Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
File:                     3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          VbdtJETP7JdzoVaTgcbHWdvtvqLKoVgSLoTFxdR6Ip4=
Subject key identifier:   86:56:44:16:07:2E:22:4A:14:CE:F7:DF:D8:51:2C:8A:6A:9D:A9:31
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       414CB94B8224EE37B3BD4597F50045AB5E716BA8
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:44 +0000
ROA not before:           Wed 31 Jul 2024 22:20:44 +0000
ROA not after:            Wed 30 Jul 2025 22:25:44 +0000
asID:                     28165
IP address blocks:        131.255.100.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4c:b9:4b:82:24:ee:37:b3:bd:45:97:f5:00:45:ab:5e:71:6b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:44 2024 GMT
            Not After : Jul 30 22:25:44 2025 GMT
        Subject: CN=86564416072E224A14CEF7DFD8512C8A6A9DA931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:5f:50:6c:5e:ee:1e:c4:b9:83:7d:9f:0f:
                    93:04:7e:22:20:ec:b7:ce:a8:3f:c4:17:c3:64:72:
                    0f:54:49:b1:08:d0:ad:dd:7f:da:3e:d2:83:9d:ca:
                    43:5d:05:67:75:8a:a8:e5:8d:99:49:5f:ff:35:9c:
                    a7:9d:8c:ce:b2:14:7e:ff:01:57:2a:e9:7f:50:d4:
                    63:e0:8c:38:f6:ef:65:58:e7:33:e7:5e:d8:8b:80:
                    f5:20:81:ea:fa:b7:0e:49:70:0a:bf:b3:44:42:b3:
                    bf:b6:31:99:94:2d:bb:6a:18:8b:27:fc:fe:59:a9:
                    bb:1b:ce:73:d4:45:99:22:86:45:6c:48:8f:5c:db:
                    14:e8:b4:66:14:a1:da:26:58:aa:78:1f:c7:1c:9c:
                    b0:76:f2:58:4a:6c:8f:92:de:60:02:1c:16:37:e6:
                    c0:26:74:32:c8:65:11:af:ad:33:46:f8:a9:8c:fc:
                    99:51:a8:af:a5:70:52:bf:fe:21:69:4d:7b:59:d8:
                    e4:b3:ca:d4:07:57:b5:93:49:a0:88:bc:4b:23:fa:
                    fa:2c:f0:31:46:cb:d3:1a:b0:b2:5e:d8:db:3a:27:
                    7e:a8:38:33:ea:35:6f:c0:df:11:51:a6:0b:3e:61:
                    d8:62:74:57:4e:d4:b9:3a:04:ce:60:6a:a6:f2:a1:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:44:16:07:2E:22:4A:14:CE:F7:DF:D8:51:2C:8A:6A:9D:A9:31
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:47:31:67:92:ea:56:60:9b:3f:86:81:d2:ec:8a:51:d1:00:
         32:c8:5e:75:3c:bc:c1:a3:e2:48:5a:e0:a5:6b:1b:fc:77:38:
         86:e5:42:77:bf:ad:ec:36:61:e3:19:ac:bb:53:5e:8d:7a:5a:
         c3:af:d9:28:48:08:e7:8b:3f:1d:f2:40:db:1b:62:c6:d2:4d:
         0a:f4:43:45:71:82:2e:e9:2f:28:ce:15:88:19:c5:ef:f6:b8:
         e2:55:0f:25:a5:ff:8b:eb:77:03:00:ca:c3:c6:b8:19:26:b5:
         ee:0f:38:31:c6:47:0b:30:ec:fb:97:44:4d:04:3f:1a:2e:76:
         52:7d:c5:aa:4d:a9:50:03:35:00:f7:e1:d5:f9:42:38:08:3d:
         b6:8f:b4:04:3b:6c:72:03:b6:46:17:2e:38:89:fc:8b:7c:ab:
         d9:32:a2:19:0f:96:b9:f2:d6:51:cb:04:76:a5:eb:89:09:cd:
         ec:11:e5:f6:36:30:40:fc:c6:fb:c2:77:9b:d7:aa:16:b8:8e:
         d1:ee:9d:34:29:00:3e:f8:6a:30:82:9c:bd:e6:36:22:dd:60:
         61:60:6f:e4:2c:6a:c0:7c:47:55:f4:a6:28:73:66:c2:0a:29:
         d8:7d:dd:fb:50:ee:16:97:76:10:cc:25:e2:e9:2b:7f:e8:7d:
         0d:99:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:42 2024 by rpki-client on console-ams.rpki-client.org