC39CAA062078D5A4477061AE090A12038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:fa:16:82:18:8b:6c:3f:69:70:ba:ec:c2:
                    5f:92:e9:10:c1:58:de:2c:b1:90:83:a4:b7:a3:60:
                    95:b1:b3:dc:dd:b8:8c:82:56:01:62:ef:95:0a:a0:
                    74:c7:db:7a:cf:e1:d1:ba:e9:bd:f8:c7:52:c3:a5:
                    2b:86:0a:e1:b2:0e:18:e9:13:84:42:14:18:37:c5:
                    8b:11:e6:e9:f5:c4:0c:36:74:3e:b2:4b:d8:fd:95:
                    c6:7c:c4:a6:01:45:7a:3d:e5:24:03:8b:3d:57:15:
                    fe:fa:5e:a6:94:e7:4b:4d:9d:94:98:f9:a4:38:4a:
                    38:61:2b:a5:8c:fb:75:99:55:cd:92:89:b6:f2:a5:
                    3e:eb:39:a9:94:0a:ee:74:73:06:d5:60:60:38:a5:
                    4e:a0:6b:70:63:f8:93:8d:4d:e0:6c:7a:d1:24:5e:
                    dc:ac:90:79:ac:87:4b:63:d4:2c:f0:31:39:f6:fa:
                    9f:43:73:41:24:fd:aa:db:aa:63:ef:ff:6c:c7:2a:
                    a6:ce:7f:9c:34:2b:4c:1a:e8:ca:70:c1:05:46:b0:
                    fd:0c:08:cb:84:9c:7d:b4:49:a5:c5:5a:62:79:b3:
                    f8:02:95:e5:1a:57:fd:86:ed:39:06:e6:0f:d9:b5:
                    cd:82:52:ac:77:ed:e6:ef:ae:94:61:13:f4:a4:6c:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:63:6C:AC:39:CA:A0:62:07:8D:5A:44:77:06:1A:E0:90:A1:20:38
            X509v3 Authority Key Identifier:
                keyid:DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137392e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8e:8e:a0:33:77:93:90:0f:fd:32:16:22:aa:3c:6f:83:0c:
         eb:cb:ec:6d:77:dd:ff:bc:48:f5:06:15:e7:24:7b:02:e7:45:
         dd:de:44:d8:2f:ff:d4:b7:87:67:30:ad:8c:67:b0:e5:2d:91:
         e1:d2:a1:2a:aa:89:65:f7:39:59:34:78:4c:d7:ef:ef:2f:68:
         a1:55:e9:53:c3:2c:86:df:51:73:d9:05:1a:a3:6f:3d:4e:bc:
         40:b7:1c:bc:7b:4d:27:0c:91:4a:24:01:5f:4e:93:64:b5:a5:
         8d:81:f1:f0:8a:da:11:ed:1b:64:68:ca:66:79:71:7f:fc:3c:
         1c:d4:28:a7:31:47:02:85:f2:85:4d:ed:1e:62:95:33:b9:ef:
         18:58:c2:13:ae:69:68:84:6b:3d:70:29:1e:08:23:3a:93:7e:
         1d:bc:a9:5e:73:67:5c:85:2a:62:73:78:3c:fd:fc:93:7e:3d:
         03:dc:bd:0f:1d:a3:5f:02:2e:d1:47:bb:bc:04:ac:b6:66:dc:
         6c:1e:e7:71:ed:73:e4:ea:c7:39:13:e5:ab:93:8f:c9:a3:8a:
         36:84:59:a3:4d:00:54:5c:24:f6:f1:b3:5e:88:bd:78:aa:45:
         89:4b:82:97:6a:7f:25:26:7a:c2:b8:2e:81:5a:35:90:4d:4c:
         89:08:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:26:44 2024 by rpki-client on console-ams.rpki-client.org