Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa
File:                     3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa (raw, json)
Hash identifier:          6eR0qTXbyiyarAy6q1fZxL7NREZKYL94WxPVplp4jbU=
Subject key identifier:   B0:93:C7:47:0A:C3:1E:12:03:CF:C4:C8:58:2D:27:D5:33:7A:BC:5E
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       0D8E5E8683ADE7CA7220C2E81012210478B405FF
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:46 +0000
ROA not before:           Thu 04 Apr 2024 04:22:46 +0000
ROA not after:            Thu 03 Apr 2025 04:27:46 +0000
asID:                     264500
IP address blocks:        131.255.228.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8e:5e:86:83:ad:e7:ca:72:20:c2:e8:10:12:21:04:78:b4:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:46 2024 GMT
            Not After : Apr  3 04:27:46 2025 GMT
        Subject: CN=B093C7470AC31E1203CFC4C8582D27D5337ABC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:88:36:39:8a:eb:0b:78:ff:bb:8a:ec:68:
                    b5:ac:9e:c3:c8:a9:e9:1c:2f:c4:10:10:52:45:5e:
                    c7:77:de:cf:19:7c:69:8e:72:e6:70:32:27:7f:24:
                    00:e9:f8:b8:59:f2:23:71:02:2f:48:51:1b:a0:02:
                    da:22:29:ad:35:f9:a6:80:f9:af:0a:a0:57:aa:51:
                    cb:3b:3a:10:66:2d:41:84:70:b5:2f:3b:f7:ed:2e:
                    b7:09:d6:1a:99:26:37:b0:a1:78:cf:33:72:f2:2e:
                    f6:fc:e0:5d:b2:0e:3c:e3:1f:c0:1b:74:56:62:70:
                    31:35:8f:10:2f:a8:4f:6e:6a:be:c1:5d:50:76:a4:
                    cf:03:b3:62:40:b1:ef:41:b6:ed:1b:28:24:54:d4:
                    10:df:41:2c:3b:70:26:52:d7:78:79:d8:d6:45:c9:
                    80:bc:28:9d:39:6f:9d:42:c4:00:e1:cd:73:f9:fa:
                    9a:ce:5f:4b:35:63:5a:f7:8c:fd:ef:bb:0d:a1:ad:
                    09:46:4e:00:4e:eb:aa:88:75:f6:50:4f:ce:6d:2a:
                    56:f6:55:91:2c:3b:67:ee:f4:bd:b2:0b:d1:9e:c4:
                    f3:1a:99:36:e9:82:f2:21:d2:ac:38:9c:07:d8:98:
                    c1:76:35:00:e2:d9:12:5f:1c:15:6b:d6:f8:11:0f:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:93:C7:47:0A:C3:1E:12:03:CF:C4:C8:58:2D:27:D5:33:7A:BC:5E
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:0a:3a:3f:4b:e0:2a:37:0c:b5:3b:bf:35:ae:08:71:65:
         43:48:90:d6:69:56:8a:96:1f:ad:2c:40:8c:c2:5a:d8:4c:f4:
         09:3a:a2:a0:48:e1:ba:42:29:b5:d4:ad:2f:1d:10:22:e7:37:
         9c:c6:43:3b:7e:ad:04:87:05:68:f2:74:28:41:af:0e:e6:30:
         f3:b4:7d:6e:80:1d:3f:15:5c:f7:eb:9c:42:8f:63:22:e5:14:
         03:44:7c:f1:0c:af:bd:85:40:c4:c7:ca:c2:b6:6a:76:59:36:
         36:81:e3:0a:16:08:c0:9f:3d:e4:c7:0b:ca:72:a1:d3:ae:ee:
         be:4b:ba:8a:38:d4:6f:5c:db:ef:a5:c5:34:7e:34:5d:db:1e:
         15:f4:b0:69:1a:16:33:21:08:bf:92:b7:97:76:fd:1d:4b:44:
         49:6c:2c:93:85:55:d2:f1:b7:7b:7d:5c:b7:c4:b0:9e:be:d2:
         35:b3:8d:bd:c5:7c:b8:78:d7:88:51:a7:e7:ba:43:50:7b:ec:
         a1:68:ca:16:9d:1a:86:13:af:51:fc:bf:56:d1:58:8f:d3:71:
         d6:c3:f4:cf:01:a0:0b:d9:34:ff:ba:52:92:ea:dd:42:27:2b:
         ff:87:ce:94:29:d8:f9:f1:d2:27:dd:1d:41:92:1d:64:28:35:
         8e:65:54:ef
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDY5ehoOt58pyIMLoEBIhBHi0Bf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0NDFDQjI3Mzg2RTcxNTVGREYxOEIxMjRFNEI1MzhB
OEZBM0U1RDAeFw0yNDA0MDQwNDIyNDZaFw0yNTA0MDMwNDI3NDZaMDMxMTAvBgNV
BAMTKEIwOTNDNzQ3MEFDMzFFMTIwM0NGQzRDODU4MkQyN0Q1MzM3QUJDNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALIg2OYrrC3j/u4rsaLWsnsPI
qekcL8QQEFJFXsd33s8ZfGmOcuZwMid/JADp+LhZ8iNxAi9IURugAtoiKa01+aaA
+a8KoFeqUcs7OhBmLUGEcLUvO/ftLrcJ1hqZJjewoXjPM3LyLvb84F2yDjzjH8Ab
dFZicDE1jxAvqE9uar7BXVB2pM8Ds2JAse9Btu0bKCRU1BDfQSw7cCZS13h52NZF
yYC8KJ05b51CxADhzXP5+prOX0s1Y1r3jP3vuw2hrQlGTgBO66qIdfZQT85tKlb2
VZEsO2fu9L2yC9GexPMamTbpgvIh0qw4nAfYmMF2NQDi2RJfHBVr1vgRDzchAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsJPHRwrDHhIDz8TIWC0n1TN6vF4wHwYDVR0j
BBgwFoAUAUQcsnOG5xVf3xixJOS1OKj6Pl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBqZXM0UHZmUmFCRHE2dTR0cUFYU3E5djNRUmc3YUxXQlg5VWRZZGg3
SkcvMS8wMTQ0MUNCMjczODZFNzE1NUZERjE4QjEyNEU0QjUzOEE4RkEzRTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQxQ0IyNzM4NkU3MTU1
RkRGMThCMTI0RTRCNTM4QThGQTNFNUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQamVzNFB2ZlJhQkRxNnU0dHFBWFNxOXYzUVJnN2FMV0JYOVVkWWRoN0pHLzEv
MzEzMzMxMmUzMjM1MzUyZTMyMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYP/5DANBgkqhkiG9w0BAQsFAAOCAQEAZVsK
Oj9L4Co3DLU7vzWuCHFlQ0iQ1mlWipYfrSxAjMJa2Ez0CTqioEjhukIptdStLx0Q
Iuc3nMZDO36tBIcFaPJ0KEGvDuYw87R9boAdPxVc9+ucQo9jIuUUA0R88QyvvYVA
xMfKwrZqdlk2NoHjChYIwJ895McLynKh067uvku6ijjUb1zb76XFNH40XdseFfSw
aRoWMyEIv5K3l3b9HUtESWwsk4VV0vG3e31ct8Swnr7SNbONvcV8uHjXiFGn57pD
UHvsoWjKFp0ahhOvUfy/VtFYj9Nx1sP0zwGgC9k0/7pSkurdQicr/4fOlCnY+fHS
J90dQZIdZCg1jmVU7w==
-----END CERTIFICATE-----
Generated at Fri Jul 26 23:04:26 2024 by rpki-client on console-fra.rpki-client.org