Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa
File:                     3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa (raw, json)
Hash identifier:          kW5EjJu83OmvNz6HE95kXBBN+Q8XpUW1O8bSims+GjA=
Subject key identifier:   F1:28:23:74:57:32:25:A1:49:F1:FD:12:06:5C:62:0D:3F:64:D7:B8
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       0DAC0D158ACA9E7C8B3C2B8204A7099695632ED8
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:41:02 +0000
ROA not before:           Tue 30 Jul 2024 17:36:02 +0000
ROA not after:            Tue 29 Jul 2025 17:41:02 +0000
asID:                     264500
IP address blocks:        131.255.230.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ac:0d:15:8a:ca:9e:7c:8b:3c:2b:82:04:a7:09:96:95:63:2e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:36:02 2024 GMT
            Not After : Jul 29 17:41:02 2025 GMT
        Subject: CN=F1282374573225A149F1FD12065C620D3F64D7B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:69:87:f4:54:a7:af:41:9d:cb:58:fc:5a:
                    21:06:c8:53:68:2b:6a:e9:fc:20:d5:83:33:fe:1b:
                    a1:ac:a7:6e:18:6c:cb:bb:7f:62:fd:23:97:1f:72:
                    9a:b6:71:a9:86:a1:a3:5a:6d:06:a6:a5:3a:3e:17:
                    71:e9:aa:34:70:62:26:28:b1:02:c4:b1:53:1b:71:
                    09:e1:64:11:a2:9f:26:ca:84:df:c9:7c:41:b6:30:
                    c4:fb:e0:77:c9:77:e9:1e:ea:7d:ae:ac:69:36:ef:
                    c6:eb:2c:8b:46:0c:8b:73:ff:ae:eb:e8:81:a4:15:
                    6b:69:e6:1d:15:5b:8c:63:81:1c:ad:f0:ae:06:fa:
                    c2:8b:60:a1:f6:24:30:20:e3:72:15:38:1a:85:97:
                    39:17:74:5e:cd:0c:2d:f3:1b:4b:e7:70:e9:59:ae:
                    c7:f2:fc:fa:32:c3:17:dc:7f:1f:17:d9:06:c1:00:
                    e3:fe:4f:5a:fa:9f:9c:39:53:d7:91:38:03:a3:c8:
                    94:e9:14:e8:31:93:54:70:31:5b:af:2f:bd:e5:cc:
                    42:3c:b2:d0:01:bd:6b:e1:a4:83:d6:28:a1:02:b1:
                    21:f8:ac:d4:5c:5a:2f:5d:8b:7d:82:65:37:97:2e:
                    22:23:6b:a7:16:91:a8:84:6f:91:d9:e8:1b:c6:cc:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:28:23:74:57:32:25:A1:49:F1:FD:12:06:5C:62:0D:3F:64:D7:B8
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:6d:0a:fd:e2:1a:eb:41:73:21:b0:30:67:82:37:90:d5:
         f2:63:9e:6b:11:6a:59:86:cc:0a:b2:9a:96:20:89:9f:8a:07:
         f3:f0:9e:66:da:c2:06:dd:3f:1b:12:6e:d5:50:e4:cd:9b:82:
         7f:97:35:7f:41:69:ce:b8:50:7b:b9:c9:25:6d:86:e0:e8:4d:
         d7:38:1a:dc:26:e2:16:57:fb:4c:9d:b6:f8:8e:a9:1f:6e:9b:
         4d:79:58:26:8b:5b:b7:f2:88:1e:44:ff:2e:23:ab:e9:a2:28:
         66:8d:02:a9:5a:5f:7b:a1:0d:9f:2e:54:8f:d2:11:23:20:15:
         73:6c:a7:ce:d5:8f:49:59:98:88:16:93:e6:67:5d:07:37:f2:
         b4:7e:4b:2f:7c:de:ea:f3:8f:79:6e:93:0a:2a:a5:71:f0:89:
         eb:e7:3d:83:e5:a3:fb:29:a4:20:db:9c:7e:bb:ae:c7:d7:50:
         a1:30:16:0d:ab:a1:5e:b6:63:a5:79:9b:eb:64:be:3f:12:b8:
         52:e3:f5:f7:ca:f2:99:e2:a4:ed:77:dc:a0:ef:b8:2d:91:86:
         9e:df:d1:6d:f3:4a:10:e9:f4:64:24:6f:59:91:db:54:ee:25:
         20:b0:7a:3f:58:97:e8:3e:9f:13:26:57:00:ff:1a:d9:80:3d:
         4a:74:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 00:34:39 2024 by rpki-client on console-ams.rpki-client.org