Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135342e302f32342d3234203d3e20323730393436.roa
File:                     3133312e3130382e3135342e302f32342d3234203d3e20323730393436.roa (raw, json)
Hash identifier:          Tat9c7eMML3tw2TSjrVfiV+cpVdpHIXUug8Es9Uv7r0=
Subject key identifier:   B7:7C:F5:6D:D3:1E:D3:1B:C3:BA:A7:F2:28:F3:18:FE:5F:36:F8:34
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       09C3C8A6142AE4C9CA703A6A6D7EFD3CA85045BA
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135342e302f32342d3234203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        131.108.154.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c3:c8:a6:14:2a:e4:c9:ca:70:3a:6a:6d:7e:fd:3c:a8:50:45:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=B77CF56DD31ED31BC3BAA7F228F318FE5F36F834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:66:a1:8f:a9:61:73:43:cf:7e:f9:a8:54:e3:
                    30:7b:a8:62:55:ad:c9:76:0a:49:f9:04:83:09:15:
                    1a:2b:fb:22:97:9b:88:42:04:16:67:77:2c:e2:ba:
                    e8:56:87:11:00:6c:c9:38:c0:86:b6:f7:fc:c2:36:
                    0c:f2:45:6a:34:35:2c:66:7e:55:d7:67:26:b9:f1:
                    39:28:d8:fa:bb:d4:c9:24:a2:09:2d:9e:40:ec:0c:
                    51:bc:84:f2:72:c1:df:5b:2f:5d:19:11:87:76:9e:
                    4c:59:2f:a4:34:d4:91:69:23:68:08:2a:d6:f3:4c:
                    15:c6:c2:3c:44:ee:6a:c0:a4:bd:40:81:4a:3e:21:
                    29:eb:e3:27:3e:e5:36:07:e4:7a:10:7e:29:6f:6c:
                    8b:b5:10:b8:47:23:b6:9b:63:f1:e3:a1:5d:8a:62:
                    19:93:38:ed:38:b8:5b:1c:98:6a:a1:d5:b9:99:66:
                    2a:29:7c:c9:3e:c2:4a:a8:31:3a:c2:70:84:62:a4:
                    c7:f2:50:31:37:ea:4e:69:b1:3a:45:e4:cb:7f:a7:
                    8a:0f:7c:3e:34:2b:71:5f:56:12:db:ae:8c:f8:2a:
                    8e:82:ed:cb:84:0d:36:d8:41:aa:c6:f4:35:ea:d5:
                    ba:e8:fd:6c:df:1d:c2:a2:f2:cb:f2:f2:64:6a:36:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7C:F5:6D:D3:1E:D3:1B:C3:BA:A7:F2:28:F3:18:FE:5F:36:F8:34
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135342e302f32342d3234203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:46:4e:53:19:e0:fb:01:e9:d1:ce:2a:a6:08:4f:09:bb:4a:
         a6:4c:c0:b0:ea:59:7a:65:22:1b:91:bd:ca:48:d8:32:11:4f:
         26:fc:c5:40:65:4e:6c:58:41:da:9c:5e:59:fe:89:e0:ec:79:
         bc:5b:f6:b6:51:78:23:cd:b5:65:77:0f:31:95:53:e7:5a:a0:
         80:3b:07:c9:c4:b4:a6:cc:83:a3:19:52:4f:7a:3e:78:5b:5f:
         a3:e8:02:01:c2:dc:bb:b3:2e:02:6d:1b:04:e6:f8:22:57:54:
         9d:bb:f0:02:b3:c1:e1:d6:71:26:5c:6a:00:e9:f7:60:5d:a4:
         76:5c:42:8c:2e:4d:e2:7c:7f:d6:4e:b1:3b:f6:38:5c:90:d0:
         ad:81:95:4b:6c:29:b7:39:ba:3d:43:e9:c3:35:3f:bc:b2:65:
         2d:8b:bf:98:11:84:3e:45:1a:93:aa:0c:5c:e7:ee:d9:40:0f:
         51:97:98:d4:6b:a6:05:e5:8c:04:fb:2c:f9:b0:90:d8:c9:22:
         0a:21:84:60:67:26:37:3e:ea:0a:19:cb:de:72:41:f5:e6:9a:
         88:2c:45:07:36:84:18:8f:4f:ae:74:3f:be:b1:10:12:04:bb:
         cb:c9:b8:2f:2b:cc:8d:17:72:64:d7:21:99:2d:64:90:ce:34:
         53:c3:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 02:49:01 2024 by rpki-client on console-ams.rpki-client.org