Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3133312e3130382e3132362e302f32332d3234203d3e203631363839.roa
File:                     3133312e3130382e3132362e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          wi/Ls3yqkKmqdgqK/V4ZcmkN1hBQlrc4LOvMicCmw7g=
Subject key identifier:   17:2D:70:3B:BE:83:89:87:B1:09:AC:3E:C8:61:AA:CB:7E:C6:EE:93
Certificate issuer:       /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial:       15405AED35C30CE43585E3952C9164A8D21157DE
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3133312e3130382e3132362e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:35:55 +0000
ROA not before:           Wed 10 Apr 2024 13:30:55 +0000
ROA not after:            Wed 09 Apr 2025 13:35:55 +0000
asID:                     61689
IP address blocks:        131.108.126.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:40:5a:ed:35:c3:0c:e4:35:85:e3:95:2c:91:64:a8:d2:11:57:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
        Validity
            Not Before: Apr 10 13:30:55 2024 GMT
            Not After : Apr  9 13:35:55 2025 GMT
        Subject: CN=172D703BBE838987B109AC3EC861AACB7EC6EE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:05:9d:cf:eb:63:11:43:85:8f:4e:65:bf:
                    58:e5:b5:24:9b:34:76:85:2e:6d:a9:0f:f5:57:49:
                    10:c8:b5:95:f4:f3:9e:04:8c:b2:39:fb:b2:61:6c:
                    a5:c0:97:22:dd:6d:2f:72:d3:36:00:8d:97:f2:66:
                    4e:3a:e9:4c:c9:40:4a:c7:67:30:4d:e7:3a:f3:c1:
                    33:2b:da:c9:12:6d:a8:78:b7:44:32:2f:a0:b0:0d:
                    05:c9:62:e6:fc:32:6e:d1:68:e5:5c:d8:94:3e:d7:
                    db:f8:ca:2e:1a:15:79:3a:75:80:15:4f:ad:e7:4f:
                    8a:e5:a8:17:6e:bd:07:1e:bb:5c:2e:d0:dc:12:d9:
                    40:69:cf:7a:4d:ac:62:42:e8:6d:7a:85:32:6b:0b:
                    51:5f:b8:50:fd:59:8c:ee:a0:b6:2e:e0:66:d7:05:
                    ed:5c:12:da:d5:93:46:79:12:e1:60:a1:59:d1:71:
                    29:99:ed:b8:8f:ea:9d:c8:f1:04:9c:f8:e5:fe:9e:
                    c5:5f:c7:12:42:b1:70:c8:11:24:85:02:0d:d5:da:
                    aa:0f:8a:c7:35:f4:e9:a5:67:84:bd:21:77:90:d9:
                    37:26:8e:da:99:46:94:39:69:c1:b7:6d:42:29:f2:
                    c8:38:b9:dc:c8:48:5a:83:5d:5e:c2:92:c3:3b:76:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2D:70:3B:BE:83:89:87:B1:09:AC:3E:C8:61:AA:CB:7E:C6:EE:93
            X509v3 Authority Key Identifier:
                keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3133312e3130382e3132362e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:be:c3:e5:aa:53:3d:c2:40:78:01:ea:a9:c6:c2:15:62:ce:
         db:c9:62:79:44:3e:fc:8d:a2:77:a5:58:18:ea:ef:f2:9f:d8:
         3d:3d:ac:29:41:d9:ec:75:89:5b:f9:ca:e2:4c:61:b1:a2:77:
         b0:cd:e7:d5:e0:f9:c6:10:d2:f1:67:f5:23:ed:44:6a:ef:ed:
         9c:89:c4:a5:8f:b5:ff:93:c3:f6:b1:10:59:e8:92:6c:d5:ed:
         b2:02:6b:2a:00:79:80:e6:9b:94:67:fd:9c:bd:f4:fb:e6:26:
         83:b5:81:79:79:7e:bf:a2:09:db:18:95:56:36:29:f7:7e:97:
         ef:04:82:05:08:8c:d1:4d:c4:eb:09:6c:af:48:ab:fa:f3:3a:
         da:d9:7c:c6:3e:f9:17:d5:e4:06:66:a5:07:79:27:24:ee:2a:
         27:8a:9f:be:55:7b:3a:21:71:a1:57:2b:29:3b:74:48:7c:f2:
         48:15:b3:42:59:08:36:2e:da:ab:d1:ea:a2:bb:89:df:b3:05:
         56:a2:7f:0d:8e:c8:ab:e1:e6:2f:83:70:6b:c0:8f:51:26:ad:
         39:44:7e:85:88:56:b3:f7:f3:b3:50:3a:13:a7:03:5c:ba:3f:
         2d:d9:6c:83:a0:47:de:3b:8a:ff:fd:7d:a0:23:75:49:a4:51:
         44:97:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:20:55 2024 by rpki-client on console-fra.rpki-client.org