Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136332e302f32342d3234203d3e20323635393433.roa
File:                     3133312e3139362e3136332e302f32342d3234203d3e20323635393433.roa (raw, json)
Hash identifier:          c58UTbt/n2QquWt2aCrdoxN8Xm0KFPsdnOKVpZTMDoU=
Subject key identifier:   10:FC:CF:72:6D:7F:BE:02:E5:0C:5D:A8:8E:C4:77:EC:E1:11:36:DA
Certificate issuer:       /CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Certificate serial:       7A96B9DC4B4343B2AC626EDA5BFDFDA2F8796064
Authority key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136332e302f32342d3234203d3e20323635393433.roa
Signing time:             Mon 29 Apr 2024 02:37:47 +0000
ROA not before:           Mon 29 Apr 2024 02:32:47 +0000
ROA not after:            Mon 28 Apr 2025 02:37:47 +0000
asID:                     265943
IP address blocks:        131.196.163.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:96:b9:dc:4b:43:43:b2:ac:62:6e:da:5b:fd:fd:a2:f8:79:60:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
        Validity
            Not Before: Apr 29 02:32:47 2024 GMT
            Not After : Apr 28 02:37:47 2025 GMT
        Subject: CN=10FCCF726D7FBE02E50C5DA88EC477ECE11136DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:ce:f8:55:d9:3f:5f:e2:b5:89:22:e4:99:
                    10:94:32:7b:50:cc:79:40:7b:41:a5:f0:19:11:67:
                    6d:e2:14:84:e7:01:d8:81:a2:0b:c0:09:b5:f2:f6:
                    de:c3:42:4a:9c:98:a1:60:da:ce:0e:ae:97:bb:15:
                    4f:e8:8e:a2:4b:e4:bc:b5:91:a0:66:1a:44:1e:0e:
                    be:7a:fa:d0:94:63:4d:e9:2b:f0:8c:54:b3:8b:d7:
                    bb:a9:36:b7:b5:3e:79:97:62:80:4a:98:a9:66:ef:
                    91:22:fe:35:c8:09:ac:e8:7f:14:4d:99:66:22:87:
                    a7:53:b7:3f:73:3e:35:fa:c9:d5:e3:3e:df:e2:40:
                    e1:56:26:ac:fe:27:55:b3:b8:02:a2:1d:eb:dc:0b:
                    64:32:0b:03:d8:87:95:da:5b:35:93:06:0c:6f:4f:
                    40:65:40:2f:51:d6:16:76:eb:35:81:64:c0:c6:62:
                    5a:e9:27:da:ad:3a:b8:a0:45:06:f3:6e:91:be:8f:
                    8b:dc:fc:1e:2e:ad:85:a1:14:a2:b9:4a:83:13:b0:
                    1c:af:2f:0c:d7:6b:a1:55:e3:ce:07:2e:76:03:3e:
                    63:70:68:31:b7:41:a3:fa:d0:0f:8d:52:31:a8:ce:
                    4e:81:96:5f:a4:89:55:9d:e2:19:59:40:b6:93:d2:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FC:CF:72:6D:7F:BE:02:E5:0C:5D:A8:8E:C4:77:EC:E1:11:36:DA
            X509v3 Authority Key Identifier:
                keyid:04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136332e302f32342d3234203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:ab:79:22:71:ec:49:b7:b7:48:4a:74:7d:8a:67:a4:33:
         60:f9:e4:4d:9f:84:d8:a0:0a:d2:a8:ca:c6:03:c6:6a:dc:12:
         af:5c:61:20:93:24:14:4d:ec:e3:de:58:1e:e9:8d:8f:20:5b:
         bd:28:85:ea:33:bd:03:54:17:7f:bd:aa:6d:64:5d:fc:b7:c3:
         50:92:34:e4:65:bb:1a:bb:06:d3:f8:9d:7e:36:15:a7:ac:d8:
         1a:2b:a6:28:58:22:b7:61:89:b5:8f:62:7b:bf:cb:74:0d:af:
         cd:3f:bf:3f:9f:e2:4f:cf:7f:69:57:f5:44:ee:99:8b:2d:48:
         61:8c:6e:bd:9c:da:97:6c:8d:d6:c6:73:16:c7:d9:f3:9b:e7:
         81:3e:df:e5:d9:a4:89:38:53:3c:bf:ab:e0:fc:af:fd:15:eb:
         c3:69:67:a5:06:7b:c9:0e:b8:bd:fa:ce:65:31:54:46:db:fe:
         4f:4f:04:3f:98:88:e5:5a:48:10:d8:44:6d:fd:a5:ba:09:14:
         ff:c5:ae:65:cd:3f:a6:d9:93:27:7e:70:fb:07:cd:a0:04:67:
         59:a7:60:26:95:de:4c:a2:28:57:2e:df:72:76:4e:fe:21:f5:
         19:67:cc:04:a3:60:b9:1f:64:fa:12:ad:4c:93:b3:e2:80:f5:
         7e:98:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 22:33:00 2024 by rpki-client on console-ams.rpki-client.org