Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136322e302f32342d3234203d3e20323635393433.roa
File:                     3133312e3139362e3136322e302f32342d3234203d3e20323635393433.roa (raw, json)
Hash identifier:          zFPRbeP9MiUqUjGrFAX2HyLnBJ7YiomH5xkos2CaVoM=
Subject key identifier:   31:1A:9F:78:D8:FF:98:EE:D6:E3:72:16:03:55:87:C2:67:0F:75:F3
Certificate issuer:       /CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Certificate serial:       175176E6840EEF8D5E22F59100FA9908C2DF8DDF
Authority key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136322e302f32342d3234203d3e20323635393433.roa
Signing time:             Mon 29 Apr 2024 02:37:46 +0000
ROA not before:           Mon 29 Apr 2024 02:32:46 +0000
ROA not after:            Mon 28 Apr 2025 02:37:46 +0000
asID:                     265943
IP address blocks:        131.196.162.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:51:76:e6:84:0e:ef:8d:5e:22:f5:91:00:fa:99:08:c2:df:8d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
        Validity
            Not Before: Apr 29 02:32:46 2024 GMT
            Not After : Apr 28 02:37:46 2025 GMT
        Subject: CN=311A9F78D8FF98EED6E37216035587C2670F75F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:8d:9f:de:f6:63:06:8d:cf:1d:b1:6b:ef:
                    d8:37:1c:59:c0:40:6d:f9:4f:d8:ac:d5:61:00:a7:
                    92:2e:7d:2f:0d:fa:b8:cc:b5:ec:d3:fd:b6:a3:0b:
                    ae:a0:92:2c:ca:e7:e7:a6:68:e0:53:1e:66:bf:02:
                    09:8a:f5:2e:49:98:b3:d6:12:bd:00:f4:bf:98:05:
                    68:f7:bf:7b:5d:0f:ba:b3:03:e6:f5:bc:af:fc:b0:
                    3a:b3:e6:46:ef:2d:e3:b1:b9:a9:00:90:4a:a7:40:
                    e3:1e:38:09:bc:d9:41:e7:53:41:6c:5d:86:c2:3a:
                    08:c3:c4:8b:92:8d:24:67:66:d7:4b:7b:56:36:00:
                    a8:09:dc:e0:ed:16:0d:c4:e1:e5:98:49:cc:58:51:
                    61:3b:77:30:19:b3:3b:0f:c5:0d:d2:81:4c:4a:6b:
                    8a:6c:a9:1d:64:ea:4a:ac:15:da:60:f2:4f:a3:1e:
                    d7:97:6f:11:01:5a:3a:cc:67:09:04:c3:75:7b:7b:
                    f6:30:0f:f0:5d:bf:8d:20:ec:2e:78:c4:66:cd:78:
                    64:cc:0e:0d:bf:9a:6b:77:38:8a:e8:cb:4a:29:cb:
                    45:61:05:36:dd:1b:75:0d:7c:07:2f:88:92:fa:c8:
                    c2:77:a7:6b:54:bd:e4:44:69:de:35:48:3e:0d:0c:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:9F:78:D8:FF:98:EE:D6:E3:72:16:03:55:87:C2:67:0F:75:F3
            X509v3 Authority Key Identifier:
                keyid:04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136322e302f32342d3234203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:a1:5d:a5:43:8d:f6:52:35:ad:6c:40:83:3d:bf:d9:c4:
         b1:48:5a:ff:c2:0f:0b:62:37:89:fb:48:f8:fe:94:c6:e2:e3:
         f3:c9:ee:9c:71:7d:00:22:74:5c:e4:9d:31:fb:64:4b:d6:6e:
         6f:df:3f:38:37:46:e2:a6:29:37:a7:d8:24:ff:55:f2:81:4e:
         09:82:9f:c6:76:83:69:5d:b8:8b:be:a3:cf:62:c9:6c:a5:c6:
         d0:c3:82:f1:0b:8a:af:1a:2a:34:17:1b:b4:1c:7e:b1:eb:14:
         e6:0c:96:c9:8b:b8:71:26:c8:8b:a3:a9:3f:36:5e:32:d5:a7:
         ca:4d:b6:6a:50:5b:42:e8:ec:ca:f7:8c:52:ba:7d:6f:7d:75:
         28:9c:6b:b0:17:5b:8a:1a:e1:db:bb:62:0f:d1:81:b5:43:3e:
         2a:16:6a:f0:2f:cf:69:c9:a3:98:5d:8a:8f:ed:0a:c5:0c:d2:
         5c:36:40:0a:46:53:06:05:a1:b4:86:c4:3d:f5:23:7c:9e:19:
         71:bd:8f:c2:fb:0a:d3:06:46:32:e6:ce:f4:87:94:11:54:e6:
         d2:75:c6:2f:22:00:74:5e:9a:53:07:0a:8d:55:71:a8:7e:04:
         63:46:19:40:5e:41:52:2e:7a:d8:8d:dc:6b:e5:e7:60:9e:25:
         27:d0:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 22:33:00 2024 by rpki-client on console-ams.rpki-client.org