Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/3137372e39312e31362e302f32302d3234203d3e203631383935.roa
File:                     3137372e39312e31362e302f32302d3234203d3e203631383935.roa (raw, json)
Hash identifier:          lN9UHiVXDiPPw4/hLHttuKzaqhEDFm3BzIu930UcEw0=
Subject key identifier:   4C:70:31:3F:09:E8:C4:ED:CD:1D:CE:AD:F6:BE:9D:58:2F:07:EA:C1
Certificate issuer:       /CN=94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE
Certificate serial:       4EBE9A44FD629EC7FF46CE1D20E1D5671A7279E0
Authority key identifier: 94:B1:D1:B5:4C:EC:AE:73:40:AB:B7:A5:70:84:FC:B3:6E:AD:C9:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/3137372e39312e31362e302f32302d3234203d3e203631383935.roa
Signing time:             Wed 03 Apr 2024 21:37:05 +0000
ROA not before:           Wed 03 Apr 2024 21:32:05 +0000
ROA not after:            Wed 02 Apr 2025 21:37:05 +0000
asID:                     61895
IP address blocks:        177.91.16.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:be:9a:44:fd:62:9e:c7:ff:46:ce:1d:20:e1:d5:67:1a:72:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE
        Validity
            Not Before: Apr  3 21:32:05 2024 GMT
            Not After : Apr  2 21:37:05 2025 GMT
        Subject: CN=4C70313F09E8C4EDCD1DCEADF6BE9D582F07EAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:5d:d6:c0:1e:6c:71:36:0e:57:1d:a7:b8:
                    0e:e4:de:a3:10:c5:66:d7:a2:71:7b:70:99:ac:18:
                    18:52:41:22:aa:aa:da:df:24:5c:b4:99:95:c5:46:
                    17:7f:55:1a:e8:81:e2:94:13:8d:d3:58:2e:fc:46:
                    86:e2:51:63:9c:90:a7:0b:30:c6:27:da:c1:57:c7:
                    1a:f5:d8:4b:b3:6e:34:03:eb:19:c9:26:63:1f:d5:
                    22:68:56:6f:9b:58:ad:49:db:56:6f:d5:2b:8d:2c:
                    fa:fb:ea:d8:d1:ab:72:31:85:0f:d6:0c:08:e7:f6:
                    b7:97:92:a6:e1:69:7a:34:bc:bd:c7:ca:5e:fe:9b:
                    06:9f:d7:92:28:86:e2:c4:18:78:ff:68:a7:9a:6a:
                    9c:f9:de:f4:f3:dc:23:00:43:b8:3d:3a:c9:d4:d1:
                    64:14:e2:74:83:27:28:76:2e:6c:3c:9b:81:17:bd:
                    63:1c:3e:d1:83:ab:8c:ce:7f:72:30:78:20:ae:db:
                    b5:21:bf:39:1b:82:f3:5b:fb:ca:d1:bd:1d:56:c1:
                    0c:1c:ac:78:7f:22:4d:cf:60:7a:04:9d:4a:77:c0:
                    a8:c2:26:d0:59:5c:d9:7d:aa:e6:3f:07:6b:fa:96:
                    fe:58:0f:99:73:c6:01:37:73:ca:eb:96:f2:3f:ca:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:70:31:3F:09:E8:C4:ED:CD:1D:CE:AD:F6:BE:9D:58:2F:07:EA:C1
            X509v3 Authority Key Identifier:
                keyid:94:B1:D1:B5:4C:EC:AE:73:40:AB:B7:A5:70:84:FC:B3:6E:AD:C9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/3137372e39312e31362e302f32302d3234203d3e203631383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:91:a4:3e:81:9a:6e:64:19:5d:ce:83:83:a5:3a:fa:65:b7:
         4a:7f:cc:52:58:2f:3d:25:d2:bd:85:d5:e3:49:ec:b0:df:f1:
         b1:46:f4:d7:15:ef:73:6d:8a:87:ed:95:02:30:8c:39:7a:74:
         60:c2:b1:9c:4a:34:d4:8f:99:44:f6:67:b3:89:50:29:dc:eb:
         d8:82:e2:46:d7:77:72:0b:ef:91:c6:26:5b:b4:64:a2:97:9f:
         ab:87:5b:62:82:f9:af:92:ad:54:a2:dd:c7:73:ee:e1:4e:5a:
         77:b6:27:e6:2a:56:c1:cd:a5:fa:cd:34:39:57:d7:37:d9:6c:
         48:cc:d1:f0:76:c9:15:6f:7e:bf:29:02:e0:0a:3a:b3:43:f3:
         46:2b:56:11:8b:a9:70:0a:cd:79:30:1c:c1:4f:b9:93:2e:39:
         e3:9b:9f:91:08:ce:19:80:c1:d3:0c:d2:ae:6f:84:6b:26:a2:
         7c:f3:0a:c5:e1:69:d4:e8:c5:41:49:ae:25:2b:ea:49:b1:34:
         d9:77:c2:c9:bd:dc:dd:a3:f1:af:a4:1b:a6:81:57:cc:ee:df:
         64:a5:9f:f6:e5:03:dc:82:8f:33:d7:97:a1:ef:a4:04:db:eb:
         62:2c:ca:96:f8:6e:44:93:d8:aa:d2:1d:19:8a:0c:be:77:d2:
         8d:96:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 19:30:28 2024 by rpki-client on console-fra.rpki-client.org