Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa
File:                     3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa (raw, json)
Hash identifier:          ZZ6WyfKBv/4cPxXqUPjqjCP04g8dQ8iHOvkc/RS0U1U=
Subject key identifier:   A9:1E:A2:34:D9:EE:F3:A9:B6:28:B1:E5:6A:D1:06:38:3B:9E:82:BE
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       337F7B30CCBD3A10C890A045B16CBF51B0D28146
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:43 +0000
ROA not before:           Thu 04 Apr 2024 04:22:43 +0000
ROA not after:            Thu 03 Apr 2025 04:27:43 +0000
asID:                     264500
IP address blocks:        131.255.230.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7f:7b:30:cc:bd:3a:10:c8:90:a0:45:b1:6c:bf:51:b0:d2:81:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:43 2024 GMT
            Not After : Apr  3 04:27:43 2025 GMT
        Subject: CN=A91EA234D9EEF3A9B628B1E56AD106383B9E82BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:e0:12:cc:fd:7d:d0:a8:3c:51:c5:01:91:
                    45:8f:c2:55:45:bc:ec:de:76:96:52:ab:13:54:2a:
                    5a:1c:0d:61:95:f8:77:f6:ae:92:f7:22:17:cb:ba:
                    ad:6b:14:b1:f3:5f:0a:57:e8:f0:a5:6c:b5:bd:ef:
                    7f:10:a3:75:bc:b8:69:e1:7f:15:73:95:64:a3:da:
                    03:1e:81:07:bf:34:3d:0b:57:23:6d:b6:fc:29:c0:
                    b0:ae:9d:39:bc:7e:66:f5:16:b4:88:1a:03:58:c0:
                    19:f0:ee:d4:0d:8a:24:21:06:08:5d:37:d0:8f:4c:
                    ac:74:81:34:5b:e4:2f:da:6f:02:14:99:46:fe:6b:
                    d3:a9:40:7c:db:e9:12:ff:46:60:1b:4d:1f:fc:a5:
                    91:dc:f4:18:19:97:bb:61:2b:b3:b9:00:2c:b3:b0:
                    e5:82:8d:f7:b4:65:9d:2a:cf:67:2a:af:dc:fd:b1:
                    bf:9b:0e:fd:d8:a8:64:f9:37:4e:80:f8:ef:e0:4d:
                    e7:70:28:a0:67:64:e6:e2:b4:34:cd:54:6d:a7:1c:
                    bd:b9:e8:4f:9e:d7:7e:0f:67:56:03:76:bd:63:f3:
                    96:47:97:82:54:9c:b7:1e:4f:9d:00:b4:f9:3e:83:
                    63:08:29:71:4b:8e:f1:e1:16:f2:b3:2a:fa:4f:59:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:A2:34:D9:EE:F3:A9:B6:28:B1:E5:6A:D1:06:38:3B:9E:82:BE
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233302e302f32332d3233203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:58:4c:d7:13:96:0d:2b:5c:9c:06:42:c4:4a:fe:65:27:7b:
         d1:40:3b:45:1e:da:54:a7:a5:72:8c:30:a3:d5:da:d6:81:40:
         07:c6:28:3c:3f:5a:91:68:57:b1:61:01:54:fc:05:49:0f:cf:
         b0:dd:67:59:0a:f1:80:8a:84:4f:02:d9:80:fe:cf:5e:45:ff:
         d6:79:5b:21:e0:4a:16:b5:3a:df:3a:17:a8:26:c3:22:36:2d:
         2a:1d:98:42:fd:45:42:26:44:04:7e:5f:b1:73:e9:71:41:41:
         cb:38:19:ed:e1:83:dd:6a:42:dd:11:7e:ac:72:e4:58:86:6f:
         a8:32:c2:2f:62:3b:06:9a:23:60:d2:27:d9:d5:b0:0c:35:a8:
         44:64:69:53:7c:6e:f2:ab:5f:87:74:44:ab:35:70:d9:55:14:
         9f:42:b7:bb:8e:27:5a:c4:89:15:98:dc:fd:bb:e8:23:5c:59:
         f0:f9:62:28:a1:b6:3b:38:49:71:a7:14:f3:0e:9e:82:72:cc:
         5b:7d:fa:84:93:11:09:70:14:59:f2:b5:4d:4e:f0:8e:62:7e:
         95:92:6f:81:72:ee:41:29:86:4d:9e:16:95:03:00:1e:43:44:
         4d:70:79:15:4b:33:c9:e8:de:85:8d:09:46:71:f6:7a:51:a8:
         d7:0c:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:04:26 2024 by rpki-client on console-fra.rpki-client.org