Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139352e302f32342d3234203d3e203631373139.roa
File:                     3133312e302e3139352e302f32342d3234203d3e203631373139.roa (raw, json)
Hash identifier:          h9w2DLOU2k5RnChfAKoRBKJ5sWHyPxWe9a3bRzpRzRc=
Subject key identifier:   BD:FD:B5:98:64:5C:CE:B3:6A:F7:5C:8E:9D:5D:93:AF:2E:87:8F:A8
Certificate issuer:       /CN=7AC5A4A2788D57CCB9080656337414C5C4D41B59
Certificate serial:       16C39C9368C924E22106E36ADF72192827D0A2D3
Authority key identifier: 7A:C5:A4:A2:78:8D:57:CC:B9:08:06:56:33:74:14:C5:C4:D4:1B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AC5A4A2788D57CCB9080656337414C5C4D41B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139352e302f32342d3234203d3e203631373139.roa
Signing time:             Wed 16 Oct 2024 22:40:38 +0000
ROA not before:           Wed 16 Oct 2024 22:35:38 +0000
ROA not after:            Wed 15 Oct 2025 22:40:38 +0000
asID:                     61719
IP address blocks:        131.0.195.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c3:9c:93:68:c9:24:e2:21:06:e3:6a:df:72:19:28:27:d0:a2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AC5A4A2788D57CCB9080656337414C5C4D41B59
        Validity
            Not Before: Oct 16 22:35:38 2024 GMT
            Not After : Oct 15 22:40:38 2025 GMT
        Subject: CN=BDFDB598645CCEB36AF75C8E9D5D93AF2E878FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:6b:81:12:e0:e2:09:eb:c8:c0:7d:0a:0e:
                    51:b1:e5:0a:7e:17:6f:f7:21:00:04:7e:7e:2d:c7:
                    a4:0c:99:07:ec:1e:78:82:a8:2f:3f:66:9a:4c:03:
                    3a:c6:cc:bd:60:bb:17:33:a3:b4:52:b0:42:2d:bf:
                    14:f9:6b:31:9c:e5:c5:40:8d:55:b3:8e:12:86:e8:
                    c3:f3:67:d1:5c:6f:40:38:99:49:9e:f1:bc:75:97:
                    b9:43:aa:8d:03:31:81:74:8e:1c:4a:61:cf:ce:82:
                    62:c0:c6:38:31:86:00:05:de:e4:8b:b9:59:d8:a4:
                    25:2b:86:28:7d:cd:93:51:ca:42:5a:3f:da:67:68:
                    42:be:48:d4:e6:00:33:59:7d:38:5c:2a:48:c3:d1:
                    94:36:d6:7d:a0:e2:a0:a1:f3:c1:85:29:b8:48:26:
                    84:96:dc:9c:d8:8f:43:0c:a0:3c:15:d6:df:88:65:
                    c8:28:4e:c9:0e:48:c3:d5:e1:11:61:db:d5:04:6c:
                    04:9a:48:5a:26:d7:da:15:6d:d9:67:1b:dd:d3:b1:
                    2b:99:93:ed:a5:44:0a:f6:9b:da:a1:f7:02:84:26:
                    33:32:b5:62:6d:c5:f4:17:e0:a9:cb:2a:5e:32:8e:
                    fa:06:b4:d6:a0:ee:22:38:71:a8:ff:d3:a5:b4:48:
                    5d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FD:B5:98:64:5C:CE:B3:6A:F7:5C:8E:9D:5D:93:AF:2E:87:8F:A8
            X509v3 Authority Key Identifier:
