Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
File:                     3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa (raw, json)
Hash identifier:          YmTL839LdwEnWVUHCx1eZ2iXjhIHbqNmDlmGK4GXyyQ=
Subject key identifier:   6A:82:6C:D1:CA:E3:1E:54:DB:1A:3E:40:F0:B9:15:3C:AD:21:BC:5B
Certificate issuer:       /CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Certificate serial:       0F3A7C60BB564A7300538216936744A3CD14E7D6
Authority key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
Signing time:             Mon 29 Apr 2024 02:37:46 +0000
ROA not before:           Mon 29 Apr 2024 02:32:46 +0000
ROA not after:            Mon 28 Apr 2025 02:37:46 +0000
asID:                     265943
IP address blocks:        131.196.162.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3a:7c:60:bb:56:4a:73:00:53:82:16:93:67:44:a3:cd:14:e7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
        Validity
            Not Before: Apr 29 02:32:46 2024 GMT
            Not After : Apr 28 02:37:46 2025 GMT
        Subject: CN=6A826CD1CAE31E54DB1A3E40F0B9153CAD21BC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:36:f9:2a:72:71:f0:c7:08:fe:4d:cc:70:
                    3e:43:db:6e:da:89:e8:fd:ca:a0:35:d6:4a:95:9e:
                    93:03:c3:d0:d2:5d:6d:68:45:b2:13:fd:5d:c8:ba:
                    21:32:c8:4f:78:89:a9:68:06:22:6c:0c:f3:9e:ba:
                    b5:c8:92:d9:4d:52:f2:9e:ec:4f:ab:cc:ac:86:8e:
                    f5:36:3e:23:ec:66:0a:e3:03:91:46:26:a0:4f:87:
                    96:47:92:f2:71:49:17:5c:f0:7e:cb:ff:0e:16:de:
                    10:78:80:42:8e:67:44:89:5d:f0:4d:32:7e:a2:ae:
                    6b:03:00:8f:d3:5d:c1:b2:f6:a6:d6:58:18:ac:14:
                    dc:37:01:5d:6d:8d:fd:95:52:f9:74:b8:0b:6c:c4:
                    a2:d1:2d:ac:88:53:85:6b:47:ef:0f:7f:56:87:0f:
                    96:90:c1:a6:d0:93:01:4b:05:23:5f:9e:69:33:fc:
                    2a:98:9c:27:7e:82:7b:05:64:53:c1:0d:11:cd:a4:
                    2c:4f:03:5e:21:a7:6a:de:37:ed:19:cd:66:62:89:
                    90:f3:11:37:ec:7f:d1:eb:ef:78:27:7f:e2:9a:2d:
                    c3:c3:e7:1e:2c:ac:cd:d3:bd:0b:d8:32:cd:63:44:
                    84:38:35:db:1d:88:f7:02:71:88:bd:05:5a:cc:2c:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:6C:D1:CA:E3:1E:54:DB:1A:3E:40:F0:B9:15:3C:AD:21:BC:5B
            X509v3 Authority Key Identifier:
                keyid:04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:a4:1d:56:b5:e5:7d:8d:93:b2:41:84:1a:08:42:38:97:
         64:ff:d4:c4:ff:cf:2a:de:44:4a:3d:ec:bf:f8:80:12:48:87:
         f5:1f:14:13:b2:86:03:bf:3e:73:0c:1f:8b:47:11:d0:0e:eb:
         6f:13:e0:c3:f0:f0:2b:c0:bc:88:3a:b8:46:f2:4f:18:eb:8a:
         c3:d4:00:d0:e7:ad:11:d6:4e:d6:8a:d6:75:b3:4b:33:9c:38:
         9f:94:af:a7:ca:78:3c:70:3c:26:a4:43:fc:57:49:91:55:42:
         5c:b9:ad:d1:5a:9c:13:1b:34:8f:ca:f0:4e:e6:c2:6a:79:98:
         e2:f1:4c:b9:41:a6:66:0e:4e:71:9b:1e:ed:c6:55:f4:4f:7c:
         64:f6:96:1c:db:e5:83:f7:de:b0:e8:05:f5:3e:ef:0f:62:d5:
         86:db:93:7d:74:b6:ae:18:14:2c:b6:3d:d1:c2:2f:c5:5b:70:
         8a:15:3c:3c:fd:b8:97:5d:03:36:bb:ad:4a:3f:6c:fc:b9:97:
         fd:95:9d:99:93:67:47:3e:cf:92:7c:0d:96:ea:8a:19:d6:59:
         ef:8d:5c:5a:0f:f8:2f:1c:c4:95:94:04:c9:07:91:94:7f:a9:
         f6:37:4f:0f:c0:31:f2:c0:01:4d:8f:6c:4b:06:1b:bf:bb:ef:
         e0:c9:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 22:33:00 2024 by rpki-client on console-ams.rpki-client.org