Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa
File:                     3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          6nvjRnL9G092lsnRbG2KalzQJSi6rwV3kJzotP3kGB0=
Subject key identifier:   6A:B8:D8:81:B7:A0:43:BC:28:78:52:E3:55:8D:F1:D0:41:CD:C9:45
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       1F8257495736B7AB196E4E49D169174F65B5ADE9
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:45:36 +0000
ROA not before:           Mon 01 Jul 2024 18:40:36 +0000
ROA not after:            Mon 30 Jun 2025 18:45:36 +0000
asID:                     28165
IP address blocks:        131.255.101.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:82:57:49:57:36:b7:ab:19:6e:4e:49:d1:69:17:4f:65:b5:ad:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:40:36 2024 GMT
            Not After : Jun 30 18:45:36 2025 GMT
        Subject: CN=6AB8D881B7A043BC287852E3558DF1D041CDC945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:51:43:42:95:f5:c3:46:af:2d:d8:46:fc:
                    96:fb:ed:b0:be:f7:92:3a:3b:67:8b:45:58:e0:68:
                    15:0d:d2:70:f9:68:41:e5:0f:1e:18:61:f2:72:0f:
                    7b:7b:9f:3e:14:cd:e4:95:ac:bb:b9:6a:4c:6e:a1:
                    16:1a:66:81:06:e7:0d:6e:52:dd:02:72:3e:68:b8:
                    8c:b7:06:0b:c3:51:3f:e2:b3:1c:55:d7:05:35:67:
                    df:43:7d:6b:79:59:0b:5b:d0:7f:06:f3:0d:e2:fc:
                    5c:2c:79:f2:89:e5:e3:4a:55:e3:c8:de:8e:bd:2b:
                    6a:fd:e0:cd:c9:2f:ce:78:1c:5c:b1:7e:86:ea:31:
                    18:b6:69:fd:84:33:7e:54:31:8d:96:58:3e:9c:c8:
                    76:53:3b:8e:33:d6:eb:e2:47:33:4f:78:72:9a:3d:
                    0b:ec:2e:5f:09:e7:be:78:91:bc:92:c0:c3:5b:95:
                    85:4c:d7:7d:cd:de:b3:52:e8:ed:55:b9:30:2e:8e:
                    8e:ba:e1:5a:40:21:43:9b:e9:f1:5c:78:b6:b4:35:
                    1b:24:4f:fd:35:66:38:82:9e:60:4a:48:f2:59:1e:
                    98:01:4d:05:01:f3:d4:a0:1f:e4:af:2e:c7:f9:89:
                    cd:9e:73:e6:82:93:62:4d:ef:ee:20:65:b2:bf:1c:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B8:D8:81:B7:A0:43:BC:28:78:52:E3:55:8D:F1:D0:41:CD:C9:45
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:40:d6:a0:33:26:69:49:23:6d:33:c4:c7:d7:d0:51:27:
         5c:0b:a7:c9:b5:25:29:2c:78:e5:83:44:09:92:91:1d:23:58:
         8a:94:8a:76:6f:91:ae:b1:7a:4b:54:ae:92:c6:66:41:ad:48:
         5f:ad:8b:00:3c:35:0f:26:af:2d:d2:14:c4:a4:eb:23:95:c0:
         02:91:c7:95:f1:94:2f:0e:e0:84:ac:f1:b8:9d:eb:3d:46:89:
         95:fd:90:e4:bf:b2:72:67:a3:6b:65:0f:a2:2a:7a:8f:91:cd:
         41:f7:c9:f2:6b:99:c4:e5:dc:43:ce:d2:8e:ab:94:90:0e:49:
         bd:01:11:17:db:21:98:e7:85:f3:b8:87:9d:90:29:3d:0f:44:
         f5:54:6d:a3:3d:90:3f:40:27:55:e2:e0:79:1e:f9:23:0a:b3:
         3b:cd:f3:30:4a:d5:62:58:0b:a4:c5:e4:5d:67:7d:e8:cf:1f:
         9f:31:a8:6b:c2:c7:b7:19:ba:a4:db:13:b7:4c:0a:6c:1f:f6:
         74:97:c6:62:75:89:9b:92:e9:96:00:99:da:bf:6e:69:bf:85:
         03:d5:ea:63:f8:a1:75:fa:2d:85:cd:e3:5b:9f:a2:0d:e5:37:
         b4:a0:87:3e:a0:53:27:70:2f:51:2e:03:5f:e6:16:69:d6:65:
         cf:2a:a2:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH4JXSVc2t6sZbk5J0WkXT2W1rekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExODQwMzZaFw0yNTA2MzAxODQ1MzZaMDMxMTAvBgNV
BAMTKDZBQjhEODgxQjdBMDQzQkMyODc4NTJFMzU1OERGMUQwNDFDREM5NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyVFDQpX1w0avLdhG/Jb77bC+
95I6O2eLRVjgaBUN0nD5aEHlDx4YYfJyD3t7nz4UzeSVrLu5akxuoRYaZoEG5w1u
Ut0Ccj5ouIy3BgvDUT/isxxV1wU1Z99DfWt5WQtb0H8G8w3i/FwsefKJ5eNKVePI
3o69K2r94M3JL854HFyxfobqMRi2af2EM35UMY2WWD6cyHZTO44z1uviRzNPeHKa
PQvsLl8J5754kbySwMNblYVM133N3rNS6O1VuTAujo664VpAIUOb6fFceLa0NRsk
T/01ZjiCnmBKSPJZHpgBTQUB89SgH+SvLsf5ic2ec+aCk2JN7+4gZbK/HMPjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUarjYgbegQ7woeFLjVY3x0EHNyUUwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACD/2UwDQYJKoZIhvcNAQELBQADggEBAHYtQNag
MyZpSSNtM8TH19BRJ1wLp8m1JSkseOWDRAmSkR0jWIqUinZvka6xektUrpLGZkGt
SF+tiwA8NQ8mry3SFMSk6yOVwAKRx5XxlC8O4ISs8bid6z1GiZX9kOS/snJno2tl
D6Iqeo+RzUH3yfJrmcTl3EPO0o6rlJAOSb0BERfbIZjnhfO4h52QKT0PRPVUbaM9
kD9AJ1Xi4Hke+SMKszvN8zBK1WJYC6TF5F1nfejPH58xqGvCx7cZuqTbE7dMCmwf
9nSXxmJ1iZuS6ZYAmdq/bmm/hQPV6mP4oXX6LYXN41ufog3lN7Sghz6gUydwL1Eu
A1/mFmnWZc8qoiI=
-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org