Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32322d3332203d3e20323733343734.roa
File:                     3133312e37322e35322e302f32322d3332203d3e20323733343734.roa (raw, json)
Hash identifier:          WGKjD7JChB8o8LoxrC9wy5ZZFPMMdMrisZ84+em8Dfc=
Subject key identifier:   58:DE:24:84:01:93:C0:D4:6B:97:D5:19:FE:54:7A:C2:3C:44:BF:9D
Certificate issuer:       /CN=C9806DFCD282E64362277DA77EA3B9A9606ABAF0
Certificate serial:       66302B4C45CC68D1E5E48506855711CE4BC36EE4
Authority key identifier: C9:80:6D:FC:D2:82:E6:43:62:27:7D:A7:7E:A3:B9:A9:60:6A:BA:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32322d3332203d3e20323733343734.roa
Signing time:             Wed 15 May 2024 21:51:06 +0000
ROA not before:           Wed 15 May 2024 21:46:06 +0000
ROA not after:            Wed 14 May 2025 21:51:06 +0000
asID:                     273474
IP address blocks:        131.72.52.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:30:2b:4c:45:cc:68:d1:e5:e4:85:06:85:57:11:ce:4b:c3:6e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9806DFCD282E64362277DA77EA3B9A9606ABAF0
        Validity
            Not Before: May 15 21:46:06 2024 GMT
            Not After : May 14 21:51:06 2025 GMT
        Subject: CN=58DE24840193C0D46B97D519FE547AC23C44BF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:1a:92:92:86:f5:d4:6e:0c:b5:e1:8b:24:
                    5e:5b:20:c3:73:ab:bf:12:c7:74:2f:95:56:b9:ef:
                    1c:1d:8f:64:67:76:09:73:61:c5:aa:cc:cf:00:eb:
                    37:c0:b9:bf:5e:b3:1b:a8:b1:76:32:72:97:db:a2:
                    fc:c2:4a:06:5e:68:62:1e:52:c7:02:a6:98:ee:ee:
                    a7:0b:1c:8c:df:e5:85:00:8c:97:c8:b7:f0:9a:0d:
                    c6:eb:b0:8b:6b:39:01:8f:94:12:c5:68:20:2e:70:
                    8b:ec:27:93:17:c5:75:5e:20:be:5b:35:6a:b4:24:
                    71:37:82:1d:5f:cd:2b:3b:f4:e1:60:31:b5:c9:ac:
                    8e:1c:f0:c4:f8:bd:25:bd:bf:b9:cc:b1:04:25:ca:
                    97:9d:b6:d6:73:85:69:a5:dc:a6:ed:1d:ac:6c:12:
                    40:a7:3c:ed:9c:13:a8:89:12:d7:56:59:a3:06:0c:
                    07:34:74:4d:b6:e8:b8:d4:c3:8e:32:67:38:4e:1e:
                    0a:73:09:86:77:5c:bd:18:65:11:52:ad:11:91:7d:
                    e1:a8:50:33:10:50:b8:ef:fd:fc:d2:bc:8c:67:78:
                    97:ae:1e:42:d5:22:2e:90:57:6d:df:ed:67:98:b4:
                    47:93:5a:21:0e:3e:44:97:e5:66:b1:bc:b6:b3:18:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:24:84:01:93:C0:D4:6B:97:D5:19:FE:54:7A:C2:3C:44:BF:9D
            X509v3 Authority Key Identifier:
                keyid:C9:80:6D:FC:D2:82:E6:43:62:27:7D:A7:7E:A3:B9:A9:60:6A:BA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9806DFCD282E64362277DA77EA3B9A9606ABAF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32322d3332203d3e20323733343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:e8:8d:54:bd:ed:8f:5e:13:42:62:95:eb:af:be:13:87:
         fb:e6:ba:3f:63:e9:0b:da:99:31:81:3a:5a:fe:62:49:80:cc:
         82:ab:97:a0:aa:12:68:03:fd:4a:8c:33:bf:90:a0:4d:94:d4:
         4b:d6:83:4b:4e:68:95:3a:4f:58:4c:36:f5:a1:b4:9b:a9:1c:
         69:98:13:db:36:4e:bf:ec:5e:fb:38:4e:9a:ba:fa:7d:5d:27:
         dd:a7:42:18:4d:ce:eb:40:c4:e1:94:8c:05:bd:47:ab:66:e4:
         d3:4f:71:7d:f9:0d:bd:83:13:2f:9e:69:51:cc:39:1a:18:2e:
         36:2b:1f:60:e1:d5:81:96:31:14:74:11:74:f7:68:41:1a:84:
         29:a5:9d:46:73:98:c4:51:3a:88:61:f6:be:c1:76:ae:bb:cd:
         a6:e3:97:b8:f4:e8:7f:40:0b:d4:fa:a6:2d:33:a4:1e:4a:63:
         75:9b:5d:94:e0:98:5d:12:30:e3:49:97:fc:6a:f0:d9:57:f5:
         24:86:8e:9c:e6:05:4f:6d:2c:f9:cb:17:0b:07:50:dc:9d:70:
         2b:11:60:ff:66:75:ae:64:89:3f:b6:72:47:8e:76:1a:5e:64:
         2d:6a:fc:08:95:f8:97:cd:28:ff:1c:34:0d:82:64:6b:09:61:
         23:0f:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 17:36:01 2024 by rpki-client on console-ams.rpki-client.org