Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa
File:                     3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa (raw, json)
Hash identifier:          IkCREGhGC8iS6NNi8n90Dngj+h/J9DxcsV+W2ehBBuE=
Subject key identifier:   C8:85:2B:3F:76:0C:AF:5B:5C:4D:C7:E2:88:1E:1F:BC:D5:78:97:44
Certificate issuer:       /CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Certificate serial:       42D60E78E579F99DC9A0B4887B5C24143C82BDE6
Authority key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa
Signing time:             Mon 29 Apr 2024 02:37:47 +0000
ROA not before:           Mon 29 Apr 2024 02:32:47 +0000
ROA not after:            Mon 28 Apr 2025 02:37:47 +0000
asID:                     265943
IP address blocks:        131.196.160.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d6:0e:78:e5:79:f9:9d:c9:a0:b4:88:7b:5c:24:14:3c:82:bd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
        Validity
            Not Before: Apr 29 02:32:47 2024 GMT
            Not After : Apr 28 02:37:47 2025 GMT
        Subject: CN=C8852B3F760CAF5B5C4DC7E2881E1FBCD5789744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:e4:62:1a:48:eb:69:68:0e:54:b8:f4:84:
                    37:eb:62:62:e7:05:c1:c4:66:d6:75:7d:c2:14:94:
                    54:1e:5a:66:e7:bf:60:bc:f9:58:12:92:6f:d0:fa:
                    5a:98:24:c8:8d:98:58:e8:48:af:68:59:6d:85:23:
                    fd:00:90:44:4e:2f:5a:01:d3:10:49:2c:44:8e:00:
                    69:cb:ad:4f:19:48:30:d5:65:e0:85:fe:29:83:a0:
                    cc:d2:45:3d:52:8b:be:5b:85:3f:ef:a8:7a:15:50:
                    70:da:55:53:6f:cf:bc:7c:14:5c:58:11:d5:75:35:
                    8e:bb:2d:13:a5:71:b0:aa:83:10:cf:be:0c:ce:d0:
                    4f:8e:d7:48:d8:3d:39:d2:bb:f7:65:58:6f:fe:ba:
                    7d:84:92:34:9e:7d:c8:c7:79:17:61:83:a4:a0:61:
                    69:f8:64:8a:67:1a:db:f0:4b:93:58:58:d9:19:89:
                    d8:4a:b7:07:10:05:8b:96:1a:a9:b3:de:a3:59:21:
                    52:a0:7b:d2:28:9b:c5:24:66:fb:0d:7c:a4:5f:1f:
                    a7:ed:39:d5:bc:4d:70:59:ee:55:b0:a2:5e:76:cf:
                    0b:45:e8:fa:3b:40:6e:4f:fc:4d:4c:05:c9:77:e9:
                    66:8d:94:0a:7b:a5:7d:34:08:7c:e6:77:85:38:cf:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:2B:3F:76:0C:AF:5B:5C:4D:C7:E2:88:1E:1F:BC:D5:78:97:44
            X509v3 Authority Key Identifier:
                keyid:04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:36:d8:69:13:04:77:ae:21:57:39:d8:5a:ae:6b:e5:60:
         2e:0a:36:b1:c3:72:26:c1:01:45:25:37:e0:9d:9e:23:fb:ba:
         a2:78:e1:62:15:3b:19:83:54:3b:8d:42:f1:f0:6e:a8:00:2e:
         d5:7a:22:46:47:8d:04:1e:0d:c1:c2:40:e7:03:84:48:f3:f3:
         66:f3:93:0b:a4:6a:dd:62:27:75:50:09:4d:aa:73:bd:30:26:
         97:7a:9f:32:f0:82:70:70:49:a7:3b:55:17:61:13:95:c6:b2:
         47:2e:52:34:39:4d:36:41:01:c2:6f:01:46:01:5e:e7:3d:c8:
         9f:33:d6:26:79:9b:47:c6:3e:9b:c3:17:d9:60:cd:4d:67:39:
         bd:8d:c0:bc:01:98:1d:b0:b0:0d:a5:04:b0:44:be:7f:55:0a:
         01:a6:fe:d0:ac:c0:81:8b:fe:74:fb:a9:6e:d3:0f:e6:07:1d:
         e1:65:72:a6:a1:3d:d3:4a:aa:63:af:e7:64:dc:ec:24:a2:c8:
         bc:00:8a:ec:6d:e7:97:84:0c:83:74:fa:68:b1:6e:54:ba:c1:
         f5:b9:70:5a:30:bc:22:71:bb:c2:8e:18:29:c2:97:8c:ed:df:
         6e:a6:9b:e2:b6:f4:6a:87:91:f8:e6:10:eb:cc:51:04:ed:3d:
         dd:b1:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 22:32:25 2024 by rpki-client on console-fra.rpki-client.org