Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139372e302f32342d3234203d3e20323730343039.roa
File:                     3139302e38392e3139372e302f32342d3234203d3e20323730343039.roa (raw, json)
Hash identifier:          UiycZNffBt5ATa7PdtALBy146sXt+BHveCQTxpeREuQ=
Subject key identifier:   03:02:47:B1:04:7D:64:82:8B:3B:E1:05:2E:6F:61:68:FA:E2:52:40
Certificate issuer:       /CN=D42DB627CBFC83CBC3B89126059C6D7F3A447138
Certificate serial:       4E3FBCDD5828D2FEBD84C7B1C879656893B31B9B
Authority key identifier: D4:2D:B6:27:CB:FC:83:CB:C3:B8:91:26:05:9C:6D:7F:3A:44:71:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42DB627CBFC83CBC3B89126059C6D7F3A447138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139372e302f32342d3234203d3e20323730343039.roa
Signing time:             Thu 25 Apr 2024 00:35:58 +0000
ROA not before:           Thu 25 Apr 2024 00:30:58 +0000
ROA not after:            Thu 24 Apr 2025 00:35:58 +0000
asID:                     270409
IP address blocks:        190.89.197.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:bc:dd:58:28:d2:fe:bd:84:c7:b1:c8:79:65:68:93:b3:1b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D42DB627CBFC83CBC3B89126059C6D7F3A447138
        Validity
            Not Before: Apr 25 00:30:58 2024 GMT
            Not After : Apr 24 00:35:58 2025 GMT
        Subject: CN=030247B1047D64828B3BE1052E6F6168FAE25240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:93:61:08:cf:29:8a:e3:ed:d9:f3:2a:c1:
                    76:3a:c6:7e:ed:72:8b:c3:62:5e:49:7c:37:3c:52:
                    17:3f:07:25:a8:98:ac:48:d9:e9:f1:39:68:5b:c9:
                    86:d1:fc:60:fa:b9:33:65:72:67:c2:c3:5e:49:63:
                    6f:4c:e2:45:f4:b2:b5:4f:f1:73:f6:7d:ec:fc:22:
                    fe:7a:78:0b:89:55:da:59:ca:f0:12:5d:e0:9e:08:
                    a7:e0:9d:8e:d1:3e:29:4c:f7:91:6d:be:c0:07:21:
                    53:53:36:73:4e:2c:c1:f9:a9:8a:f2:05:a9:59:18:
                    d5:9e:17:5b:40:90:b0:db:88:1b:e8:8b:df:02:20:
                    20:7e:34:65:f9:f3:7d:99:7f:fa:2b:bb:d5:a6:70:
                    4f:05:f5:1f:64:c0:16:5c:d3:fe:67:35:e5:2a:65:
                    9d:46:f7:0c:57:18:4a:71:28:ff:2a:36:5b:a8:2a:
                    ed:50:47:42:31:33:5b:5a:29:10:50:cf:1c:ff:5e:
                    85:a9:a0:11:37:3f:92:2c:67:3d:3e:20:ad:dd:c4:
                    92:99:dd:9e:2f:43:eb:f7:aa:61:13:7d:9d:25:06:
                    e8:e1:17:ba:dc:7f:e5:82:62:62:88:44:31:e9:89:
                    1b:ee:e3:ae:7d:89:27:13:99:f2:67:4b:89:df:b8:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:02:47:B1:04:7D:64:82:8B:3B:E1:05:2E:6F:61:68:FA:E2:52:40
            X509v3 Authority Key Identifier:
                keyid:D4:2D:B6:27:CB:FC:83:CB:C3:B8:91:26:05:9C:6D:7F:3A:44:71:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/D42DB627CBFC83CBC3B89126059C6D7F3A447138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42DB627CBFC83CBC3B89126059C6D7F3A447138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139372e302f32342d3234203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:52:0c:90:18:eb:b4:4b:aa:41:65:b8:77:2a:c0:61:bb:
         ac:db:35:4b:1c:5b:a9:ba:76:f5:f8:90:14:a8:ca:cf:08:7c:
         98:75:f1:e1:ef:20:dd:6b:d1:74:eb:7a:b4:53:b3:e5:b2:6e:
         ca:b2:bb:98:8f:f3:97:3c:79:ba:07:69:ee:17:ee:10:1a:ec:
         db:d1:6c:b8:cc:05:54:52:87:88:cf:99:48:76:e1:0b:d5:94:
         a3:7d:f0:98:f8:c1:ba:28:d9:3e:b6:fe:9e:f9:ce:77:5a:4b:
         ce:f6:e2:90:10:32:7b:85:a8:73:04:78:36:36:ef:6b:22:4c:
         ba:fb:e0:fc:7b:c5:cb:e6:d7:c4:36:ae:25:c4:fe:4c:a8:d9:
         f9:79:b5:0d:c2:fa:e7:6a:42:30:61:46:a0:fc:e6:9e:29:89:
         74:4e:8f:4f:f4:b7:5d:ca:d9:e6:f3:46:81:40:b3:37:66:06:
         f2:6d:89:61:a2:5b:33:07:21:52:c1:89:b9:98:0b:61:23:51:
         59:30:4a:38:84:8a:89:14:e1:4e:c5:a9:d3:e1:9e:a7:54:41:
         37:59:4c:47:cf:d9:92:16:43:75:4e:09:45:62:97:8d:3a:a3:
         8a:aa:69:cc:a1:0d:16:ae:a1:ec:e1:de:2b:5c:bb:58:13:4a:
         d0:71:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 13:48:51 2024 by rpki-client on console-fra.rpki-client.org