                keyid:7A:C5:A4:A2:78:8D:57:CC:B9:08:06:56:33:74:14:C5:C4:D4:1B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/7AC5A4A2788D57CCB9080656337414C5C4D41B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AC5A4A2788D57CCB9080656337414C5C4D41B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139352e302f32342d3234203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:89:68:c4:ac:9e:93:7a:97:12:85:2b:c7:5a:ff:49:f2:
         e2:6a:62:f8:40:e3:a6:fd:3d:ee:f6:4e:dc:4a:0a:08:3d:51:
         35:3a:18:57:5d:14:99:ba:75:ba:70:d3:0c:86:93:6b:97:2c:
         b2:d8:2e:5f:92:44:4f:db:f8:fc:f9:e4:04:7e:11:67:c7:53:
         73:db:8f:09:29:45:8e:0f:7d:e2:15:bc:54:f0:72:40:0f:75:
         27:e5:cb:a9:12:0c:33:f3:eb:7c:c7:7c:aa:92:36:47:23:68:
         0d:8e:ec:0f:a5:4d:ec:f1:16:17:d6:de:4b:47:ea:7e:21:9d:
         e9:e1:3e:6b:01:f2:ac:59:29:96:5a:dd:59:2f:8c:f3:ea:f6:
         32:b5:db:4b:22:b2:b1:bf:83:72:ca:9e:14:7f:1c:e1:b3:f9:
         87:df:3a:ef:a2:24:59:06:c3:37:c6:c2:72:e6:b9:f7:d1:9b:
         98:2b:28:8c:63:c0:bb:7a:d4:89:1d:6b:38:fb:81:5f:d2:e8:
         32:87:ed:ab:17:75:f4:6d:7e:64:e0:cf:30:08:18:de:9c:b9:
         dc:5b:1a:60:ce:1e:f4:0d:b6:ba:a4:bb:aa:4f:0e:38:dd:40:
         66:55:16:73:ae:a2:34:18:a3:b2:c4:70:34:96:04:4a:6f:df:
         0e:6f:1a:f1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFsOck2jJJOIhBuNq33IZKCfQotMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FDNUE0QTI3ODhENTdDQ0I5MDgwNjU2MzM3NDE0QzVD
NEQ0MUI1OTAeFw0yNDEwMTYyMjM1MzhaFw0yNTEwMTUyMjQwMzhaMDMxMTAvBgNV
BAMTKEJERkRCNTk4NjQ1Q0NFQjM2QUY3NUM4RTlENUQ5M0FGMkU4NzhGQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCGuBEuDiCevIwH0KDlGx5Qp+
F2/3IQAEfn4tx6QMmQfsHniCqC8/ZppMAzrGzL1guxczo7RSsEItvxT5azGc5cVA
jVWzjhKG6MPzZ9Fcb0A4mUme8bx1l7lDqo0DMYF0jhxKYc/OgmLAxjgxhgAF3uSL
uVnYpCUrhih9zZNRykJaP9pnaEK+SNTmADNZfThcKkjD0ZQ21n2g4qCh88GFKbhI
JoSW3JzYj0MMoDwV1t+IZcgoTskOSMPV4RFh29UEbASaSFom19oVbdlnG93TsSuZ
k+2lRAr2m9qh9wKEJjMytWJtxfQX4KnLKl4yjvoGtNag7iI4caj/06W0SF1lAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUvf21mGRczrNq91yOnV2Try6Hj6gwHwYDVR0j
BBgwFoAUesWkoniNV8y5CAZWM3QUxcTUG1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK
M1MvMC83QUM1QTRBMjc4OEQ1N0NDQjkwODA2NTYzMzc0MTRDNUM0RDQxQjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQzVBNEEyNzg4RDU3Q0NC
OTA4MDY1NjMzNzQxNEM1QzRENDFCNTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzS0RwclI5Q0RpWHUxM2o2bnpFemhXY1RuSk5kQ0ZRTjMyajRiVDZoSjNTLzAv
MzEzMzMxMmUzMDJlMzEzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3
MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIMAwzANBgkqhkiG9w0BAQsFAAOCAQEAENKJaMSsnpN6
lxKFK8da/0ny4mpi+EDjpv097vZO3EoKCD1RNToYV10Umbp1unDTDIaTa5csstgu
X5JET9v4/PnkBH4RZ8dTc9uPCSlFjg994hW8VPByQA91J+XLqRIMM/PrfMd8qpI2
RyNoDY7sD6VN7PEWF9beS0fqfiGd6eE+awHyrFkpllrdWS+M8+r2MrXbSyKysb+D
csqeFH8c4bP5h98676IkWQbDN8bCcua599GbmCsojGPAu3rUiR1rOPuBX9LoMoft
qxd19G1+ZODPMAgY3py53FsaYM4e9A22uqS7qk8OON1AZlUWc66iNBijssRwNJYE
Sm/fDm8a8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:09 2024 by rpki-client on console-ams.rpki-client.org