Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3133312e3232312e37322e302f32322d3234203d3e203532353636.roa
File:                     3133312e3232312e37322e302f32322d3234203d3e203532353636.roa (raw, json)
Hash identifier:          uTkz6TfnIDRzR1dPHYOgVegb6pObqCdYRqdv+IBzBGg=
Subject key identifier:   BF:70:3F:88:92:5A:D7:D4:CA:AD:D9:7F:84:18:C0:FA:8C:DE:0E:24
Certificate issuer:       /CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
Certificate serial:       0C303DDD7BF0AAA09D257E0528C1CE9E9B786E42
Authority key identifier: 14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3133312e3232312e37322e302f32322d3234203d3e203532353636.roa
Signing time:             Sat 27 Jul 2024 23:22:02 +0000
ROA not before:           Sat 27 Jul 2024 23:17:02 +0000
ROA not after:            Sat 26 Jul 2025 23:22:02 +0000
asID:                     52566
IP address blocks:        131.221.72.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:30:3d:dd:7b:f0:aa:a0:9d:25:7e:05:28:c1:ce:9e:9b:78:6e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
        Validity
            Not Before: Jul 27 23:17:02 2024 GMT
            Not After : Jul 26 23:22:02 2025 GMT
        Subject: CN=BF703F88925AD7D4CAADD97F8418C0FA8CDE0E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:4f:30:7d:bf:83:69:08:d8:68:30:45:80:
                    4f:62:18:98:bd:76:a1:a9:d0:9d:7d:a7:d2:5f:1d:
                    56:c1:d9:3e:4b:bc:24:0e:54:9d:9c:94:78:e6:b3:
                    d5:29:1f:f9:4c:c8:40:69:d8:89:5a:8e:d0:db:d3:
                    23:8b:7b:1c:97:b5:e9:18:c0:a5:ea:d6:e4:44:e1:
                    87:b3:a0:d3:30:1a:ea:73:fd:a4:9c:3b:8a:0d:ce:
                    d6:14:6f:82:5e:aa:7f:12:fa:1c:5a:22:23:b2:2a:
                    6f:6f:4b:0e:75:63:a3:45:3a:17:cc:50:e8:0f:a0:
                    68:50:1a:5b:a4:b0:93:80:34:91:18:ed:4c:08:06:
                    2f:78:81:a4:c6:44:ed:c0:ba:7a:b1:57:52:b3:6c:
                    3e:80:ab:f9:de:46:82:95:8e:ff:8b:44:c9:b7:e6:
                    38:2a:6d:4c:88:12:28:59:5a:d6:dd:38:c6:1c:14:
                    99:d4:ab:c0:73:09:5b:87:2c:cb:d6:2a:ca:30:33:
                    2b:7c:04:03:cd:d1:f2:d4:53:db:0a:a1:aa:39:8a:
                    ad:44:e4:b4:56:6f:35:bb:02:4e:35:41:36:65:99:
                    bc:57:94:64:8d:c3:b0:2e:af:56:d2:93:7c:0d:23:
                    83:d5:9e:15:fb:6d:0b:48:cc:87:f6:68:99:96:eb:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:70:3F:88:92:5A:D7:D4:CA:AD:D9:7F:84:18:C0:FA:8C:DE:0E:24
            X509v3 Authority Key Identifier:
                keyid:14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3133312e3232312e37322e302f32322d3234203d3e203532353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:fb:7e:91:10:34:15:16:d4:c8:27:3d:46:81:b8:40:26:14:
         a4:9f:58:6b:f5:83:9d:ed:86:ce:47:25:75:d5:fc:05:19:16:
         3c:18:de:44:37:1b:35:bd:be:00:2e:05:78:3b:cb:96:43:36:
         c1:f2:44:2f:b6:2c:75:c9:af:74:ff:e2:e9:c9:b0:ec:d3:0c:
         f3:d4:6f:00:92:41:10:20:55:1c:a7:76:b2:16:70:6b:67:48:
         a4:7f:41:3a:c4:f9:88:40:b4:f8:16:18:3e:8c:ce:37:f5:52:
         78:62:fd:bd:59:76:a2:07:67:8f:c4:fe:79:8a:73:55:a6:9d:
         f1:34:40:b0:00:12:a8:eb:bf:b8:d2:38:30:bf:ce:d0:5f:e4:
         60:f1:43:fd:50:7c:82:7b:1c:45:29:c7:29:8d:e3:54:ec:c7:
         2c:f6:6b:fa:db:23:e0:5f:01:e2:ae:ba:0f:09:8b:bc:cd:fb:
         99:3f:a0:1d:80:93:b3:c9:0b:c3:8e:e0:ef:80:86:1a:71:2e:
         f2:41:65:61:31:c5:e1:8b:8e:a8:4a:8c:55:33:1a:a5:19:98:
         c3:89:30:5f:8a:5f:62:d5:82:14:04:6d:8c:00:4e:36:0b:53:
         6c:fd:3d:1d:f9:c4:82:01:19:dd:0d:e3:99:3b:71:6a:09:cc:
         68:c2:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:03:34 2024 by rpki-client on console-fra.rpki-client.org