Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32342d3234203d3e20323634353030.roa
File:                     3133312e3235352e3232382e302f32342d3234203d3e20323634353030.roa (raw, json)
Hash identifier:          hz552WzuHLWk3nwY/8nE8wLKh2MXpsnpxsW5vr9x/4U=
Subject key identifier:   29:25:5D:96:41:49:E0:E6:D2:2E:92:3C:55:07:1C:14:61:E7:79:D6
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       2C42D4B453CB4874EF7CDB00C32A15992D5901CD
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32342d3234203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:41 +0000
ROA not before:           Thu 04 Apr 2024 04:22:41 +0000
ROA not after:            Thu 03 Apr 2025 04:27:41 +0000
asID:                     264500
IP address blocks:        131.255.228.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:d4:b4:53:cb:48:74:ef:7c:db:00:c3:2a:15:99:2d:59:01:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:41 2024 GMT
            Not After : Apr  3 04:27:41 2025 GMT
        Subject: CN=29255D964149E0E6D22E923C55071C1461E779D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:d4:70:23:75:be:69:14:ca:83:c6:ed:88:
                    e0:eb:3a:bd:83:19:c6:6a:55:07:ce:88:d7:db:5e:
                    86:69:10:31:64:45:21:fe:c9:53:67:4c:aa:a6:04:
                    95:5b:e9:81:63:f9:8e:e9:38:78:37:7b:5d:55:b2:
                    56:bf:17:f1:1f:3b:e3:8a:3d:a9:fc:57:6a:34:a9:
                    00:f7:ea:26:c3:0f:b4:9d:79:ce:22:fc:f5:62:ea:
                    13:6c:23:f1:e7:67:ac:f5:95:f1:55:8d:2e:40:8d:
                    8f:0c:19:c4:c1:b1:dd:5c:b3:4a:41:79:5f:90:e6:
                    e5:e0:4f:a7:13:ed:76:42:32:e6:0d:0f:0d:c6:69:
                    3e:7c:25:df:6c:e9:81:23:e6:96:98:db:53:f0:d0:
                    69:5b:ff:9c:5d:44:10:ed:1d:d7:dc:06:4c:ce:a3:
                    79:f9:97:97:fd:18:d8:73:a1:62:c3:32:32:ab:e2:
                    ab:ca:ae:3f:bc:32:83:c1:d4:4b:4a:d0:95:6c:b1:
                    4b:e8:db:d2:10:b6:e5:65:c8:de:4c:a7:59:a4:1d:
                    d3:4d:62:b8:81:7f:5b:0b:4c:92:90:c7:b3:58:26:
                    da:47:f1:81:da:fd:5c:00:ed:c7:6d:61:4e:f2:55:
                    94:63:59:1e:c6:90:60:56:8f:58:39:6c:f0:44:9c:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:25:5D:96:41:49:E0:E6:D2:2E:92:3C:55:07:1C:14:61:E7:79:D6
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3232382e302f32342d3234203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ea:49:48:65:cf:bc:5d:31:cf:a6:1c:da:0c:04:21:50:58:
         18:12:5e:6d:56:9b:42:ac:45:1f:dc:d3:72:7f:eb:52:76:f9:
