Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32332d3233203d3e203631383835.roa
File:                     3133312e302e3134302e302f32332d3233203d3e203631383835.roa (raw, json)
Hash identifier:          kxAWaWPo1Fzdl+oqq+9HDCzUH8bjOY4HYsi+tdMnPBg=
Subject key identifier:   E0:38:7C:E8:D1:7B:33:9B:B3:E0:7A:FE:44:19:8A:C6:40:6C:DA:B6
Certificate issuer:       /CN=E62F0E7FC1586045610448EC574642FB1DDD50D8
Certificate serial:       3A7BAE1362F84C1FE4E699706E39280F40BD7E9E
Authority key identifier: E6:2F:0E:7F:C1:58:60:45:61:04:48:EC:57:46:42:FB:1D:DD:50:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62F0E7FC1586045610448EC574642FB1DDD50D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32332d3233203d3e203631383835.roa
Signing time:             Sun 25 Dec 2022 20:29:21 +0000
ROA not before:           Sun 25 Dec 2022 20:24:21 +0000
ROA not after:            Sun 24 Dec 2023 20:29:21 +0000
asID:                     61885
IP address blocks:        131.0.140.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:ae:13:62:f8:4c:1f:e4:e6:99:70:6e:39:28:0f:40:bd:7e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F0E7FC1586045610448EC574642FB1DDD50D8
        Validity
            Not Before: Dec 25 20:24:21 2022 GMT
            Not After : Dec 24 20:29:21 2023 GMT
        Subject: CN=E0387CE8D17B339BB3E07AFE44198AC6406CDAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:75:44:47:bc:05:94:92:9d:32:f2:5e:71:
                    38:91:0c:f1:46:55:d8:ad:62:88:69:50:04:b1:2f:
                    17:13:25:13:d6:21:20:29:fe:54:bc:94:64:b2:ad:
                    89:80:2a:f6:17:43:ba:d8:3f:9d:0f:84:9b:ad:0f:
                    49:77:ee:55:20:3f:db:80:6b:51:99:48:4e:55:dd:
                    30:f6:bb:7f:ec:e4:f0:eb:ac:72:b9:5d:73:c4:ac:
                    69:24:d5:74:d1:5b:e9:d0:7d:89:88:22:2c:e9:22:
                    60:a5:bc:6a:8e:38:c2:46:98:67:e2:ca:67:1a:ac:
                    7a:03:35:10:fa:19:c3:84:97:ff:75:96:ab:d1:71:
                    fe:dd:56:3c:b3:c3:c9:30:2c:95:de:4c:35:a2:2c:
                    71:be:02:74:97:86:37:ec:05:12:ba:1f:88:96:53:
                    72:9e:b3:ec:75:12:10:b2:97:c0:2f:3c:e5:8f:bb:
                    fa:e2:44:7e:59:b0:e2:58:d1:2a:5d:e5:16:60:8a:
                    fb:ba:54:5d:6f:41:df:97:a3:16:00:92:9b:6c:08:
                    dd:b3:be:73:a4:f8:6d:59:12:dd:f2:9e:66:d7:39:
                    ae:d4:56:d3:dc:d2:d4:8e:a6:fc:1f:b1:03:4e:fd:
                    d8:4e:38:79:be:c6:50:d8:b2:14:86:55:74:aa:d3:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:38:7C:E8:D1:7B:33:9B:B3:E0:7A:FE:44:19:8A:C6:40:6C:DA:B6
            X509v3 Authority Key Identifier:
                keyid:E6:2F:0E:7F:C1:58:60:45:61:04:48:EC:57:46:42:FB:1D:DD:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/E62F0E7FC1586045610448EC574642FB1DDD50D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62F0E7FC1586045610448EC574642FB1DDD50D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32332d3233203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:c2:1c:7a:c5:2c:e5:eb:b9:93:fa:9d:48:4b:d0:57:29:ac:
         6d:fc:e3:b6:f7:76:1c:7d:96:c2:00:ec:58:51:2b:ab:93:ad:
         1b:73:13:09:c8:4b:97:7f:b9:25:9f:dc:b3:1d:b5:01:79:1b:
         76:45:ef:20:9f:23:ba:76:fb:9c:f5:bf:db:ca:a3:14:51:d0:
         9a:7c:cf:33:25:9c:8e:be:56:5b:a3:4d:fd:c3:82:e6:06:d4:
         76:00:b8:37:dc:a4:6f:20:ff:a3:88:91:23:95:55:87:47:6b:
         bc:74:f1:d9:a8:4a:27:bd:7d:97:5f:b5:db:a4:c7:ff:35:69:
         f4:75:33:d7:b9:a8:2a:29:56:db:5d:a5:82:9e:62:2e:9f:aa:
         78:20:0d:b4:9e:69:42:db:70:ec:46:79:bf:3a:0f:2f:b3:2e:
         df:84:47:26:d4:57:e4:91:ea:91:5e:fa:5b:5c:08:3b:4a:ac:
         6c:cb:94:80:5a:30:61:fb:72:20:1b:26:be:fa:0d:8b:06:d1:
         c8:83:a8:f8:45:98:e5:14:f9:6c:99:95:f8:c6:f4:fb:3d:48:
         16:8f:09:68:4a:d3:11:77:24:79:9b:c0:0d:5c:fe:b9:42:cf:
         a3:29:bf:29:56:fd:1e:92:e7:c3:54:81:dd:0d:bf:61:eb:49:
         1d:a3:b3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 17:06:12 2023 by rpki-client on console-fra.rpki-client.org