Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32322d3232203d3e20323634353030.roa
File:                     3133312e3235352e3232382e302f32322d3232203d3e20323634353030.roa (raw, json)
Hash identifier:          wMD38Pmryf65FRpZWNA28SLKsZnLC3Rd9E69fQa16nA=
Subject key identifier:   DA:F8:FD:3E:DD:5E:29:E1:C5:A7:F4:1E:31:7A:62:CA:6D:35:D7:4A
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       0B3A8E80962EE8C2F666605F4B89ABDAE88EC387
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32322d3232203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:46 +0000
ROA not before:           Thu 04 Apr 2024 04:22:46 +0000
ROA not after:            Thu 03 Apr 2025 04:27:46 +0000
asID:                     264500
IP address blocks:        131.255.228.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3a:8e:80:96:2e:e8:c2:f6:66:60:5f:4b:89:ab:da:e8:8e:c3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:46 2024 GMT
            Not After : Apr  3 04:27:46 2025 GMT
        Subject: CN=DAF8FD3EDD5E29E1C5A7F41E317A62CA6D35D74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:40:ce:48:e9:ce:d6:71:f7:bb:ab:16:cf:
                    ad:a5:d6:30:a2:83:e3:1c:f9:db:02:74:43:2e:09:
                    51:ae:76:e7:96:eb:77:e3:4a:7d:1a:30:97:5b:19:
                    0b:f0:e0:9f:16:4c:3a:05:6a:6d:c9:06:83:e3:1c:
                    bf:6b:88:51:31:60:e5:59:ce:1a:a8:bc:7d:24:96:
                    dc:54:70:c4:80:24:d4:45:ec:25:49:26:4f:be:6d:
                    b7:59:d8:c8:30:d0:6e:eb:c8:9b:a7:aa:23:ce:ca:
                    cd:06:a0:34:82:24:ba:54:89:bf:21:8e:2b:e5:a0:
                    08:ff:7c:67:5a:4b:ae:1f:c1:92:b2:55:bc:49:0a:
                    c6:86:7e:12:09:0f:57:3e:17:8f:70:69:98:a1:ad:
                    dd:28:ab:60:31:c5:fd:75:a6:39:e3:e3:11:af:8f:
                    8b:c2:c1:1d:0c:96:1f:21:aa:fd:ea:00:45:c1:ba:
                    2e:b2:b9:64:c2:a3:21:dc:ec:8a:73:95:c1:05:88:
                    ba:f6:e7:7f:a5:2b:9d:1e:aa:32:99:98:5e:bc:79:
                    f3:5b:af:27:40:60:67:3c:df:41:10:ca:33:7a:10:
                    4d:e3:54:fd:ec:34:58:ca:de:47:66:e6:26:5d:06:
                    51:38:00:42:0e:87:e7:56:0c:12:51:a8:a8:eb:40:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F8:FD:3E:DD:5E:29:E1:C5:A7:F4:1E:31:7A:62:CA:6D:35:D7:4A
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32322d3232203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:17:d1:49:f3:16:59:32:5b:18:33:42:9b:2e:27:03:c4:
         5c:5a:5a:11:6f:c3:29:dd:f5:f9:08:10:aa:86:62:25:3b:65:
         fb:91:55:64:e9:0b:36:e3:84:1b:3b:a2:22:39:6f:81:e5:bc:
         d8:55:8a:a3:78:08:fc:1d:a6:62:cf:6c:bf:14:1e:71:4b:64:
         81:a0:75:4a:44:14:7d:8a:f1:2d:34:2c:32:3d:d4:a1:32:e7:
         3f:c4:ed:39:bc:77:5c:53:41:18:22:3c:83:03:99:ca:ac:f6:
         78:96:4d:77:6c:ec:e5:42:d0:a9:ea:4f:fc:a7:12:10:37:07:
         25:dc:97:4c:b7:7b:de:18:c3:f2:79:bb:aa:7b:a5:77:b1:7b:
         48:f8:ae:6c:2c:fb:7d:9b:57:93:78:64:e7:d7:30:d5:a4:6e:
         47:fd:28:20:6c:cf:08:9b:8c:7e:7e:75:a9:2b:ef:1e:44:8e:
         a7:3f:df:13:ac:30:78:03:84:72:41:01:0e:d7:87:bd:d7:b2:
         2c:86:4e:ab:52:42:92:06:5f:b7:ed:63:d5:e5:1b:dd:d5:b3:
         b0:17:88:56:70:71:ab:f8:e7:93:62:a8:de:11:c7:72:24:ef:
         58:72:e7:20:f8:e9:58:66:f4:65:49:6a:a0:d9:28:7d:11:cd:
         e1:03:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:04:26 2024 by rpki-client on console-fra.rpki-client.org