Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa
File:                     3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa (raw, json)
Hash identifier:          gC548w12bLAnuS2pQ3YIUx3szR/J9h2kIRrlitTDLzA=
Subject key identifier:   8C:B2:A9:00:C2:E0:20:F5:8B:16:0E:59:F8:56:76:71:FD:92:CA:E2
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       0E450459E6B5D9AB8CAA33D57CD2C6FDAE524FDD
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:40:54 +0000
ROA not before:           Tue 30 Jul 2024 17:35:54 +0000
ROA not after:            Tue 29 Jul 2025 17:40:54 +0000
asID:                     264500
IP address blocks:        131.255.231.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:45:04:59:e6:b5:d9:ab:8c:aa:33:d5:7c:d2:c6:fd:ae:52:4f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:35:54 2024 GMT
            Not After : Jul 29 17:40:54 2025 GMT
        Subject: CN=8CB2A900C2E020F58B160E59F8567671FD92CAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:f6:33:92:d4:7b:06:8d:7c:6c:aa:08:bc:
                    e1:02:a0:88:5e:35:bf:aa:28:93:61:d7:8f:24:5f:
                    86:0d:b5:df:0c:53:a8:0c:4f:f8:09:50:d6:7c:47:
                    0f:e2:a6:9a:4b:09:ac:99:70:9a:87:92:fe:77:3e:
                    56:26:5d:2e:2c:93:d8:86:6f:cf:c5:db:71:5e:90:
                    80:49:4b:82:46:61:06:f7:bf:09:7b:50:5a:e8:4b:
                    3d:79:d2:c7:89:39:28:55:a1:f6:ad:1f:8a:eb:38:
                    9a:3d:a2:87:32:99:cc:be:7d:32:71:9a:f7:04:b1:
                    71:a2:2c:01:f8:40:ca:2e:bd:e7:0a:a5:fe:d1:70:
                    9f:44:50:aa:b7:e2:d5:e3:e0:16:1c:47:70:91:fa:
                    e7:5c:14:37:e3:42:7f:81:c5:fd:06:a8:cc:0c:56:
                    b7:59:4f:57:9a:88:f5:dd:c3:8d:cf:d1:9a:71:55:
                    50:7e:85:79:8c:ad:73:64:e8:5b:b7:12:f9:58:89:
                    fb:0e:18:16:7c:93:11:b6:f6:35:75:1e:e3:ba:b6:
                    8f:2c:f8:26:99:3d:ea:0c:ba:d2:ed:6f:3b:9b:14:
                    f6:c6:54:a7:e9:4a:1a:95:f2:68:6a:76:42:d6:26:
                    4e:78:8d:dd:ca:1c:87:cb:f0:d4:24:6c:89:44:62:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:A9:00:C2:E0:20:F5:8B:16:0E:59:F8:56:76:71:FD:92:CA:E2
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:4e:66:85:4d:37:47:e0:fe:0e:a3:a2:b6:78:19:c2:b8:
         cd:b3:9d:7a:09:61:10:49:c7:6b:c2:e3:17:d8:09:94:57:20:
         81:40:ae:05:56:ca:95:ab:2b:1c:3c:ce:dc:20:5b:9c:9a:49:
         4c:31:a1:76:ba:e1:63:bc:d2:6d:e6:c8:1e:8b:28:aa:61:f8:
         31:07:63:30:72:2f:f8:9d:9e:9f:26:84:37:ed:39:1e:22:0f:
         92:1c:78:3b:bf:6d:97:b0:9f:d9:fc:be:1d:7e:aa:50:ee:c3:
         d0:dc:d3:5c:ad:1a:b8:0b:32:5a:24:de:81:85:7c:a7:97:14:
         f9:19:3c:cd:e6:b7:32:8f:45:aa:0b:e8:21:db:17:0a:f7:77:
         d0:2a:0a:ab:8c:a5:2c:74:00:ee:a8:ca:3b:7b:85:1f:6d:dc:
         03:70:7c:11:28:d7:ad:db:cd:61:30:d2:45:c7:d7:f7:44:5b:
         f8:92:a7:09:3c:e8:17:b3:61:ac:ca:10:7e:a3:54:81:c1:ac:
         5b:b0:1d:5d:1d:cb:5b:c5:ad:92:84:59:96:83:a3:83:86:98:
         29:50:f3:b6:31:81:91:05:71:6c:66:2a:82:07:30:9b:af:6a:
         d5:8c:9f:22:28:20:00:32:a1:a2:a7:07:87:d5:af:53:62:4a:
         1f:46:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org