Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa
File:                     3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          mHDirhZP+OsL7DvrFgsw9ZJR+EYtkbU5lhCLxedECOo=
Subject key identifier:   D2:A7:ED:82:7C:A1:0D:8C:03:D9:EE:B7:F4:A2:3C:67:33:26:6F:15
Certificate issuer:       /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial:       741D2CC4AC562FB99474430D8C03EA3FE3F4775F
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:35:41 +0000
ROA not before:           Wed 10 Apr 2024 13:30:41 +0000
ROA not after:            Wed 09 Apr 2025 13:35:41 +0000
asID:                     61689
IP address blocks:        131.108.124.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1d:2c:c4:ac:56:2f:b9:94:74:43:0d:8c:03:ea:3f:e3:f4:77:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
        Validity
            Not Before: Apr 10 13:30:41 2024 GMT
            Not After : Apr  9 13:35:41 2025 GMT
        Subject: CN=D2A7ED827CA10D8C03D9EEB7F4A23C6733266F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:61:38:62:a9:1e:ba:09:3b:e6:c0:99:a8:
                    2d:95:6f:98:7f:03:d4:46:4c:0c:a0:d0:a7:f8:d4:
                    27:c5:60:aa:fa:fd:4a:01:5e:24:0b:d9:24:3b:86:
                    e8:14:82:75:b4:57:55:4f:fb:f5:cc:5e:6b:e2:0a:
                    ea:78:5e:22:a5:28:f0:17:20:f0:36:19:47:34:65:
                    79:a7:86:f8:26:9d:10:6a:53:7d:19:e4:ef:9d:d6:
                    2e:4b:b3:12:3e:d1:13:17:ea:85:cd:18:78:09:b4:
                    8f:c2:c4:35:64:79:41:05:83:c5:bf:a5:02:29:81:
                    8d:f0:c6:f8:72:5f:42:d5:10:60:0a:32:58:06:6b:
                    b5:61:e7:df:45:c3:f7:b3:bd:8d:cd:d4:68:cc:16:
                    fa:cf:61:1c:fb:bd:d1:ec:c9:f2:f1:53:43:e2:5d:
                    5f:94:21:b7:0b:24:30:4c:1c:37:5f:9e:58:36:65:
                    f8:f6:e6:77:ad:3a:fc:91:b0:1b:13:01:f4:8f:0b:
                    fb:08:48:4b:2e:c8:36:1f:21:c8:64:51:84:83:ee:
                    32:0c:d2:d2:7a:f9:b3:7d:af:12:15:5d:a5:bf:10:
                    fc:40:04:b9:ff:8b:13:af:cd:78:96:02:08:9f:fc:
                    ca:a8:7c:96:b5:50:7e:cd:f8:f8:63:ec:d7:15:82:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A7:ED:82:7C:A1:0D:8C:03:D9:EE:B7:F4:A2:3C:67:33:26:6F:15
            X509v3 Authority Key Identifier:
                keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:fa:7d:47:69:27:00:6f:39:1b:bc:ad:9d:33:57:52:c6:ed:
         74:ec:d7:fa:74:f9:46:16:8f:a9:a8:a7:bd:a4:fb:7c:27:82:
         51:75:b2:ff:6f:43:d7:6b:d3:c5:f6:b3:8c:cc:72:4a:e7:f6:
         8f:05:af:ef:27:61:a4:da:d6:23:74:67:b5:9e:89:46:0c:53:
         7b:f4:24:c4:42:11:65:e2:11:08:aa:d0:0e:b4:f9:93:c9:41:
         a3:e1:0e:17:d6:fa:7c:2c:99:12:95:8a:ce:59:d2:63:73:04:
         7b:ca:31:32:dc:36:f6:6d:9b:b7:72:1c:5e:1a:3a:13:f2:20:
         84:79:6f:3a:3f:96:5c:51:6d:4a:92:64:8e:b8:c5:a4:28:81:
         23:76:20:77:c6:7f:2f:f3:7f:a8:ac:c0:f8:f0:85:84:ee:21:
         f3:66:65:46:b2:b5:b9:e8:4d:b2:2b:9a:c1:70:4f:0c:91:a2:
         ac:f3:6f:d2:55:00:d7:87:dc:fe:00:45:89:08:96:f0:d2:2d:
         04:fd:a4:14:c0:d3:9e:6a:5b:8e:3b:1e:ee:83:43:36:d4:17:
         83:7f:fd:45:cf:dc:16:d4:ac:48:a9:84:bf:9d:ce:be:4c:b8:
         68:ed:da:5d:94:c4:0b:3c:fc:f6:09:97:63:a4:b8:a3:18:ef:
         00:41:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:20:55 2024 by rpki-client on console-fra.rpki-client.org