Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa
File:                     3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa (raw, json)
Hash identifier:          KmsreO8bylqxbXUq8gQL6oK8EtkJJhw8K4Hf8BhTR2Y=
Subject key identifier:   02:5F:48:18:48:36:CE:1D:4F:BD:1F:98:17:F8:EF:A3:82:2A:E2:31
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       52E3AEB7E14F221EBFA8ECAD6A8B2456737BBC23
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:45 +0000
ROA not before:           Wed 31 Jul 2024 22:20:45 +0000
ROA not after:            Wed 30 Jul 2025 22:25:45 +0000
asID:                     28165
IP address blocks:        131.255.100.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e3:ae:b7:e1:4f:22:1e:bf:a8:ec:ad:6a:8b:24:56:73:7b:bc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:45 2024 GMT
            Not After : Jul 30 22:25:45 2025 GMT
        Subject: CN=025F48184836CE1D4FBD1F9817F8EFA3822AE231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:a3:fd:0b:0d:43:a5:30:8d:87:14:1b:b7:
                    7b:d3:d2:96:99:50:64:8d:f8:58:fd:83:4b:a7:b3:
                    c1:4b:a1:cb:93:d5:24:4d:d6:9a:af:cc:e0:e2:96:
                    18:fe:84:15:9f:26:bd:ab:e8:b3:5c:41:42:ac:8e:
                    91:a8:ad:a6:45:f7:c1:63:22:52:c4:93:3e:a3:19:
                    ba:44:ea:40:2e:1b:45:b9:0e:db:23:a9:62:0a:89:
                    ee:bc:e8:8f:59:73:86:e2:93:78:79:96:20:ae:87:
                    14:26:a5:ec:b5:b3:8d:70:07:31:0d:e0:5c:51:38:
                    ae:a6:03:6c:10:58:41:3f:03:c8:3b:e1:c3:28:db:
                    61:e7:2c:93:ac:24:45:9e:53:a7:3c:84:42:d4:3f:
                    9b:03:49:ac:ac:43:48:c9:f1:c4:3c:c7:ed:c5:1d:
                    c7:4b:a6:d6:65:b6:87:99:a0:95:56:92:02:b4:33:
                    5d:7a:95:8e:cf:ad:24:de:23:e5:f0:e0:a4:de:0d:
                    35:25:42:b0:07:12:80:24:1a:21:7c:e8:bf:f1:3f:
                    f2:d1:d7:b0:5b:41:8e:1a:94:21:68:a2:20:40:39:
                    ef:a9:1e:7e:4f:b4:e6:d8:a7:99:82:f5:64:1d:cf:
                    2e:57:53:6c:ce:c5:b3:3d:d0:d5:38:4f:a1:82:eb:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5F:48:18:48:36:CE:1D:4F:BD:1F:98:17:F8:EF:A3:82:2A:E2:31
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130302e302f32322d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:bd:c4:09:41:83:64:33:44:97:77:a0:8f:56:e7:e4:c7:
         d6:0f:5f:3f:62:e3:48:0e:07:f6:8a:ef:c3:9b:8e:c6:79:13:
         80:cd:85:a5:4e:8e:74:25:9a:fc:cd:73:fa:7d:4b:d2:c8:a9:
         3c:3b:9c:bf:18:d8:cb:ae:ce:c9:45:2f:f3:94:0d:df:6c:9e:
         5d:9d:88:3e:c3:5e:a7:16:ed:37:0e:7b:e8:37:33:84:01:dc:
         8f:8d:10:47:56:85:34:34:f8:96:ed:84:35:ed:2b:25:9c:02:
         26:68:3d:b3:08:6b:08:ef:d0:03:0a:c1:d5:ed:9e:ea:11:57:
         d0:4a:b8:f6:bd:c9:e7:5a:a3:21:79:2e:48:9e:14:07:f8:7b:
         2e:77:f0:5a:b1:42:76:ca:19:95:11:f8:0e:d6:67:ab:46:09:
         f0:82:7a:b0:db:e4:49:29:9c:88:34:75:ed:b3:a7:98:81:d5:
         b6:2e:cc:e5:2a:1a:77:56:64:16:0b:df:cc:0b:9a:33:12:33:
         91:ca:d5:51:9d:e0:c0:2a:1d:27:44:b5:8c:a2:31:3d:10:47:
         1f:37:8b:fa:e4:2d:e1:70:c7:7b:f0:4c:80:d1:c9:1b:00:64:
         90:99:d2:17:5e:ad:c6:5f:2c:5e:b4:0b:16:f3:d2:ee:b1:d7:
         c7:9e:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org