Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa
File:                     3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          uV8prKBIm5NbXTpgvxd4qdwIir8PpZr3dP7MgamfK6U=
Subject key identifier:   AF:61:86:CE:20:F0:9E:33:88:57:6C:17:C9:E1:B1:64:9A:4A:77:1B
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       53A2EA90563FB8C4698665840925EECAA6681620
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:06 +0000
ROA not before:           Wed 03 Apr 2024 19:14:06 +0000
ROA not after:            Wed 02 Apr 2025 19:19:06 +0000
asID:                     61694
IP address blocks:        131.108.254.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a2:ea:90:56:3f:b8:c4:69:86:65:84:09:25:ee:ca:a6:68:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:06 2024 GMT
            Not After : Apr  2 19:19:06 2025 GMT
        Subject: CN=AF6186CE20F09E3388576C17C9E1B1649A4A771B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a5:0c:39:6d:9d:13:24:99:37:8e:dc:38:20:
                    6b:81:f0:a5:66:d9:f1:68:be:99:9f:6f:d2:0c:ee:
                    8a:7d:c3:43:26:f4:d6:31:1f:90:fa:88:74:d5:58:
                    07:75:22:17:2f:17:0e:a6:f1:7f:47:67:f7:5c:ba:
                    81:7f:d3:26:36:91:3f:98:e2:17:d6:6f:b8:82:a0:
                    66:3c:e3:4e:17:a3:e1:c5:92:47:20:4b:52:bc:fb:
                    e2:73:45:8e:bb:23:ce:91:f0:a9:7f:6d:8d:3f:95:
                    5b:8f:29:81:72:f9:e0:d1:0c:63:89:da:9f:18:f0:
                    4a:39:9e:9c:39:e5:a8:05:42:3a:cc:c9:ed:11:a8:
                    48:c2:12:0f:78:af:84:26:74:cc:8d:aa:33:73:84:
                    e9:a7:7e:ea:58:63:6c:ed:3b:2f:d6:2f:a8:da:15:
                    8b:72:64:d8:d0:3f:ea:c6:e1:27:bb:93:43:a0:90:
                    ac:b3:66:3e:cc:74:e1:c0:8b:02:1d:c6:89:a8:ef:
                    f3:fd:ea:a5:c0:09:67:3c:b9:2c:05:4c:21:19:b4:
                    1f:35:e7:92:8f:78:f4:b1:46:2d:a7:d6:2e:1f:aa:
                    d9:0f:64:ab:e7:6b:84:19:0c:5b:f1:48:40:db:f0:
                    e1:b3:be:9d:cd:ae:b4:ee:e4:7e:7f:01:cb:35:31:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:61:86:CE:20:F0:9E:33:88:57:6C:17:C9:E1:B1:64:9A:4A:77:1B
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133312e3130382e3235342e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:4c:aa:89:33:23:4f:12:ba:13:35:38:cc:d3:a3:60:4a:
         5c:b9:4f:63:5d:e7:d8:cb:03:9e:c6:19:ed:d4:21:97:51:c7:
         18:40:96:4c:9e:b1:af:43:5b:e9:04:c8:c9:83:56:96:ec:8f:
         24:63:bc:f3:94:38:2a:4f:7b:7c:4c:e3:db:11:be:ab:b5:31:
         51:73:bc:fb:ee:93:7a:5f:04:cf:fd:e5:72:62:f7:42:2a:90:
         24:94:c5:33:05:ec:8a:fe:65:67:61:c7:aa:39:63:2a:cc:cc:
         37:ed:39:1b:a8:8b:15:ef:80:5e:99:96:04:7d:75:66:53:db:
         43:db:85:1e:59:b9:0c:c1:f8:7b:4c:ea:89:e8:3c:30:fa:9b:
         d0:52:e9:20:41:9a:81:fa:e0:10:1c:76:6c:5f:7e:3e:28:ec:
         ad:9b:76:17:98:ad:fc:f5:7c:f4:a6:89:43:b4:17:68:4a:1c:
         75:83:8a:51:5d:2b:3b:6f:cc:21:56:8b:a7:87:ee:f8:fd:7d:
         e3:09:6f:97:fb:83:ee:ac:2a:83:4d:1d:98:62:b2:5e:1e:11:
         71:cd:7a:d5:49:fa:f6:ea:a5:b3:5b:a6:7e:b9:96:15:0b:e3:
         fe:ca:db:40:e9:4d:1a:1e:a8:3b:27:db:4c:81:16:8e:5e:f1:
         61:79:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:58:46 2024 by rpki-client on console-fra.rpki-client.org