Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa
File:                     3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          hABjYAqZrkBJHr6or6bbBd9QZATfPho3jT4ORqi6KzQ=
Subject key identifier:   BA:2E:73:7B:6D:C1:08:9B:EB:57:28:37:7E:03:7B:BD:FA:F7:A2:BC
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       6A9F2585D1459C688D6FD40E7EFDC87D57A99D94
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:44 +0000
ROA not before:           Wed 31 Jul 2024 22:20:44 +0000
ROA not after:            Wed 30 Jul 2025 22:25:44 +0000
asID:                     28165
IP address blocks:        131.255.101.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9f:25:85:d1:45:9c:68:8d:6f:d4:0e:7e:fd:c8:7d:57:a9:9d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:44 2024 GMT
            Not After : Jul 30 22:25:44 2025 GMT
        Subject: CN=BA2E737B6DC1089BEB5728377E037BBDFAF7A2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:57:9f:be:f9:4b:73:48:6d:ef:bc:45:91:
                    44:10:21:e8:1c:8d:06:25:de:db:ce:11:ee:22:35:
                    6e:5c:78:fe:4d:1b:99:d7:e7:70:15:c0:8a:a7:e5:
                    c2:03:53:9b:8a:a1:ed:99:21:fe:1b:e4:02:c9:70:
                    c6:d3:3c:d5:e5:fe:14:0d:83:12:61:29:5e:1f:65:
                    a7:25:9d:73:62:f7:d3:3a:25:56:d3:12:90:ce:ac:
                    c3:5c:01:4b:fa:e3:59:98:0c:8a:a4:ac:a4:2b:cd:
                    0a:56:04:73:07:84:33:33:f7:12:7f:47:ba:c2:c3:
                    2a:f6:a7:34:81:51:b1:f7:6e:99:39:20:f8:25:80:
                    3c:73:a0:0b:58:d4:93:56:e1:74:5e:a7:a2:53:00:
                    cf:b3:de:f3:7d:61:41:d0:14:d1:57:6e:2d:3f:61:
                    85:3c:bb:fd:30:f4:49:8d:73:4a:c0:68:74:63:22:
                    e0:83:2a:03:ee:c2:75:40:a8:8a:55:1a:1d:21:cf:
                    4a:38:4b:64:b7:8c:cb:fe:60:96:63:c5:ff:75:a0:
                    65:7f:dc:f5:d0:df:bc:da:29:1e:d0:8a:97:c7:c2:
                    01:8b:c8:64:f2:2e:8b:bc:f9:00:43:19:73:1c:2f:
                    ad:a3:bd:8f:67:74:fa:5e:07:33:1c:0f:70:d2:7b:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2E:73:7B:6D:C1:08:9B:EB:57:28:37:7E:03:7B:BD:FA:F7:A2:BC
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133312e3235352e3130312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:77:8d:14:71:75:bb:21:ea:f1:a7:58:db:2f:8f:20:ce:15:
         07:01:26:11:59:fe:1b:dc:da:02:56:d7:bb:b0:5c:36:38:ac:
         38:13:5c:97:ad:5b:af:d4:bd:5d:82:48:0e:2e:44:63:e2:26:
         76:a9:52:ee:93:7c:f0:13:8c:06:a0:a8:4c:0a:22:4d:3c:a4:
         76:f2:e4:45:b4:a4:77:45:26:49:41:9c:71:23:b4:7c:f8:2f:
         cf:de:74:1f:fa:89:ab:74:cc:e4:e2:e2:22:34:7d:1b:ce:0b:
         64:db:50:27:cd:77:00:ab:90:5c:ee:48:e3:88:03:60:f0:6c:
         07:4e:83:42:06:04:67:e5:ce:f5:61:c2:0f:ed:d6:4e:6d:8e:
         21:04:a3:91:82:6d:69:da:fb:61:91:53:dd:99:8c:4d:22:f9:
         ad:de:eb:55:92:35:2e:21:9d:ae:12:57:ae:9e:04:43:25:32:
         91:eb:a6:51:7f:02:0c:c0:c3:2d:d0:03:0b:e6:3a:5f:d3:c1:
         98:81:17:f8:67:89:6d:76:28:94:a6:95:f2:ac:22:e0:45:46:
         d9:80:1b:02:37:d3:4b:3d:fa:2c:08:0e:9b:66:72:a6:0f:cd:
         e9:ba:e8:76:9a:f5:57:4c:f8:62:06:a2:56:34:48:86:80:e6:
         b6:a8:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org