Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/1/3139312e362e3134302e302f32322d3234203d3e20323633313430.roa
File:                     3139312e362e3134302e302f32322d3234203d3e20323633313430.roa (raw, json)
Hash identifier:          crzip5Ff4L3NOcKA55cuNM2Cjmd/v/8FnbHhP/l2Wwg=
Subject key identifier:   56:05:3C:10:75:E1:5B:1C:30:A4:F8:3D:0C:A3:2C:40:E3:B5:42:91
Certificate issuer:       /CN=47E63885A830E7C30921E9C809ECC39BC78FB50F
Certificate serial:       3800A7265184DDFE27E6F8C11B76F25E40747863
Authority key identifier: 47:E6:38:85:A8:30:E7:C3:09:21:E9:C8:09:EC:C3:9B:C7:8F:B5:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47E63885A830E7C30921E9C809ECC39BC78FB50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/1/3139312e362e3134302e302f32322d3234203d3e20323633313430.roa
Signing time:             Thu 04 Apr 2024 14:02:18 +0000
ROA not before:           Thu 04 Apr 2024 13:57:18 +0000
ROA not after:            Thu 03 Apr 2025 14:02:18 +0000
asID:                     263140
IP address blocks:        191.6.140.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:00:a7:26:51:84:dd:fe:27:e6:f8:c1:1b:76:f2:5e:40:74:78:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E63885A830E7C30921E9C809ECC39BC78FB50F
        Validity
            Not Before: Apr  4 13:57:18 2024 GMT
            Not After : Apr  3 14:02:18 2025 GMT
        Subject: CN=56053C1075E15B1C30A4F83D0CA32C40E3B54291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:17:05:90:4f:d5:f6:5d:fa:c5:90:d5:87:7d:
                    f8:9f:bf:0a:77:ea:0d:62:59:57:c9:6a:91:09:49:
                    87:6d:6b:ec:e3:d5:2e:a4:e1:3a:36:8f:a8:a2:e3:
                    bf:fe:f0:b4:c3:59:1e:f1:4a:80:5f:05:0e:f9:63:
                    df:be:6a:66:8e:9f:c4:4f:da:cc:1c:95:bd:26:13:
                    d4:23:bd:69:65:98:24:39:0c:3a:1d:ae:5e:22:75:
                    b1:cc:13:28:bb:d6:b3:c3:ac:9c:78:58:3f:e5:44:
                    aa:21:f1:03:17:61:da:89:01:b1:68:a1:3c:99:2b:
                    82:6e:ac:2e:ea:86:bb:47:13:63:60:72:aa:1e:ab:
                    49:44:6c:19:25:2f:96:be:ff:e9:bb:b0:62:5f:0f:
                    48:d0:e5:18:86:38:18:8b:f4:bc:c3:66:6c:fa:04:
                    88:78:2d:44:80:80:50:08:02:37:38:89:d8:67:37:
                    c2:f2:f0:2a:a6:48:ce:1c:8f:9e:1e:df:76:15:9d:
                    54:5c:1f:9f:a4:1a:bd:43:7c:c3:c4:45:71:d1:e5:
                    1d:23:d9:5d:8c:9b:f1:0d:30:02:cd:3d:d9:d8:f7:
                    23:d1:61:82:b3:d8:3a:a7:e7:48:ca:1a:2d:7a:44:
                    2d:9a:4f:f4:e4:eb:29:61:65:55:ee:f8:86:d9:92:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:3C:10:75:E1:5B:1C:30:A4:F8:3D:0C:A3:2C:40:E3:B5:42:91
            X509v3 Authority Key Identifier:
                keyid:47:E6:38:85:A8:30:E7:C3:09:21:E9:C8:09:EC:C3:9B:C7:8F:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/1/47E63885A830E7C30921E9C809ECC39BC78FB50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47E63885A830E7C30921E9C809ECC39BC78FB50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/1/3139312e362e3134302e302f32322d3234203d3e20323633313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:01:e8:09:d6:c2:e3:f6:bf:cd:4a:a0:60:f0:ad:14:c8:cc:
         4b:fc:2a:5d:67:2c:6a:db:0f:1a:bd:d0:18:df:7a:58:8b:4b:
         c2:c2:72:9b:80:41:de:1a:a3:13:f7:45:3b:dd:a9:7e:89:23:
         5f:34:73:d7:60:52:55:68:b3:88:e0:8e:25:7a:07:87:32:1c:
         85:fa:85:ba:1c:37:e1:50:13:10:55:40:45:fa:9f:76:2c:e0:
         f9:4d:cc:6b:f8:f8:b4:ec:d4:f2:fa:64:82:1a:fd:89:5c:73:
         a7:91:a1:5f:45:36:39:ac:97:73:01:90:64:28:55:4f:25:73:
         0b:8c:17:11:ab:d6:01:b0:6f:2d:f8:b3:33:bc:30:34:86:ee:
         61:f9:6c:52:60:1c:1c:fd:74:7d:cb:e7:90:1f:ee:de:7a:1f:
         df:8a:61:3c:b5:cb:17:99:08:81:1c:77:e3:a5:6f:ae:37:1b:
         4e:40:57:ac:80:6f:0c:60:f6:fc:ee:0f:e8:48:37:11:5b:d7:
         5b:fb:e3:12:8c:ae:69:2e:4c:68:45:01:d1:4f:c6:0b:71:13:
         97:d2:3b:91:4b:ab:54:39:d0:eb:02:5a:00:7d:ae:a9:f4:15:
         c0:57:8c:ad:dd:ef:44:e4:5c:c8:01:2d:b4:b7:00:d4:98:d7:
         bf:21:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 04:49:48 2024 by rpki-client on console-ams.rpki-client.org