Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa
File:                     3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa (raw, json)
Hash identifier:          1P/OyOlmPh4Y46fyChOO2x0Us63tvb4gTd1bMWg+0AQ=
Subject key identifier:   83:0F:75:35:E4:B2:8D:57:32:CC:16:5B:E4:CF:4A:CD:76:18:B4:88
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       2D6C7D93A4CB0EA00AF2B7E8A9539BE0AFDDAEA9
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:09 +0000
ROA not before:           Thu 04 Apr 2024 06:44:09 +0000
ROA not after:            Thu 03 Apr 2025 06:49:09 +0000
asID:                     270946
IP address blocks:        131.108.155.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6c:7d:93:a4:cb:0e:a0:0a:f2:b7:e8:a9:53:9b:e0:af:dd:ae:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:09 2024 GMT
            Not After : Apr  3 06:49:09 2025 GMT
        Subject: CN=830F7535E4B28D5732CC165BE4CF4ACD7618B488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:96:ae:cd:ea:74:e4:55:ff:ec:b5:01:9f:79:
                    f1:f3:7d:e2:6d:2e:16:4f:76:1a:69:f4:2f:d9:b9:
                    a5:43:c0:e8:0a:a6:c4:32:68:06:ac:98:fa:2a:24:
                    63:2a:d4:57:4a:f3:bc:fb:60:5e:93:5a:d9:d4:24:
                    fe:2d:38:99:8a:ee:aa:f1:25:96:46:68:b9:da:33:
                    8d:50:88:8b:59:45:9b:e4:e1:ed:e6:1a:94:92:a4:
                    78:ee:55:a9:2c:0d:cc:74:a2:4f:52:3d:b6:c9:9c:
                    bc:a4:f2:1b:dd:49:c6:f9:8b:de:6c:a0:dc:74:d7:
                    ec:d1:97:53:a2:8d:88:10:84:80:e8:20:e6:c7:cc:
                    ea:a9:a8:0f:d5:de:b2:17:76:fe:df:8e:52:3d:13:
                    e5:13:68:df:e1:b6:e0:5d:b9:60:16:3e:2e:17:46:
                    75:b0:97:5d:c3:ac:3b:cc:6a:da:74:d4:8d:df:6b:
                    08:eb:21:d8:ce:67:7f:5f:30:11:c9:9c:f3:cd:be:
                    e7:18:b5:5d:2a:67:ae:40:a0:f0:d9:79:8e:cc:57:
                    96:da:0f:e9:a7:79:3d:e6:35:c8:c5:cf:99:a2:c8:
                    8e:b7:bd:93:d5:b6:06:ec:ca:35:26:ed:a6:ac:61:
                    1f:30:2d:9a:c4:a1:df:c3:ad:f2:40:fc:66:d8:c2:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0F:75:35:E4:B2:8D:57:32:CC:16:5B:E4:CF:4A:CD:76:18:B4:88
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:53:7f:be:2a:d0:f1:f0:22:33:bc:95:0d:2d:2f:36:e7:62:
         83:6a:bc:9c:b0:b8:6a:cb:35:4d:10:02:5a:1c:d6:9d:d2:1d:
         2b:f1:79:99:2c:25:75:50:c7:d1:ce:aa:15:6c:04:13:7b:20:
         92:1a:12:32:b9:b1:2a:63:96:77:5e:12:15:75:34:11:d9:ec:
         ee:56:50:c1:bb:95:ca:b9:52:32:66:99:d7:65:dc:af:24:33:
         e0:d5:5a:dc:b6:d7:61:fc:40:da:62:85:84:2d:bf:dc:3b:b8:
         6d:87:08:b1:83:79:ab:ed:54:63:5b:c0:55:71:62:66:2f:6c:
         2d:fa:2c:97:33:21:53:06:db:ad:39:dc:8b:93:a3:cd:0a:e9:
         01:ca:b7:82:d1:79:23:cf:39:8e:07:d8:05:da:7c:92:e1:f7:
         00:83:98:f6:5c:ca:22:94:57:a8:31:e9:a8:7c:a7:b2:b4:e8:
         43:0c:fe:ba:8a:51:fa:87:d9:6d:94:c4:2a:fd:77:38:2e:b5:
         ca:d8:11:a1:87:e7:26:d3:c8:2e:91:79:9f:79:cd:ee:c2:76:
         68:41:c0:ef:98:ce:8f:c3:3f:0f:30:91:87:3f:d3:d0:58:fb:
         99:de:ad:cb:85:67:a9:47:ca:bd:51:57:85:11:d6:57:df:66:
         0a:9c:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 02:49:01 2024 by rpki-client on console-ams.rpki-client.org