Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa
File:                     3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa (raw, json)
Hash identifier:          S07oFTisPcQM3dlGES14JgO4Uz3NaIpWB/2YUcQPmkk=
Subject key identifier:   FE:6F:62:F6:0C:00:8A:A3:8D:5C:71:58:87:D1:BC:CF:83:C2:F8:FE
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       0603F901AD026B0735DF4AD720C83B2D240EAA12
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:44 +0000
ROA not before:           Thu 04 Apr 2024 04:22:44 +0000
ROA not after:            Thu 03 Apr 2025 04:27:44 +0000
asID:                     264500
IP address blocks:        131.255.230.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:03:f9:01:ad:02:6b:07:35:df:4a:d7:20:c8:3b:2d:24:0e:aa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:44 2024 GMT
            Not After : Apr  3 04:27:44 2025 GMT
        Subject: CN=FE6F62F60C008AA38D5C715887D1BCCF83C2F8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:70:37:5d:ae:1d:13:6a:ed:59:f8:84:99:
                    c1:ee:02:d5:fb:28:e1:81:f3:b9:68:f1:b7:ea:d3:
                    e3:29:7a:10:70:3a:4a:be:c6:88:0d:cd:84:e6:8d:
                    ee:00:1b:6d:1e:d0:9e:4e:5a:e1:05:14:d8:bb:1d:
                    21:06:80:d3:71:18:3a:04:8c:6c:42:40:af:48:08:
                    81:a9:6d:3c:76:62:14:a2:15:65:0d:95:60:9b:75:
                    65:e9:1d:bb:d3:09:bf:1f:39:32:3a:4e:85:8c:66:
                    96:32:33:86:bf:4c:bf:f4:69:cb:e7:f3:2d:89:0d:
                    e8:92:6c:e9:d8:e0:fa:66:f6:06:cb:09:f8:70:d1:
                    73:56:55:8f:17:39:53:c0:28:60:1e:b6:84:c0:d6:
                    70:76:c9:79:9f:3c:ee:0a:e3:91:b2:11:0c:97:06:
                    bc:e4:47:f8:f5:b3:8e:9d:fa:2e:2f:f2:da:97:20:
                    69:5c:09:99:4f:29:82:c8:1a:24:1c:28:85:09:bf:
                    59:84:b7:dc:0a:58:6e:c4:eb:34:9c:31:ef:e7:f0:
                    03:36:68:9c:2c:d7:ea:80:89:99:7c:25:86:e2:4f:
                    d2:17:df:ff:23:d0:db:23:86:3c:f5:eb:ab:68:21:
                    40:42:6d:81:12:28:e8:7c:35:d5:65:d0:c5:d6:31:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:62:F6:0C:00:8A:A3:8D:5C:71:58:87:D1:BC:CF:83:C2:F8:FE
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233302e302f32342d3234203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:34:34:7e:42:07:ea:08:67:25:08:4c:3d:59:a5:a2:9c:
         2d:db:70:d6:15:b4:ea:55:8b:df:d7:bd:1d:1d:fb:8a:10:a9:
         4e:06:d4:00:12:76:82:f6:9d:ec:cc:01:81:13:dd:0d:35:2c:
         dd:f5:21:1b:dd:15:35:f8:c1:8f:97:7d:a9:57:cf:7d:92:d9:
         85:d0:6a:e2:e6:6a:f4:8a:a3:43:d7:ce:ba:4d:50:79:11:1b:
         79:3a:aa:20:00:58:45:2b:31:08:6c:90:7e:48:75:b9:89:37:
         d6:17:9f:f6:17:ec:0c:e8:7d:4c:a0:c7:18:33:b6:a8:11:7c:
         7c:b1:02:74:89:60:22:e7:76:35:28:f7:f7:a4:d8:b1:ed:80:
         af:d9:80:39:f9:56:bf:e7:f3:5b:52:62:89:17:80:2f:a0:ab:
         0e:96:e0:01:cf:ac:cf:2f:b5:e3:67:4e:4f:e4:cd:fd:ba:aa:
         76:f8:1e:2d:1e:9a:82:90:4c:34:e4:ca:9b:08:88:66:cb:f2:
         12:d3:29:4e:93:3f:f5:b4:ce:9c:ce:ba:0a:47:eb:db:0e:4a:
         65:84:f6:2d:96:ea:07:4f:86:cf:00:25:aa:5b:46:05:63:fc:
         29:dd:a4:24:1b:62:e1:7b:d6:b1:7e:9a:89:ff:05:07:0c:75:
         79:08:89:a5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBgP5Aa0Cawc130rXIMg7LSQOqhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0NDFDQjI3Mzg2RTcxNTVGREYxOEIxMjRFNEI1MzhB
OEZBM0U1RDAeFw0yNDA0MDQwNDIyNDRaFw0yNTA0MDMwNDI3NDRaMDMxMTAvBgNV
BAMTKEZFNkY2MkY2MEMwMDhBQTM4RDVDNzE1ODg3RDFCQ0NGODNDMkY4RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwnA3Xa4dE2rtWfiEmcHuAtX7
KOGB87lo8bfq0+MpehBwOkq+xogNzYTmje4AG20e0J5OWuEFFNi7HSEGgNNxGDoE
jGxCQK9ICIGpbTx2YhSiFWUNlWCbdWXpHbvTCb8fOTI6ToWMZpYyM4a/TL/0acvn
8y2JDeiSbOnY4Ppm9gbLCfhw0XNWVY8XOVPAKGAetoTA1nB2yXmfPO4K45GyEQyX
BrzkR/j1s46d+i4v8tqXIGlcCZlPKYLIGiQcKIUJv1mEt9wKWG7E6zScMe/n8AM2
aJws1+qAiZl8JYbiT9IX3/8j0Nsjhjz166toIUBCbYESKOh8NdVl0MXWMUDZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/m9i9gwAiqONXHFYh9G8z4PC+P4wHwYDVR0j
BBgwFoAUAUQcsnOG5xVf3xixJOS1OKj6Pl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBqZXM0UHZmUmFCRHE2dTR0cUFYU3E5djNRUmc3YUxXQlg5VWRZZGg3
SkcvMS8wMTQ0MUNCMjczODZFNzE1NUZERjE4QjEyNEU0QjUzOEE4RkEzRTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQxQ0IyNzM4NkU3MTU1
RkRGMThCMTI0RTRCNTM4QThGQTNFNUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQamVzNFB2ZlJhQkRxNnU0dHFBWFNxOXYzUVJnN2FMV0JYOVVkWWRoN0pHLzEv
MzEzMzMxMmUzMjM1MzUyZTMyMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP/5jANBgkqhkiG9w0BAQsFAAOCAQEAZ7I0
NH5CB+oIZyUITD1ZpaKcLdtw1hW06lWL39e9HR37ihCpTgbUABJ2gvad7MwBgRPd
DTUs3fUhG90VNfjBj5d9qVfPfZLZhdBq4uZq9IqjQ9fOuk1QeREbeTqqIABYRSsx
CGyQfkh1uYk31hef9hfsDOh9TKDHGDO2qBF8fLECdIlgIud2NSj396TYse2Ar9mA
OflWv+fzW1JiiReAL6CrDpbgAc+szy+142dOT+TN/bqqdvgeLR6agpBMNOTKmwiI
ZsvyEtMpTpM/9bTOnM66Ckfr2w5KZYT2LZbqB0+GzwAlqltGBWP8Kd2kJBti4XvW
sX6aif8FBwx1eQiJpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 26 23:04:26 2024 by rpki-client on console-fra.rpki-client.org