Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134332e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          pnoCxJhev+KykF4irHTZhxOHPz51XbGGcg5JTT85Aik=
Subject key identifier:   05:1D:F7:AE:8A:D9:FA:D7:5E:09:47:79:86:4F:4B:E7:21:52:C9:58
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       6137149F95CC2991E9B5CE0EEDB387055CC9F08C
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
Signing time:             Thu 29 Aug 2024 18:19:09 +0000
ROA not before:           Thu 29 Aug 2024 18:14:09 +0000
ROA not after:            Thu 28 Aug 2025 18:19:09 +0000
asID:                     61885
IP address blocks:        131.0.143.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:14:9f:95:cc:29:91:e9:b5:ce:0e:ed:b3:87:05:5c:c9:f0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Aug 29 18:14:09 2024 GMT
            Not After : Aug 28 18:19:09 2025 GMT
        Subject: CN=051DF7AE8AD9FAD75E094779864F4BE72152C958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:20:d9:69:ce:4d:64:97:7c:4d:f8:95:36:
                    c2:a5:36:4a:17:92:ed:cf:72:5e:5e:61:e0:5c:12:
                    3c:38:cd:3d:19:63:06:3d:90:c2:a9:53:b9:83:61:
                    1f:fb:3c:a1:f2:59:c3:61:33:52:3b:d1:3d:ff:72:
                    e6:31:c1:e9:7c:53:81:4b:02:e2:4d:91:91:7a:18:
                    e0:bf:78:a7:9c:44:de:ff:1c:e8:02:b2:ca:b5:9f:
                    e5:97:d8:39:09:ae:3b:ca:9a:a9:5c:1b:b8:39:a5:
                    92:3b:e6:ff:e7:78:50:82:15:e0:97:d6:52:d4:ad:
                    55:5c:3a:09:55:ba:96:b4:c8:82:71:e9:27:27:69:
                    a9:73:48:e5:9c:df:fc:d2:2d:76:0c:dc:dc:d9:03:
                    10:ce:5e:ba:8c:fe:ea:e9:16:49:4b:e0:44:e0:73:
                    92:43:2f:bc:ed:88:b8:52:fa:5f:a7:7d:4c:9b:a1:
                    38:d8:73:66:6f:f7:c9:04:f2:a2:39:20:e5:76:27:
                    b3:04:04:87:17:97:d7:7b:78:14:ab:a9:7b:6f:05:
                    71:c5:d9:4c:77:d5:97:19:ad:1d:cb:0d:c2:89:12:
                    6a:70:12:24:ff:cb:dd:17:70:d5:26:9a:1d:c3:5a:
                    39:25:81:5b:d3:5e:8b:aa:da:95:4f:f2:7d:e7:e4:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:F7:AE:8A:D9:FA:D7:5E:09:47:79:86:4F:4B:E7:21:52:C9:58
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:af:03:7f:2e:33:b3:58:36:75:05:39:f0:45:e0:2d:d2:7f:
         2f:d8:84:65:35:e5:52:0f:c0:c9:e4:33:08:44:53:22:57:d4:
         6f:85:df:cd:74:a6:26:e2:ba:2f:4d:1a:8f:7f:89:cd:04:72:
         5f:c3:bf:21:b6:77:5b:68:4f:06:cd:c3:54:40:90:fb:64:88:
         79:74:12:3e:31:fe:f3:2a:57:41:78:d3:2e:18:57:80:87:3c:
         fc:61:32:3b:ba:32:b5:d2:4e:c1:ca:08:4a:ae:7d:5a:f0:13:
         23:6a:e3:53:8d:6b:0e:ab:f5:31:e5:a3:d7:1c:b3:2c:05:7a:
         24:59:ec:0e:71:a1:1a:52:91:48:1e:90:6f:97:8d:fc:e2:ea:
         54:9a:44:ce:c6:32:68:ac:92:1c:18:d4:1f:37:fb:5e:c0:17:
         5c:e9:b2:a1:ef:84:92:82:5d:63:7d:d0:cb:2e:a0:65:86:ea:
         28:4e:48:3d:b1:9f:3f:a3:f7:5c:65:e1:11:f8:db:17:21:03:
         b9:da:35:65:fa:41:8d:d4:1e:0f:0f:ef:dc:b6:38:0a:1d:75:
         1f:e0:04:d9:12:ba:ca:48:35:3b:09:31:0c:45:d8:da:6b:56:
         09:0b:72:3c:93:d5:2a:3d:07:4c:62:8f:e7:d5:59:17:44:13:
         c1:f0:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org