Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137332e302f32342d3234203d3e20323637343930.roa
File:                     3139322e3134312e3137332e302f32342d3234203d3e20323637343930.roa (raw, json)
Hash identifier:          iaJ07cbZPbZvr9in7JG5qqoDy2Ea3IMODjfY6+mOtP0=
Subject key identifier:   59:BE:17:FF:01:24:7A:64:AA:94:E3:2B:18:53:D7:3D:84:23:E1:44
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       4A73D792E3E0116CB5A1A46A0CBE7E2CD3FE8366
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137332e302f32342d3234203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:30 +0000
ROA not before:           Sat 04 May 2024 04:47:30 +0000
ROA not after:            Sat 03 May 2025 04:52:30 +0000
asID:                     267490
IP address blocks:        192.141.173.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:73:d7:92:e3:e0:11:6c:b5:a1:a4:6a:0c:be:7e:2c:d3:fe:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:30 2024 GMT
            Not After : May  3 04:52:30 2025 GMT
        Subject: CN=59BE17FF01247A64AA94E32B1853D73D8423E144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:96:76:cb:09:b9:35:c2:99:0e:c4:0b:28:
                    2d:7f:8c:86:33:d7:2f:29:0e:49:11:fe:d7:f1:26:
                    37:c8:d3:fe:3d:bd:b7:0d:eb:55:77:60:0f:46:b3:
                    59:bc:9c:86:be:a3:f7:3d:35:e5:70:13:5a:2d:b9:
                    6e:f9:09:a9:06:09:0b:05:d6:e9:22:f1:4a:69:6c:
                    c3:b8:28:5e:1f:28:d6:36:d0:cd:92:1a:cd:42:46:
                    73:37:36:1f:db:02:13:bc:0a:ff:06:21:cc:3c:59:
                    1c:76:7f:58:0a:78:02:bc:cd:56:e6:f4:04:0a:b2:
                    37:a5:0b:12:5d:35:37:c4:8f:51:14:77:f4:16:c7:
                    90:6f:10:5b:a0:ea:14:d8:e1:9d:ae:ab:4c:7c:7a:
                    cf:45:56:23:30:fb:f6:24:b6:41:c1:ba:a2:65:ac:
                    31:01:5d:21:2c:4e:ed:10:bf:15:51:44:bf:e4:ec:
                    bd:38:6f:28:0c:2a:0b:ac:05:2a:f2:63:bf:ae:c7:
                    8f:0b:8f:fe:2f:00:da:82:ba:40:82:78:b3:f3:9e:
                    62:6c:8e:d4:93:1d:3d:db:b1:24:bc:4f:5d:4f:d6:
                    dd:2b:0d:bf:c1:5d:e7:cb:67:a2:e0:3c:78:0b:11:
                    1f:28:52:d9:5e:cf:82:35:b4:5f:2f:30:2d:df:09:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:17:FF:01:24:7A:64:AA:94:E3:2B:18:53:D7:3D:84:23:E1:44
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137332e302f32342d3234203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:c7:34:08:2b:8c:bf:8b:86:8c:f4:97:e4:32:ca:69:f9:
         eb:a9:08:22:93:97:18:d2:b4:11:e1:a8:1e:6d:31:c3:2b:88:
         1f:8d:8f:d5:cd:18:8a:5f:e1:83:a7:1a:72:5f:3e:60:f0:be:
         d4:c3:24:dd:5f:c0:e7:8c:0d:04:e9:7c:24:2e:21:9f:2c:c7:
         df:65:22:8e:21:25:a8:d1:02:39:e8:60:82:f1:21:86:2a:fe:
         f2:ee:40:d9:79:0a:74:d3:32:12:c3:f8:96:41:16:87:82:88:
         a6:52:c9:ed:34:e3:9c:39:27:ca:82:ff:b1:5c:86:75:35:91:
         42:0f:19:5b:a6:6a:3b:a4:a8:d9:57:75:34:f8:a2:c9:b3:28:
         10:79:74:42:59:55:4c:ad:a8:21:2f:fb:aa:fe:71:03:0a:ae:
         04:f5:92:3e:3e:92:fe:c5:e4:10:ce:6a:d2:ab:4a:c2:d8:ba:
         d8:03:42:7a:30:62:a8:a4:a1:1a:4c:ba:14:55:e3:9c:27:77:
         fb:20:95:e0:d9:97:d6:96:ad:c5:bd:bf:bc:95:1c:51:d6:be:
         f7:15:cb:ac:e7:0f:de:ee:7e:3e:b1:82:38:95:d9:fa:46:99:
         eb:67:1d:19:10:53:0f:a6:66:56:b9:6b:8c:c3:c7:89:8b:2a:
         91:74:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 13:39:36 2024 by rpki-client on console-fra.rpki-client.org