Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa
File:                     3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa (raw, json)
Hash identifier:          8WrffI7h0vov0UeK0SpPCjzPMhgKYFp8tdsbW3EfozA=
Subject key identifier:   41:5C:93:66:7C:90:70:A0:0E:A0:55:57:E8:D6:AF:39:55:81:9F:A5
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       594CAC024ECE6AC1ABA6240ADC9AF6C510009992
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:41:03 +0000
ROA not before:           Tue 30 Jul 2024 17:36:03 +0000
ROA not after:            Tue 29 Jul 2025 17:41:03 +0000
asID:                     264500
IP address blocks:        131.255.230.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4c:ac:02:4e:ce:6a:c1:ab:a6:24:0a:dc:9a:f6:c5:10:00:99:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:36:03 2024 GMT
            Not After : Jul 29 17:41:03 2025 GMT
        Subject: CN=415C93667C9070A00EA05557E8D6AF3955819FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:2a:da:93:de:2b:f2:76:77:75:7f:50:01:
                    d1:e3:35:78:72:d5:bd:84:92:5e:84:4a:b9:ea:5f:
                    9c:db:64:07:e6:52:0b:a2:7e:f7:d2:fb:df:fa:a4:
                    40:d1:7f:8e:85:fa:78:f6:be:c1:9c:61:66:22:23:
                    60:fa:64:a3:dd:93:9b:c5:67:67:05:2b:63:2e:7f:
                    62:4b:f4:84:ed:8f:d0:70:b2:2f:97:bc:ad:d2:19:
                    68:3d:39:83:0b:7e:0e:a3:e9:6a:b3:26:2f:5d:eb:
                    dc:f8:83:45:ac:87:c6:0d:ec:d8:a2:d1:cb:5a:39:
                    f8:2c:1e:74:23:7b:77:22:33:ac:4d:ce:b8:75:b6:
                    91:3a:1a:c1:9a:61:5f:17:fd:58:b3:32:83:20:ec:
                    67:7d:47:0a:bb:fb:2a:a2:45:9f:ae:95:6e:cf:8a:
                    24:36:0e:fa:51:95:4d:31:48:e6:7b:8a:c3:fd:eb:
                    6f:b5:44:bb:88:d8:9f:da:9d:61:db:a0:e2:00:9a:
                    1d:2e:1b:25:cf:fd:27:80:b3:b6:1a:1e:d8:10:e6:
                    61:b9:e7:8c:cf:a5:d8:14:8a:4b:f4:9e:8a:45:82:
                    08:15:dc:a1:0d:e5:b3:c4:cd:eb:15:1e:93:9f:a7:
                    aa:55:c1:be:a8:34:93:63:f7:03:a1:7e:4a:d2:df:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:93:66:7C:90:70:A0:0E:A0:55:57:E8:D6:AF:39:55:81:9F:A5
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:aa:8f:46:04:5b:3c:2e:6c:42:c4:e9:d3:ac:a7:2c:67:ef:
         cd:bb:fe:cd:02:99:5c:48:36:c3:e6:c4:a6:6a:69:b1:ef:d9:
         ec:44:3d:88:3f:72:80:e1:dd:0b:4d:0e:b5:b1:6b:78:93:25:
         24:19:2f:7e:cd:1a:e9:a3:ae:b2:71:e7:1e:86:56:f3:40:b6:
         fe:68:4d:b0:24:96:79:a5:b3:9d:44:f7:cf:2c:57:d2:1c:b2:
         f4:8e:d8:f5:76:8f:e7:8b:1f:10:ab:32:14:cd:d6:a2:fa:00:
         2a:fc:2a:bd:75:8f:c2:da:19:a7:96:6b:d3:36:29:6d:aa:ad:
         d6:dd:74:d8:f5:51:c7:ae:ef:3e:d5:f8:46:2e:eb:7c:8b:0a:
         be:5f:42:fd:7e:55:9d:f0:c3:b0:cb:d6:b5:80:02:b2:c4:e4:
         6b:c0:ca:44:04:ac:48:89:9d:86:af:1e:a6:15:5a:ab:78:9f:
         8b:1b:06:69:a5:14:d8:b5:17:0d:ab:5b:f8:03:b9:95:43:eb:
         a7:d0:b2:17:3e:86:40:25:0b:7b:51:31:e2:05:9a:50:62:44:
         ff:ac:b4:f3:8d:21:f9:a7:0a:5a:05:15:a1:cf:19:5b:83:54:
         d5:fb:f5:7e:e9:1e:68:87:9e:83:45:7e:73:3f:2f:d9:63:2e:
         7a:be:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org