Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
File:                     3133312e37322e39362e302f32322d3234203d3e203631373236.roa (raw, json)
Hash identifier:          RGYPZqE7j9wdF0UhDTib8wqNP75AvJB1CCrSaMMNA8c=
Subject key identifier:   63:2C:A4:C2:6C:4C:3B:A4:3C:83:C3:4D:86:BD:CB:DA:3A:96:B5:EB
Certificate issuer:       /CN=31913C696443B8596EC7722D368B4749C287A025
Certificate serial:       0742E368A05C1A9DBA4F60C74095750540F247C0
Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
Signing time:             Thu 04 Apr 2024 03:27:36 +0000
ROA not before:           Thu 04 Apr 2024 03:22:36 +0000
ROA not after:            Thu 03 Apr 2025 03:27:36 +0000
asID:                     61726
IP address blocks:        131.72.96.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:42:e3:68:a0:5c:1a:9d:ba:4f:60:c7:40:95:75:05:40:f2:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31913C696443B8596EC7722D368B4749C287A025
        Validity
            Not Before: Apr  4 03:22:36 2024 GMT
            Not After : Apr  3 03:27:36 2025 GMT
        Subject: CN=632CA4C26C4C3BA43C83C34D86BDCBDA3A96B5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:30:39:89:e9:f8:b6:03:50:a6:72:a0:b1:
                    c0:ec:12:5f:95:a2:08:26:d5:3b:aa:45:90:21:27:
                    c6:ed:ca:10:5c:22:8e:63:2c:2d:71:7e:65:db:39:
                    4d:23:43:0a:ea:6a:19:57:6b:82:49:07:ac:07:37:
                    f7:f8:14:e5:ad:95:67:ff:0e:e1:7e:cf:ba:c3:52:
                    31:44:c0:e8:4e:8e:0f:95:6a:df:33:64:c5:29:b2:
                    37:2f:c8:50:d7:31:9d:40:aa:1c:68:89:21:3f:35:
                    d7:33:be:56:a0:f7:89:9e:28:23:4e:3a:a5:3b:a3:
                    96:aa:3f:23:1d:9d:73:84:b4:51:94:85:dc:5e:13:
                    5a:f5:a0:f2:31:04:ad:a6:f9:4a:f4:39:60:67:cc:
                    02:e3:a7:f9:6e:2e:82:73:ba:ac:99:af:23:c2:ce:
                    94:29:cd:5b:01:98:ab:06:25:72:fe:d9:80:32:17:
                    5e:e7:d7:1d:ba:95:cf:78:26:37:fd:eb:77:aa:e2:
                    4c:16:30:3a:94:63:13:f5:38:8c:1e:5d:09:81:8d:
                    9f:cb:75:3d:c6:c1:a4:32:2c:af:f5:50:0d:d1:14:
                    f2:7a:9c:8a:e9:52:ae:f1:95:d4:e8:31:d8:19:d9:
                    98:c7:00:e6:4f:53:3c:6a:c9:93:d5:67:46:b8:30:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2C:A4:C2:6C:4C:3B:A4:3C:83:C3:4D:86:BD:CB:DA:3A:96:B5:EB
            X509v3 Authority Key Identifier:
                keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3133312e37322e39362e302f32322d3234203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:92:10:18:67:79:8a:70:d4:9a:07:69:9c:bb:c9:85:1d:d4:
         74:63:f5:8b:66:4f:2d:d0:8c:7a:57:71:0f:d7:75:35:42:50:
         ac:2d:10:2d:e8:31:c4:ed:e4:c0:2b:5d:1e:6e:ac:8a:53:90:
         0e:26:29:06:95:1b:9c:6c:b7:6f:c8:23:83:36:49:9b:da:d2:
         81:5e:34:33:84:cd:df:de:f2:3c:30:0f:51:81:1d:5d:34:53:
         2f:86:4c:11:7f:73:f9:71:9c:26:9c:a7:ff:38:5c:bd:1c:14:
         91:1f:c6:97:71:11:35:19:27:e9:79:38:a1:19:01:b3:49:43:
         6b:87:22:be:57:ba:aa:c0:f8:f5:9d:c7:1a:aa:21:15:8a:34:
         1a:de:bb:fe:35:61:e3:6b:19:78:22:ea:a0:50:1e:9c:b7:b1:
         91:89:01:18:2b:6e:83:57:16:ba:dc:eb:32:5e:9e:f8:f4:9a:
         b1:32:33:e0:86:b9:b0:51:e4:51:32:ed:bf:68:12:c3:67:89:
         39:22:95:44:49:dc:3f:cb:7a:00:54:21:42:0e:e1:38:4e:85:
         dd:79:8c:ac:04:de:31:01:ba:dc:6b:a4:4b:8f:b2:a2:28:7c:
         12:dc:40:03:94:0c:25:f4:73:8c:71:82:b4:c9:a5:63:88:11:
         e0:a8:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 09:26:57 2024 by rpki-client on console-fra.rpki-client.org