Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa
File:                     3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          XznQPvADHHB8Mg5fw8qrQ3fbVPqY+c+FZVfSQN3Jy04=
Subject key identifier:   E8:8E:70:63:53:AF:25:DF:87:64:69:7D:06:94:89:8A:68:B5:6C:3C
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       14FB6ECD9C16511345724F46C47507F6AFDC9C69
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 18:45:40 +0000
ROA not before:           Mon 01 Jul 2024 18:40:40 +0000
ROA not after:            Mon 30 Jun 2025 18:45:40 +0000
asID:                     28165
IP address blocks:        131.255.102.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:6e:cd:9c:16:51:13:45:72:4f:46:c4:75:07:f6:af:dc:9c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 18:40:40 2024 GMT
            Not After : Jun 30 18:45:40 2025 GMT
        Subject: CN=E88E706353AF25DF8764697D0694898A68B56C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:d8:63:20:5b:15:1d:24:d3:57:26:6b:f9:
                    24:5a:b1:2f:03:e9:6d:b8:6e:5c:d3:2d:6f:f1:09:
                    4f:c0:ac:35:a7:25:4a:89:8d:df:f3:6b:56:e0:1c:
                    55:9b:d3:18:5a:d3:a0:ec:f7:39:4f:20:9e:1b:40:
                    b0:89:3e:b7:ed:a3:95:65:7e:f5:cb:93:4a:90:58:
                    4a:65:d3:22:ee:89:fb:68:69:ad:d2:ff:f7:b5:1f:
                    5d:3b:33:20:8d:72:da:ef:db:7c:2f:ea:36:70:c6:
                    4b:cc:36:76:90:cb:98:50:10:47:58:fa:b6:22:c6:
                    11:8f:90:b9:3a:8d:47:c4:15:a4:12:64:ad:05:6f:
                    0e:ce:8c:07:5f:54:5a:a0:2e:aa:53:ad:95:38:ef:
                    5d:d1:8a:7f:a4:1b:dd:32:99:10:15:7c:83:5c:e2:
                    8c:48:a8:38:16:d0:01:fe:df:03:19:d3:0a:b5:38:
                    cf:ab:8a:ea:98:79:a5:f9:ff:15:84:63:3f:ec:2a:
                    72:dd:df:57:4e:df:ef:db:4b:57:85:7b:87:5f:df:
                    65:e0:53:c9:31:59:1c:cc:f2:67:21:ea:3a:f1:f4:
                    1c:1d:67:f2:a2:a1:43:fb:01:18:27:93:62:4a:91:
                    d5:eb:5d:d4:62:64:54:4f:58:6f:3b:d1:bd:a5:d9:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8E:70:63:53:AF:25:DF:87:64:69:7D:06:94:89:8A:68:B5:6C:3C
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b0:9c:4c:5a:28:cd:93:a8:b4:87:48:93:a9:1c:d7:83:c9:
         2d:d9:a7:ec:c3:72:cc:3a:4f:ac:6a:63:eb:ec:f8:14:a1:44:
         e5:80:9f:ca:49:bc:28:1f:c5:86:79:77:6c:70:ed:ec:76:e6:
         65:bd:96:09:0c:85:7a:fd:a9:36:47:d5:a4:d2:eb:58:6b:b6:
         3f:e6:1f:b4:56:b2:d7:b8:64:0c:2d:6b:6b:26:26:18:1c:b0:
         43:e2:0a:3e:0d:00:0e:c0:49:98:3d:e9:82:16:a5:d5:e2:f0:
         58:7e:67:7d:14:1b:6d:7a:d6:64:00:e4:29:f4:38:f8:11:7c:
         88:19:2c:e3:dd:66:7b:08:be:3c:34:1d:81:7d:e6:4b:c6:07:
         e7:f8:37:e9:84:5c:be:46:43:43:59:07:c8:ff:7e:4e:c2:eb:
         5a:e3:8a:15:22:2b:06:48:f1:54:b8:b3:3e:66:16:aa:55:63:
         ba:6d:f6:aa:01:99:38:97:58:c4:9d:3c:d8:e6:bc:3d:6a:23:
         9b:44:9d:81:b6:74:e5:03:38:ea:ce:fd:ae:fb:78:fc:3f:1d:
         0d:90:4c:62:a3:e9:71:42:6c:b9:4b:d2:ed:44:d5:d0:ed:eb:
         00:ec:9f:d4:e8:8d:91:ef:c1:c1:1f:ec:e0:fd:c8:1b:9d:43:
         f0:b0:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org