Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138302e302f32342d3234203d3e203631373337.roa
File:                     3133312e37322e3138302e302f32342d3234203d3e203631373337.roa (raw, json)
Hash identifier:          vSkkd3u7rtLJO+jSpTK7r2uLlKAleduHbbE+eFoq2tY=
Subject key identifier:   1E:CC:A4:2D:98:79:73:33:4C:18:E4:63:2B:F6:F1:8B:F6:95:52:E4
Certificate issuer:       /CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
Certificate serial:       5B40AAF591AE67E14F2E173990EE9EF3C9392A26
Authority key identifier: D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138302e302f32342d3234203d3e203631373337.roa
Signing time:             Wed 14 Aug 2024 19:45:38 +0000
ROA not before:           Wed 14 Aug 2024 19:40:38 +0000
ROA not after:            Wed 13 Aug 2025 19:45:38 +0000
asID:                     61737
IP address blocks:        131.72.180.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:40:aa:f5:91:ae:67:e1:4f:2e:17:39:90:ee:9e:f3:c9:39:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
        Validity
            Not Before: Aug 14 19:40:38 2024 GMT
            Not After : Aug 13 19:45:38 2025 GMT
        Subject: CN=1ECCA42D987973334C18E4632BF6F18BF69552E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:31:c4:47:ed:4c:ef:55:0c:a6:90:55:70:
                    fe:c1:d4:83:10:59:e4:38:db:36:27:1d:75:61:59:
                    a5:1c:11:58:91:50:ec:43:7f:39:2b:87:21:5f:8b:
                    63:88:bf:ee:bb:77:69:a9:f7:1a:14:c3:b0:8a:ee:
                    64:cf:a7:f5:c1:41:b5:36:c4:26:22:20:f6:c3:78:
                    94:06:da:07:dc:bc:79:c4:ce:ea:7e:11:5e:ac:06:
                    ef:04:5d:f3:c8:29:61:34:30:63:a7:95:50:4c:00:
                    19:ac:cd:59:80:3e:4d:f7:9e:fa:f0:11:1b:ca:ef:
                    5c:8f:4a:41:0b:3d:a2:21:f6:34:7e:dd:6a:50:76:
                    07:6d:5e:56:c4:7b:b7:48:b0:f7:e8:c7:37:ab:33:
                    77:19:6f:01:82:d3:b4:ad:7f:5e:04:62:fd:9d:f4:
                    98:7d:ee:a6:c3:92:e0:48:9d:25:26:10:11:6a:74:
                    fb:86:12:5d:ea:b6:e0:2a:98:16:20:ec:be:c3:50:
                    d6:c7:f2:b5:f9:91:2e:1b:18:25:b6:2f:a2:1d:51:
                    dd:4f:a3:b1:da:39:bd:ae:d0:8b:5a:1b:14:c9:a8:
                    c9:9a:57:ed:59:4e:b8:d8:41:b6:67:cb:16:da:d7:
                    6b:7d:ec:be:ed:e9:86:04:1a:d4:ba:5e:f9:56:1b:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:A4:2D:98:79:73:33:4C:18:E4:63:2B:F6:F1:8B:F6:95:52:E4
            X509v3 Authority Key Identifier:
                keyid:D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138302e302f32342d3234203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:2e:e8:ff:e2:b9:4d:36:8a:8b:c5:06:ee:83:de:db:f2:
         f7:26:ac:57:8c:dd:d9:0d:0f:d7:7f:39:df:3b:f5:79:c8:6a:
         4b:56:fa:37:d5:b1:15:7a:a3:ba:ed:82:d8:8c:97:b3:72:a2:
         2f:f4:8c:0e:6f:a4:69:fc:f6:46:a2:8c:12:85:49:2b:55:ac:
         a3:64:0f:0a:92:48:4f:5f:c4:40:17:da:4d:89:ac:f9:37:94:
         f3:0a:22:2a:1d:5b:9f:4b:d7:d7:04:a7:68:46:1f:ee:9b:47:
         a4:cc:97:fd:bf:f1:f2:77:cd:2d:e4:c1:c6:36:67:8e:4f:d2:
         aa:2e:f1:9d:55:21:86:25:a7:7f:ac:72:f4:b3:79:dd:08:12:
         a2:0c:cc:52:ef:9c:30:13:0d:77:29:be:f7:d3:96:5f:4a:53:
         89:52:92:10:dc:a7:51:60:f3:7b:d7:d9:db:4b:36:5b:28:f0:
         fa:03:70:0a:ee:c6:99:9a:91:6d:fa:a9:72:93:d3:36:ab:ee:
         9e:26:23:be:3b:5f:b5:32:a0:b3:9d:86:b1:78:0e:58:9a:c1:
         58:ce:a1:5a:22:73:f1:18:d5:73:2b:88:d9:84:2b:08:81:b3:
         e2:79:2b:04:d7:2c:37:1f:30:f8:ba:ff:25:44:95:48:37:79:
         3b:a7:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 21:08:42 2024 by rpki-client on console-fra.rpki-client.org