Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139332e302f32342d3234203d3e203631373139.roa
File:                     3133312e302e3139332e302f32342d3234203d3e203631373139.roa (raw, json)
Hash identifier:          ERNB2JWtyfnPya/XDVLsA0MXyh0P/d6lS1ZfEErmxLM=
Subject key identifier:   CE:8D:03:B0:AA:3B:EA:23:51:57:87:1E:8C:76:0A:91:71:93:65:7A
Certificate issuer:       /CN=7AC5A4A2788D57CCB9080656337414C5C4D41B59
Certificate serial:       70177996CD857AF0871462DD475BB6C4D5EEAE49
Authority key identifier: 7A:C5:A4:A2:78:8D:57:CC:B9:08:06:56:33:74:14:C5:C4:D4:1B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AC5A4A2788D57CCB9080656337414C5C4D41B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139332e302f32342d3234203d3e203631373139.roa
Signing time:             Wed 16 Oct 2024 22:40:05 +0000
ROA not before:           Wed 16 Oct 2024 22:35:05 +0000
ROA not after:            Wed 15 Oct 2025 22:40:05 +0000
asID:                     61719
IP address blocks:        131.0.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:79:96:cd:85:7a:f0:87:14:62:dd:47:5b:b6:c4:d5:ee:ae:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AC5A4A2788D57CCB9080656337414C5C4D41B59
        Validity
            Not Before: Oct 16 22:35:05 2024 GMT
            Not After : Oct 15 22:40:05 2025 GMT
        Subject: CN=CE8D03B0AA3BEA235157871E8C760A917193657A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:bd:50:f5:59:43:b7:9f:d9:25:0a:64:25:
                    ff:bf:8e:ce:fb:eb:78:8f:43:6c:ae:10:0e:e8:ed:
                    d4:f5:a6:9f:9f:4f:76:cc:a4:b8:3e:9c:ea:bd:15:
                    04:27:27:60:5b:87:d5:3a:1c:c9:b0:71:50:13:47:
                    ae:af:a6:ae:a9:80:a9:97:d3:b1:e5:62:20:b4:73:
                    85:36:9b:e3:3a:c7:fb:c5:9b:01:f8:8e:d6:39:a9:
                    37:25:77:32:b8:9e:57:0f:8e:38:0b:de:c9:f0:a7:
                    cb:f9:28:7c:75:49:9b:1a:5a:c2:0c:dc:da:20:5c:
                    c1:3b:b1:a8:ed:cc:33:8b:7c:64:8a:08:97:8c:ed:
                    70:67:52:a2:60:55:bc:6e:b8:5b:eb:e2:df:04:47:
                    23:a7:8c:68:fa:d3:cf:bb:85:e5:47:cc:76:c1:ec:
                    92:ab:bf:b5:35:0f:8f:08:a5:91:88:d3:02:e9:f9:
                    da:6b:76:78:87:69:4d:9f:c6:c6:15:08:de:e1:dd:
                    03:a8:da:65:03:ef:55:5a:be:db:4f:b0:cb:28:b7:
                    0c:dd:6f:2a:0d:46:1e:a2:93:98:51:84:3e:25:a8:
                    15:38:bb:11:fc:4d:f7:77:fd:3d:57:58:2d:f5:a4:
                    3e:87:39:95:9e:05:e1:ed:4e:73:36:7c:62:2f:6e:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8D:03:B0:AA:3B:EA:23:51:57:87:1E:8C:76:0A:91:71:93:65:7A
            X509v3 Authority Key Identifier:
                keyid:7A:C5:A4:A2:78:8D:57:CC:B9:08:06:56:33:74:14:C5:C4:D4:1B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/7AC5A4A2788D57CCB9080656337414C5C4D41B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AC5A4A2788D57CCB9080656337414C5C4D41B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139332e302f32342d3234203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:85:66:2f:07:84:f7:29:51:47:5c:5f:f1:89:87:2a:82:
         8d:35:2e:af:93:bc:8e:4b:16:24:40:d3:1e:84:72:33:77:d4:
         3e:f4:f2:38:f0:9d:92:d9:b6:99:63:46:2e:9d:a7:60:b9:f5:
         84:07:f5:6c:66:92:e4:b4:be:08:1d:0e:49:f7:b2:dc:85:9b:
         c9:d7:d8:d3:2a:02:de:4a:b4:94:af:17:e9:a9:43:24:95:0e:
         a3:76:f6:1b:c5:dc:58:eb:2d:8f:4f:b8:1c:0a:17:6d:4b:c5:
         bc:ff:80:fb:53:ff:f5:c1:8f:8c:68:86:a5:6c:23:a4:20:26:
         3c:22:ff:11:12:c0:b7:d0:f2:a2:d5:d8:67:60:17:f9:b2:88:
         5e:07:d5:2b:25:77:c4:f2:f5:ff:8a:fc:c5:df:05:b0:1b:10:
         f4:57:32:b0:da:27:4a:25:7b:54:e0:44:cc:82:5e:81:8c:57:
         a0:f1:ea:d2:97:34:97:91:ff:a3:87:5c:cb:11:8b:07:a4:97:
         58:38:70:8d:21:e9:51:1d:85:53:68:96:f8:ff:7e:5d:71:fc:
         c9:f9:99:da:9f:c1:9b:1e:61:65:be:53:38:ef:d0:9b:7b:50:
         96:ce:8f:b3:cd:28:79:3b:b3:e8:d1:73:75:de:44:5c:25:50:
         61:d9:c2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 13:26:31 2024 by rpki-client on console-fra.rpki-client.org