Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3332203d3e20323635393139.roa
File:                     3133312e3139362e3139382e302f32342d3332203d3e20323635393139.roa (raw, json)
Hash identifier:          NgFt8vT312VQwF9ySR5gpeI1kOmRI/g5A4C5UZF5P9E=
Subject key identifier:   B6:37:47:82:9A:3C:7D:9C:99:10:7F:A6:48:87:2C:01:81:3A:A2:65
Certificate issuer:       /CN=80556CFEBABF1E4CE1DE3B87F8DE67C53B4B6F17
Certificate serial:       25C432E425C06F80F613311652BB448E73F28EB7
Authority key identifier: 80:55:6C:FE:BA:BF:1E:4C:E1:DE:3B:87:F8:DE:67:C5:3B:4B:6F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80556CFEBABF1E4CE1DE3B87F8DE67C53B4B6F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3332203d3e20323635393139.roa
Signing time:             Tue 04 Jun 2024 11:39:13 +0000
ROA not before:           Tue 04 Jun 2024 11:34:13 +0000
ROA not after:            Tue 03 Jun 2025 11:39:13 +0000
asID:                     265919
IP address blocks:        131.196.198.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c4:32:e4:25:c0:6f:80:f6:13:31:16:52:bb:44:8e:73:f2:8e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80556CFEBABF1E4CE1DE3B87F8DE67C53B4B6F17
        Validity
            Not Before: Jun  4 11:34:13 2024 GMT
            Not After : Jun  3 11:39:13 2025 GMT
        Subject: CN=B63747829A3C7D9C99107FA648872C01813AA265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:11:09:67:df:d2:a7:bd:09:9e:0a:18:f6:
                    56:9b:a5:fe:2f:f8:1a:eb:2e:9c:fd:59:5c:d4:1a:
                    ad:9c:a6:cf:f1:9e:0d:8a:0b:3e:77:9a:8b:79:52:
                    95:20:74:d6:8c:1f:c7:02:c8:bc:4a:10:e6:fa:8b:
                    80:a0:42:dd:94:48:d8:70:f2:eb:1e:50:a2:9d:28:
                    74:a1:3a:74:53:c7:d8:f5:57:8e:87:64:1a:25:08:
                    db:39:41:79:9a:4e:f8:48:5c:0b:15:cc:7d:8b:ee:
                    cf:17:18:0a:bb:52:8f:c6:1c:59:6a:48:a8:17:7b:
                    23:ad:83:70:c3:13:66:ed:fe:64:08:c1:7c:aa:b6:
                    c0:31:5e:0d:62:ff:4f:a7:99:4c:c2:cd:46:df:b6:
                    4b:48:68:ef:ab:cc:cd:49:7f:e9:fa:1a:d6:12:a1:
                    cc:70:b2:80:fe:69:c3:e4:a8:83:9c:a5:6d:04:2a:
                    96:b1:9b:92:ab:94:79:48:8c:01:8f:39:15:cd:57:
                    fc:c5:17:38:42:82:b0:4f:d3:60:13:34:40:e6:eb:
                    e4:c4:f4:2b:ff:8f:eb:f8:38:31:07:ba:33:03:ff:
                    b4:b5:74:fe:ad:42:62:42:35:e2:16:7e:3f:ed:ef:
                    31:4f:0b:f6:bb:f2:fa:be:ec:6b:cc:df:47:7b:42:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:37:47:82:9A:3C:7D:9C:99:10:7F:A6:48:87:2C:01:81:3A:A2:65
            X509v3 Authority Key Identifier:
                keyid:80:55:6C:FE:BA:BF:1E:4C:E1:DE:3B:87:F8:DE:67:C5:3B:4B:6F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/80556CFEBABF1E4CE1DE3B87F8DE67C53B4B6F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80556CFEBABF1E4CE1DE3B87F8DE67C53B4B6F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3332203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:6f:76:5a:5f:a3:2c:c9:a7:46:49:a7:33:d5:92:bf:f2:
         59:05:12:e1:5a:28:55:ee:0e:84:41:25:87:8a:27:c0:1c:99:
         15:5a:cc:61:45:c9:27:29:54:4a:3e:1e:f1:a3:a1:03:ec:7d:
         ad:8a:a8:b6:60:92:94:51:6d:76:97:a6:4e:c2:0b:99:e1:20:
         18:0a:03:cd:1a:f8:22:b2:7f:cd:2b:a5:c9:37:80:5c:67:9c:
         1f:c0:52:c3:e1:71:05:be:07:a0:c5:97:35:51:17:a8:92:fc:
         2d:21:99:d6:d7:0d:01:6c:a9:d2:b7:e9:97:2a:1a:21:82:04:
         63:3d:0e:21:f7:92:6b:bd:ce:5f:31:0f:23:a9:32:8d:fb:63:
         ae:e7:7f:d9:1a:9c:da:10:58:dd:15:33:55:2e:c1:5e:93:32:
         13:10:cd:b3:17:4b:d2:e1:d7:8b:cc:69:7a:5d:68:93:de:35:
         75:46:a8:56:a0:9d:3c:e1:8b:25:e4:b6:a2:81:ba:0b:98:6c:
         8e:78:de:3c:f8:a2:d1:63:98:9c:a6:b4:1d:2e:28:50:62:55:
         aa:11:e6:9a:de:86:2a:fe:30:cd:08:88:fe:78:60:ef:d2:1c:
         57:a7:8e:2e:f5:ee:48:85:f7:c7:dc:80:62:57:f5:1b:58:6b:
         0a:da:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 18:30:25 2024 by rpki-client on console-fra.rpki-client.org