         40:8e:41:fa:fb:52:90:c3:a3:2a:5d:d8:13:7d:81:47:e3:52:
         b6:19:02:e8:e9:53:22:dc:3d:7c:52:09:9f:62:ac:ab:e0:2a:
         75:e3:f2:89:90:d2:fd:ee:da:dc:3f:eb:af:36:9b:80:3f:98:
         21:df:61:33:cf:f8:c4:14:3d:59:33:04:fe:e1:d0:13:1a:58:
         8e:40:2a:d6:ce:fe:d5:5b:45:29:47:58:21:e7:e6:95:cb:d3:
         20:8a:be:f4:c9:4e:47:e0:18:7d:3b:8d:a9:ac:a3:8a:b2:c7:
         19:f7:5a:28:ba:dc:be:90:85:18:9f:c8:97:e2:17:97:00:1b:
         90:07:b8:69:4e:31:ff:53:4e:65:6d:a7:83:69:87:b7:b4:ae:
         fd:d4:32:5f:8b:f2:b9:69:70:32:66:54:6e:18:5f:20:6e:cf:
         d5:7c:0c:c1:67:96:c2:13:9a:f7:ca:3f:05:7a:ba:be:81:b5:
         36:9b:d8:d1:5a:f2:fc:92:1e:57:03:65:f7:77:e0:98:ab:f4:
         3e:58:aa:d4:b8:57:24:15:1e:2b:ac:5d:33:2f:c6:32:e9:cb:
         11:d5:ac:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULELUtFPLSHTvfNsAwyoVmS1ZAc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0NDFDQjI3Mzg2RTcxNTVGREYxOEIxMjRFNEI1MzhB
OEZBM0U1RDAeFw0yNDA0MDQwNDIyNDFaFw0yNTA0MDMwNDI3NDFaMDMxMTAvBgNV
BAMTKDI5MjU1RDk2NDE0OUUwRTZEMjJFOTIzQzU1MDcxQzE0NjFFNzc5RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8NRwI3W+aRTKg8btiODrOr2D
GcZqVQfOiNfbXoZpEDFkRSH+yVNnTKqmBJVb6YFj+Y7pOHg3e11Vsla/F/EfO+OK
Pan8V2o0qQD36ibDD7Sdec4i/PVi6hNsI/HnZ6z1lfFVjS5AjY8MGcTBsd1cs0pB
eV+Q5uXgT6cT7XZCMuYNDw3GaT58Jd9s6YEj5paY21Pw0Glb/5xdRBDtHdfcBkzO
o3n5l5f9GNhzoWLDMjKr4qvKrj+8MoPB1EtK0JVssUvo29IQtuVlyN5Mp1mkHdNN
YriBf1sLTJKQx7NYJtpH8YHa/VwA7cdtYU7yVZRjWR7GkGBWj1g5bPBEnDLhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKSVdlkFJ4ObSLpI8VQccFGHnedYwHwYDVR0j
BBgwFoAUAUQcsnOG5xVf3xixJOS1OKj6Pl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBqZXM0UHZmUmFCRHE2dTR0cUFYU3E5djNRUmc3YUxXQlg5VWRZZGg3
SkcvMS8wMTQ0MUNCMjczODZFNzE1NUZERjE4QjEyNEU0QjUzOEE4RkEzRTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQxQ0IyNzM4NkU3MTU1
RkRGMThCMTI0RTRCNTM4QThGQTNFNUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQamVzNFB2ZlJhQkRxNnU0dHFBWFNxOXYzUVJnN2FMV0JYOVVkWWRoN0pHLzEv
MzEzMzMxMmUzMjM1MzUyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP/5DANBgkqhkiG9w0BAQsFAAOCAQEAIupJ
SGXPvF0xz6Yc2gwEIVBYGBJebVabQqxFH9zTcn/rUnb5QI5B+vtSkMOjKl3YE32B
R+NSthkC6OlTItw9fFIJn2Ksq+AqdePyiZDS/e7a3D/rrzabgD+YId9hM8/4xBQ9
WTME/uHQExpYjkAq1s7+1VtFKUdYIefmlcvTIIq+9MlOR+AYfTuNqayjirLHGfda
KLrcvpCFGJ/Il+IXlwAbkAe4aU4x/1NOZW2ng2mHt7Su/dQyX4vyuWlwMmZUbhhf
IG7P1XwMwWeWwhOa98o/BXq6voG1NpvY0Vry/JIeVwNl93fgmKv0Pliq1LhXJBUe
K6xdMy/GMunLEdWsVw==
-----END CERTIFICATE-----
Generated at Fri Jul 26 23:25:59 2024 by rpki-client on console-ams.rpki-client.org