Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/3133312e3130382e36302e302f32322d3234203d3e203631363634.roa
File:                     3133312e3130382e36302e302f32322d3234203d3e203631363634.roa (raw, json)
Hash identifier:          FAA7Rmde8drx9JCQjzKO+WjAVKc+N/PUTi1g7XU+uGs=
Subject key identifier:   49:AB:EC:97:11:CF:2F:19:71:83:A3:04:AB:8B:A0:92:DE:C3:77:A0
Certificate issuer:       /CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
Certificate serial:       458794D72B99CD28E6CD08EA6FE103A7520A5272
Authority key identifier: A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/3133312e3130382e36302e302f32322d3234203d3e203631363634.roa
Signing time:             Thu 04 Apr 2024 07:28:36 +0000
ROA not before:           Thu 04 Apr 2024 07:23:36 +0000
ROA not after:            Thu 03 Apr 2025 07:28:36 +0000
asID:                     61664
IP address blocks:        131.108.60.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:87:94:d7:2b:99:cd:28:e6:cd:08:ea:6f:e1:03:a7:52:0a:52:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB
        Validity
            Not Before: Apr  4 07:23:36 2024 GMT
            Not After : Apr  3 07:28:36 2025 GMT
        Subject: CN=49ABEC9711CF2F197183A304AB8BA092DEC377A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:90:31:d9:43:71:37:2d:fd:08:31:c5:25:
                    be:b7:ed:47:1f:eb:8e:54:3f:f8:a8:d8:4b:03:11:
                    4d:16:7e:0f:b2:40:e5:f5:2c:9e:17:12:90:1b:74:
                    fa:f3:50:a9:96:fb:18:d7:5e:1c:1e:aa:e1:89:db:
                    5f:6f:57:82:0a:4a:50:9a:91:2f:98:86:ed:aa:94:
                    f0:b6:58:2e:ba:9a:e6:15:78:d5:39:4d:42:a2:72:
                    b5:45:8a:dd:4f:1f:75:a1:80:ed:c7:0c:1f:e1:b0:
                    00:e0:ca:18:0b:93:c9:41:87:fa:8a:99:2f:21:28:
                    e9:58:1c:4b:4d:ef:7d:9b:58:d5:fc:98:c7:00:94:
                    d3:49:c1:51:7f:2f:6b:e7:de:ea:7f:c4:fb:c8:d5:
                    da:47:92:e9:68:7f:c8:8b:f4:5a:b7:c1:39:3b:36:
                    aa:be:6c:b6:5b:0e:d7:b4:3d:02:68:fe:db:55:7e:
                    3f:27:63:a4:20:ab:54:84:0c:30:33:a3:eb:b0:9e:
                    88:0d:11:46:6c:c5:ff:92:76:d1:47:51:97:a0:78:
                    ca:6a:18:89:e2:0b:78:79:f9:cb:69:87:7f:d4:04:
                    19:b4:73:74:a9:17:53:71:bc:3b:4f:89:0c:93:6f:
                    44:12:a8:b6:6c:4b:e9:9c:66:df:0b:67:31:5d:c1:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AB:EC:97:11:CF:2F:19:71:83:A3:04:AB:8B:A0:92:DE:C3:77:A0
            X509v3 Authority Key Identifier:
                keyid:A9:1A:7A:0D:FE:9D:4E:42:EA:16:1E:14:DE:8B:AA:89:77:E2:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A91A7A0DFE9D4E42EA161E14DE8BAA8977E29FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/1/3133312e3130382e36302e302f32322d3234203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:03:4b:54:3a:39:20:8f:fd:f6:18:17:41:d4:1a:8f:fc:
         c3:60:6b:04:8d:50:4b:eb:bd:58:41:48:75:01:12:87:0e:72:
         d0:45:4d:b1:e0:f2:2f:27:68:a3:ee:17:dd:0c:13:d8:3c:1b:
         f8:56:b2:a5:1d:3b:cb:23:6c:25:ba:86:87:b8:b4:95:a1:d8:
         07:fe:69:cf:05:72:9f:d7:48:d7:e8:7c:4e:1a:b6:c8:51:f0:
         3d:ee:ed:ba:d2:8e:d0:f6:0f:a7:2a:de:5d:e8:79:70:c5:1e:
         6c:c5:4e:f9:32:51:f2:a7:58:b7:86:34:e4:71:e0:d1:79:6e:
         70:13:0e:2b:01:95:75:42:8b:e4:78:4b:2f:f7:3a:67:af:a3:
         c7:85:fa:a4:91:85:d6:28:10:85:84:6a:e4:c5:7b:b9:0b:30:
         8d:f5:b4:1d:76:2c:f3:94:5f:8c:37:f7:c4:43:4a:a9:ba:59:
         0e:47:48:a1:e3:e5:df:d3:57:cc:66:3b:66:75:b2:40:dd:9f:
         c8:0f:c7:26:22:4d:f6:d6:da:66:0a:95:df:a4:46:b7:3e:00:
         db:ce:d2:cb:5b:88:e6:7d:d2:47:1e:6c:2d:29:bc:5d:99:20:
         c8:c5:dd:81:e7:b2:fd:27:65:4a:34:72:cf:46:a5:ec:8c:ca:
         b2:62:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 06:42:45 2024 by rpki-client on console-fra.rpki-client.org