Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/3139302e38332e36382e302f32322d3232203d3e20323730333738.roa
File:                     3139302e38332e36382e302f32322d3232203d3e20323730333738.roa (raw, json)
Hash identifier:          X0t9V+mTHKecJOnCbr1tjXfp/rrbyseKISvuoK85xZA=
Subject key identifier:   A9:30:1A:13:5C:AD:53:43:85:93:16:92:4A:3C:3A:AC:00:4C:A7:26
Certificate issuer:       /CN=014AA5956FF2CB9A774D8136BF522CEB9F1CEC19
Certificate serial:       71B4A4A2743EFC5C3D246090E9CAD3619E99AD69
Authority key identifier: 01:4A:A5:95:6F:F2:CB:9A:77:4D:81:36:BF:52:2C:EB:9F:1C:EC:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014AA5956FF2CB9A774D8136BF522CEB9F1CEC19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/3139302e38332e36382e302f32322d3232203d3e20323730333738.roa
Signing time:             Thu 04 Apr 2024 07:50:39 +0000
ROA not before:           Thu 04 Apr 2024 07:45:39 +0000
ROA not after:            Thu 03 Apr 2025 07:50:39 +0000
asID:                     270378
IP address blocks:        190.83.68.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b4:a4:a2:74:3e:fc:5c:3d:24:60:90:e9:ca:d3:61:9e:99:ad:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014AA5956FF2CB9A774D8136BF522CEB9F1CEC19
        Validity
            Not Before: Apr  4 07:45:39 2024 GMT
            Not After : Apr  3 07:50:39 2025 GMT
        Subject: CN=A9301A135CAD5343859316924A3C3AAC004CA726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:ea:af:1d:b9:dd:03:d5:a3:64:50:9d:ae:
                    d8:63:31:4c:48:3b:33:f8:bd:13:d0:b5:cb:aa:e2:
                    8a:5a:d8:4a:8f:c7:ef:06:ac:b3:d3:75:e1:4d:cd:
                    ae:35:8e:eb:80:62:b2:b5:2e:05:8c:5c:95:5e:6f:
                    30:15:21:58:7c:74:62:7b:24:69:b4:65:3f:6b:0c:
                    42:f3:1b:c7:14:8f:83:eb:7e:c1:fe:aa:42:d2:e6:
                    f7:ab:d3:7b:04:8a:76:4e:92:1e:0e:88:1e:46:ed:
                    d1:77:ff:97:ef:dc:d0:9d:11:14:d1:3d:8e:49:e7:
                    53:4f:29:85:ca:fe:c5:68:95:53:bb:49:42:84:49:
                    76:c8:dc:30:db:1a:40:14:0c:33:15:85:6d:77:a1:
                    fa:70:bb:db:ba:95:da:b5:9f:5b:45:43:ca:c4:88:
                    3d:29:36:a2:8a:5c:a8:98:af:99:e0:0e:14:82:ca:
                    17:0f:6e:f9:85:d6:86:a5:38:46:83:49:a3:0a:d1:
                    0f:65:6c:18:1a:3f:14:94:ab:f8:d9:84:b2:4a:1c:
                    c0:7f:94:50:f9:bc:e4:77:50:ba:50:48:f7:b7:44:
                    e9:e8:11:87:df:fe:68:6a:54:78:02:37:b4:3f:67:
                    28:14:2a:d0:ca:d3:07:71:54:ae:87:06:7d:00:1f:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:30:1A:13:5C:AD:53:43:85:93:16:92:4A:3C:3A:AC:00:4C:A7:26
            X509v3 Authority Key Identifier:
                keyid:01:4A:A5:95:6F:F2:CB:9A:77:4D:81:36:BF:52:2C:EB:9F:1C:EC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/014AA5956FF2CB9A774D8136BF522CEB9F1CEC19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014AA5956FF2CB9A774D8136BF522CEB9F1CEC19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/1/3139302e38332e36382e302f32322d3232203d3e20323730333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:d4:e7:a1:96:4d:17:96:40:97:b4:1b:55:bc:7f:35:44:
         89:cd:9c:b4:30:41:2b:55:a5:39:7e:26:cc:94:42:67:b3:c8:
         56:e4:f2:6d:d4:a3:33:c0:72:ba:95:82:ba:35:c3:bb:0c:f0:
         bd:b5:70:19:c2:5b:01:47:28:2c:86:da:52:a0:7a:e8:81:f7:
         63:b0:99:da:b5:e6:de:e7:00:60:b1:0e:8a:7e:80:4d:3b:7e:
         6f:10:aa:75:1c:36:54:9d:f7:57:64:51:b5:fc:0b:a2:4f:3e:
         2f:57:1b:49:b6:14:56:36:43:c0:d3:1b:08:9e:46:b8:bb:e7:
         37:9c:8b:bd:c1:fa:58:db:e4:9e:c5:98:b6:fc:16:f7:96:c2:
         2d:cb:0f:a1:9d:5a:d7:1e:49:0a:18:f2:a4:c7:2e:29:55:27:
         29:2e:2b:54:31:3c:9d:10:59:4f:c0:e7:a9:60:1d:6b:79:60:
         79:e5:47:80:b9:e6:05:86:2b:6d:c6:c3:18:62:7a:0b:07:ec:
         e5:b8:c6:21:bc:3d:a3:88:9b:e2:65:e1:d3:85:f2:8c:99:ca:
         dc:9c:54:6f:a5:2c:2f:a7:bc:22:c3:59:2a:7e:11:f0:6e:21:
         2f:e2:7f:fc:36:b3:f0:3d:cc:45:26:96:e1:c3:8a:33:b0:24:
         ce:2b:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:09 2024 by rpki-client on console-ams.rpki-client.org