Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
File:                     3139312e352e3232302e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          ZefRnPCQcTzJrL3qvoubz/UQtvoqR8ZVovnynO/6uB4=
Subject key identifier:   07:24:F1:D0:A7:A0:54:6C:D4:5F:AB:E8:02:88:36:5C:25:79:A7:EF
Certificate issuer:       /CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
Certificate serial:       2D87C3213395D7109909D7741C6BCE72ADA528CB
Authority key identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
Signing time:             Thu 04 Apr 2024 18:29:57 +0000
ROA not before:           Thu 04 Apr 2024 18:24:57 +0000
ROA not after:            Thu 03 Apr 2025 18:29:57 +0000
asID:                     53218
IP address blocks:        191.5.220.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:87:c3:21:33:95:d7:10:99:09:d7:74:1c:6b:ce:72:ad:a5:28:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
        Validity
            Not Before: Apr  4 18:24:57 2024 GMT
            Not After : Apr  3 18:29:57 2025 GMT
        Subject: CN=0724F1D0A7A0546CD45FABE80288365C2579A7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:c5:a6:c6:fc:4a:e7:2f:22:d1:dc:b4:e3:
                    b2:03:dd:83:ff:5e:be:7c:83:fe:5b:5d:fd:66:78:
                    31:d4:40:0d:14:c6:35:47:50:e4:4f:da:24:60:58:
                    0f:bc:82:7a:2a:3b:0d:a8:0b:05:b6:d3:27:03:c3:
                    61:e3:7e:52:d0:d7:11:4b:b2:4a:d9:bc:a4:da:ea:
                    cc:c0:ab:de:e4:87:15:2a:f1:bf:c2:0d:fd:56:e4:
                    0e:88:9e:08:c4:6a:ef:62:da:d7:6a:da:a2:19:a9:
                    61:04:cc:d3:1f:69:0a:98:f3:3a:a3:02:43:1c:ce:
                    8e:b1:42:ff:88:2c:26:b5:e8:18:47:39:3f:f2:91:
                    6c:4c:94:57:d8:a2:e2:05:22:66:a6:be:75:e1:f1:
                    9b:95:3e:9d:12:8e:60:2b:0d:3c:f0:0c:35:4b:8e:
                    af:ce:82:19:c3:8d:a1:5d:5d:1b:2c:ef:3d:09:cb:
                    4e:46:8a:8f:dc:83:73:74:ba:45:92:bd:16:17:4b:
                    94:61:df:56:18:48:25:60:8b:60:b4:d1:8f:30:de:
                    1e:a3:65:a0:bc:7e:48:be:d3:a6:63:86:fc:65:0b:
                    e6:00:36:2c:fa:5c:5f:a2:1d:34:d1:56:7e:21:bb:
                    c0:65:35:62:07:ba:43:10:8a:d2:16:9f:5c:16:58:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:24:F1:D0:A7:A0:54:6C:D4:5F:AB:E8:02:88:36:5C:25:79:A7:EF
            X509v3 Authority Key Identifier:
                keyid:2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3139312e352e3232302e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:05:9a:fa:09:4e:74:d9:3b:92:eb:c4:43:bd:1f:b1:f8:14:
         98:5d:a5:67:6e:5f:04:10:5b:86:81:f3:ce:c6:3d:90:e3:5c:
         5a:2e:b8:b3:51:52:f9:9d:ca:9f:af:a8:b0:96:4b:78:61:3e:
         93:aa:5f:4f:54:50:0d:06:d0:b5:7d:90:38:d0:48:d4:ce:6a:
         73:dc:27:b1:a6:ad:6c:f5:44:26:d1:d1:14:dd:aa:45:62:7a:
         ca:2c:1f:74:27:bd:a2:96:50:9f:32:e5:ed:cc:c9:be:b2:d9:
         d1:e8:64:25:03:15:89:34:d1:09:e9:4f:53:eb:ce:9b:7c:f4:
         a1:01:d0:be:82:b4:10:f9:7b:d2:24:f1:84:0e:7b:1d:d4:e7:
         5e:4f:3f:3f:17:ef:c2:c8:e0:40:b7:eb:0c:a6:02:ac:c7:cc:
         cd:63:7f:41:9b:c3:25:9e:db:13:72:2a:96:6d:79:ab:e9:b3:
         4c:9d:b6:b0:a2:0d:b0:3d:9e:db:f2:06:47:5a:a5:2d:6f:44:
         4e:3d:e2:13:2e:09:e6:fd:35:0c:3e:19:6f:c6:00:c4:5c:44:
         72:d1:4e:c7:0d:ab:a5:e1:19:47:c2:d1:1e:7a:12:e5:12:c4:
         ae:bc:c4:a2:06:87:38:70:9d:6c:1f:e7:a8:65:c9:76:4e:7b:
         58:eb:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:43:57 2024 by rpki-client on console-ams.rpki-client.org