Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa
File:                     3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa (raw, json)
Hash identifier:          Uskjky4zrGvnTNTLlkdweStsibmW9P/tuTbiSJSNg5E=
Subject key identifier:   56:E6:00:EC:89:5B:26:90:63:F1:B2:D5:AE:FC:64:47:1C:7F:0F:C7
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       4C3558043C51289FBA885DBEF367AA3409DE4D08
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        131.108.152.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:58:04:3c:51:28:9f:ba:88:5d:be:f3:67:aa:34:09:de:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=56E600EC895B269063F1B2D5AEFC64471C7F0FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:56:a9:e7:de:a6:49:3c:c7:50:5c:d0:41:
                    ad:7b:06:d1:9c:7a:2e:fb:4c:73:3b:5e:a0:7c:51:
                    7b:3c:b9:45:e8:a9:73:68:bd:21:55:84:5b:19:09:
                    f6:ef:a3:b4:f4:57:3a:4e:27:06:ce:8d:ee:5e:e4:
                    3b:eb:dc:37:db:8c:50:e8:12:35:82:05:cd:e3:e7:
                    d2:8d:09:7e:c2:41:49:67:22:2d:83:f7:63:46:62:
                    1a:6c:00:e7:e6:5c:a6:f4:1d:6f:a9:a1:3d:93:5f:
                    93:b7:35:2a:4a:74:2f:50:0d:dd:4b:e8:52:f6:26:
                    e1:4e:dc:a1:08:04:7b:9a:84:d4:7f:32:da:ef:45:
                    ef:7e:7b:46:5e:f3:22:1f:7c:19:e3:95:67:c6:5a:
                    37:a5:16:44:19:4e:5a:ab:02:8d:19:ed:0b:d7:4a:
                    4c:3a:87:ce:f3:3d:ad:c5:b7:89:a4:78:15:ef:f6:
                    94:24:e9:85:10:3a:3a:b8:20:86:fd:77:34:94:a5:
                    9e:b1:71:9e:66:cd:ab:f3:49:d0:ee:05:74:f0:c4:
                    fd:dc:c0:00:20:da:85:f6:86:43:2c:ae:47:7e:cc:
                    96:cf:28:45:c0:0d:d8:08:16:3c:8e:3e:50:f9:38:
                    4d:93:c1:67:63:5d:a5:35:7e:62:22:4a:df:9a:b9:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E6:00:EC:89:5B:26:90:63:F1:B2:D5:AE:FC:64:47:1C:7F:0F:C7
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32342d3234203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:51:8d:45:2f:6a:7f:4d:d5:c8:18:35:64:9e:94:3b:68:63:
         64:01:37:5a:9e:cf:9d:de:80:94:70:ee:60:d6:68:ec:71:93:
         71:d8:76:b1:ba:e1:b0:3b:b4:5d:d2:31:a7:67:d7:72:af:18:
         fa:6e:36:10:56:e2:a5:c1:6f:f7:21:c9:da:da:24:c6:2a:a6:
         9e:9c:0d:d3:82:33:c9:69:ae:e3:cd:4f:af:8d:11:a8:94:64:
         4b:48:3d:26:61:c8:c5:41:19:cb:fa:73:4b:7d:4e:8f:0f:cf:
         02:d4:e5:3a:45:d9:f2:e8:df:70:97:a9:ba:bc:b1:69:ab:e3:
         6e:95:7d:fd:54:ad:ac:f6:fa:56:b4:6d:0a:33:55:36:a4:da:
         79:88:81:90:ac:fb:9d:2e:17:2e:f3:03:d0:5b:44:70:77:9a:
         40:c9:cf:c4:20:c5:65:e3:f5:5a:77:e9:1c:1e:0d:10:f6:2c:
         04:2c:eb:24:28:e5:22:60:c0:b2:d4:4a:35:e0:b9:43:28:e0:
         b8:d3:6d:eb:2c:74:df:e4:53:1a:0f:40:ed:8c:1e:a5:88:2c:
         b0:6e:b3:01:68:20:a4:9b:c7:18:0e:29:07:b8:08:d0:89:5e:
         7f:74:39:38:5e:05:e8:6f:20:93:4a:68:a8:15:33:2b:c0:5b:
         a3:18:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 03:32:09 2024 by rpki-client on console-fra.rpki-client.org