Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa
File:                     3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          C9mF25A5KPnsxte1O/tHfXS30d3aea5REi0qZXaKYMU=
Subject key identifier:   65:A7:16:54:02:63:F3:6F:F8:1B:90:BD:61:CE:6A:D5:1A:9A:31:EF
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       0D6DA9F1D81CDCABF2E4011B2B03F2CED4304552
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa
Signing time:             Mon 16 Sep 2024 08:31:17 +0000
ROA not before:           Mon 16 Sep 2024 08:26:17 +0000
ROA not after:            Mon 15 Sep 2025 08:31:17 +0000
asID:                     262293
IP address blocks:        131.161.132.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6d:a9:f1:d8:1c:dc:ab:f2:e4:01:1b:2b:03:f2:ce:d4:30:45:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Sep 16 08:26:17 2024 GMT
            Not After : Sep 15 08:31:17 2025 GMT
        Subject: CN=65A716540263F36FF81B90BD61CE6AD51A9A31EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:6a:6f:fb:5a:8e:70:a3:ba:65:59:5d:82:
                    af:4d:b5:ce:96:9a:41:45:89:d7:43:3c:c8:4e:70:
                    d1:5d:e8:cd:d3:2a:59:3e:70:32:3a:05:d9:8a:92:
                    da:c3:a3:6b:ee:2c:81:a8:6c:5c:29:17:26:f8:0e:
                    77:48:f5:df:e8:bb:ad:83:b8:f4:df:65:a9:e8:71:
                    64:bb:d2:25:b8:42:92:c1:3e:4f:0d:d1:4b:66:a6:
                    58:4e:58:01:c7:18:2b:be:80:c9:d2:f0:36:08:9f:
                    61:2b:3b:a7:07:6a:54:e1:b4:b7:22:8f:80:39:95:
                    e2:36:45:7f:14:73:06:7c:9c:ac:69:f8:a6:76:ca:
                    16:d8:9b:5d:de:01:20:f5:28:ac:9c:38:f2:cd:fd:
                    e0:67:f8:fe:57:ed:90:26:e7:90:79:ac:81:2a:7e:
                    88:36:8f:c9:a9:2b:4b:cf:0c:7f:bb:21:58:f6:14:
                    68:1a:08:48:97:14:68:c9:3e:cb:35:0f:47:c9:e6:
                    79:3d:48:4e:2e:cd:7d:00:01:89:77:52:88:ab:0b:
                    1f:4c:a0:90:be:62:00:aa:1b:0e:81:ad:22:f9:62:
                    82:f8:97:b3:d9:66:f1:a0:3e:8d:90:0e:13:1d:0c:
                    3d:f6:8b:51:41:26:c4:ba:16:0b:4d:06:f9:e7:5e:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A7:16:54:02:63:F3:6F:F8:1B:90:BD:61:CE:6A:D5:1A:9A:31:EF
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:cc:a8:1f:16:32:43:62:51:18:59:be:89:b8:e2:29:21:
         42:88:4f:f9:0a:c8:c5:8d:fd:85:95:39:c9:36:a3:5c:f0:03:
         d8:1e:7b:a1:90:39:be:82:6c:05:6a:3e:e7:88:31:7e:54:52:
         51:4b:b2:00:60:07:72:c5:5e:38:3c:d6:d5:83:1c:5e:94:5f:
         08:16:77:f8:a4:4c:2d:e2:2d:d3:18:48:85:6e:12:93:9e:ab:
         53:ce:cc:04:f0:f9:9b:c7:32:5a:6a:9e:1f:9d:68:c2:de:ac:
         79:5b:c0:e2:5a:58:34:2b:8c:62:93:cc:2e:2e:b6:71:ee:82:
         be:75:91:92:36:f1:d2:1c:f2:aa:50:e9:7c:ca:9f:87:d0:e1:
         1a:d2:b4:7e:b8:9b:b7:86:21:1b:c5:6e:ba:13:3e:a0:00:ef:
         14:a6:07:c3:60:b7:e8:c3:b1:9a:b8:5d:02:ac:83:f1:f2:28:
         81:44:ef:47:04:9a:6e:b7:44:e1:75:72:07:c8:8f:5f:92:80:
         6a:ad:0d:c1:ba:38:ec:94:47:94:11:1f:68:c9:ed:b7:5a:6b:
         43:d1:31:9d:2b:87:75:0e:df:8c:77:ef:13:bd:d2:a4:6a:49:
         4e:da:8b:0e:88:f3:93:ff:cc:ac:9e:93:e3:4d:38:56:c1:31:
         1b:d4:58:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 01:01:23 2024 by rpki-client on console-fra.rpki-client.org