Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa
File:                     3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa (raw, json)
Hash identifier:          +vV0hJezMbbqDwuwXECo/wLlApL0Y30QlgzP+TNexT0=
Subject key identifier:   AD:08:2C:C5:75:52:ED:F6:7D:BA:9B:DC:65:BF:BB:9C:CD:1D:B7:63
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       729232F5524517067A6477F5A95490C080FC8BB1
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:27:44 +0000
ROA not before:           Mon 01 Jul 2024 19:22:44 +0000
ROA not after:            Mon 30 Jun 2025 19:27:44 +0000
asID:                     28165
IP address blocks:        131.255.100.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:92:32:f5:52:45:17:06:7a:64:77:f5:a9:54:90:c0:80:fc:8b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:22:44 2024 GMT
            Not After : Jun 30 19:27:44 2025 GMT
        Subject: CN=AD082CC57552EDF67DBA9BDC65BFBB9CCD1DB763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:f6:aa:25:d9:11:d7:43:6b:cb:d7:f8:db:
                    c0:7b:b3:21:f3:ec:8a:60:1c:76:c8:e8:5a:76:77:
                    18:ab:e3:41:2f:0b:4a:6d:18:26:eb:a9:19:d0:f0:
                    20:55:a9:7d:98:ac:cf:28:4b:f0:0c:56:0c:b8:90:
                    92:c1:6e:fa:90:49:0c:08:c8:27:0e:f2:3a:72:6d:
                    40:54:64:0d:15:44:e9:2d:27:ca:55:80:92:6a:85:
                    fb:7f:f4:56:3a:d4:6b:4e:ba:a8:67:fc:04:c3:2b:
                    70:c6:e0:e1:cd:b4:01:3a:e4:a3:c3:32:b3:d8:9d:
                    1b:7f:98:65:4e:0c:98:c7:65:a8:2a:2a:72:e2:5f:
                    3a:1a:2a:72:c4:15:c1:89:29:78:58:55:ae:ed:13:
                    55:ed:4f:5f:db:63:81:54:f8:57:32:f7:8b:15:e3:
                    66:71:ef:ba:81:df:ce:d3:9b:06:67:4c:d1:46:db:
                    87:16:fb:37:7a:e7:8d:58:09:48:c4:8e:41:04:c2:
                    0a:bb:10:24:9c:76:69:23:ba:de:9c:9b:db:b6:35:
                    8f:0e:e8:3e:ca:58:8d:4f:8f:7b:b9:38:ca:11:65:
                    f9:b7:67:b7:40:f2:6e:49:1c:4e:18:c1:31:d4:39:
                    1d:45:d1:f6:42:84:fb:77:03:e6:2a:ea:c8:a6:48:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:2C:C5:75:52:ED:F6:7D:BA:9B:DC:65:BF:BB:9C:CD:1D:B7:63
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:93:05:43:3b:3b:42:49:5e:c5:9f:19:d4:42:88:eb:d6:bf:
         c3:13:b6:a2:11:42:f2:36:ba:22:db:14:3e:cd:97:73:fd:b3:
         26:0a:df:e7:ef:a5:fa:20:59:eb:5c:1a:a4:1e:fe:06:19:c4:
         d7:b2:c2:ac:37:2f:fe:ce:4c:b5:19:21:6e:f6:d1:59:01:d2:
         7d:eb:09:8c:28:a4:a2:94:84:b8:6f:13:55:f3:15:b1:59:c0:
         e1:45:b8:df:0e:e4:47:a3:dd:e0:1d:3a:24:3a:85:65:c7:ae:
         ac:21:92:d5:89:96:af:2f:79:8b:7b:6d:32:73:c6:db:8f:26:
         e9:24:d2:cd:78:dc:9d:60:23:48:32:dd:08:4d:e5:f5:83:33:
         cf:62:59:a9:9b:7a:a9:d3:c6:33:14:0b:e6:ac:12:fc:bb:c5:
         1d:25:58:72:30:26:2d:94:3b:b1:93:a3:41:60:be:a1:7b:d7:
         12:cb:5b:34:56:1b:0b:f5:7c:51:d2:43:77:8d:46:5f:dc:42:
         fb:6b:60:18:9f:ab:83:6c:44:57:ed:87:a5:cf:46:eb:57:21:
         34:95:2f:dc:b5:9a:8b:87:fa:f5:81:bc:24:95:8f:de:49:f2:
         f9:b5:fc:68:c3:71:c3:fc:69:8d:8e:d4:6a:5b:3e:b7:9e:2e:
         79:e6:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org