Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32332d3233203d3e20323633353433.roa
File:                     3134332e3230322e3132302e302f32332d3233203d3e20323633353433.roa (raw, json)
Hash identifier:          WcNHkGPBmfbmlcif/xwl0tHALO3UGh5UuY8WH6dOMYk=
Subject key identifier:   50:61:4A:68:B1:F8:21:B6:E3:B7:F6:53:48:45:B9:57:9B:2F:84:31
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       5F06B8C796A601B8EDB7EA5EE2BC55A687A15629
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32332d3233203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:41 +0000
ROA not before:           Thu 04 Apr 2024 20:35:41 +0000
ROA not after:            Thu 03 Apr 2025 20:40:41 +0000
asID:                     263543
IP address blocks:        143.202.120.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:06:b8:c7:96:a6:01:b8:ed:b7:ea:5e:e2:bc:55:a6:87:a1:56:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:41 2024 GMT
            Not After : Apr  3 20:40:41 2025 GMT
        Subject: CN=50614A68B1F821B6E3B7F6534845B9579B2F8431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:12:21:21:87:25:8a:06:2f:91:8b:42:cf:
                    ac:1f:ae:ac:56:a5:13:81:34:d0:7b:41:d6:c7:9c:
                    42:48:77:0a:5c:64:47:d6:27:db:04:bc:fd:b1:30:
                    a1:f8:8b:09:77:7d:09:55:ce:b9:93:9d:33:22:af:
                    94:1f:ac:2d:33:bb:88:0c:f6:0a:02:ef:c8:46:ff:
                    1d:d5:c4:4a:00:0e:56:08:d4:72:9f:55:71:60:c5:
                    07:d8:d0:f3:7e:ba:4f:07:e1:60:f1:87:67:11:c7:
                    ac:ff:44:2b:74:1b:2f:cd:e3:c9:bb:13:11:5a:ef:
                    f3:a9:51:5d:f6:38:c9:ba:a6:c6:30:76:69:15:b0:
                    20:82:3a:b0:e9:d8:02:79:4e:2a:e9:d5:b2:82:80:
                    9b:4d:22:37:ef:63:2e:04:3a:84:35:73:bf:3f:28:
                    01:d2:8a:63:08:5d:8f:a8:a8:5f:1d:c3:8b:e2:9e:
                    df:89:a5:2d:fb:a1:d7:7f:e8:37:34:f9:5f:1a:eb:
                    7e:35:27:3b:bf:80:b5:8b:90:35:c1:16:12:b2:2d:
                    c9:f8:42:fd:1a:77:c0:3c:d6:67:90:e2:db:10:42:
                    0b:61:1b:92:aa:d7:13:bf:51:ac:e8:bc:a0:6a:57:
                    46:94:fe:76:5b:75:de:4f:42:f2:6b:d4:e5:77:7d:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:4A:68:B1:F8:21:B6:E3:B7:F6:53:48:45:B9:57:9B:2F:84:31
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32332d3233203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:06:f3:ce:55:6c:d9:42:87:7b:00:eb:e0:65:38:07:a5:1b:
         b9:f3:06:40:ae:65:f8:ca:df:63:7d:13:ca:db:ef:8b:92:2c:
         bd:29:62:a9:f2:91:af:2d:14:ab:ae:19:e2:15:57:16:99:0a:
         c5:a0:10:ce:9d:a8:88:8a:73:6d:4f:d9:2b:ae:c1:fe:7b:fb:
         ae:7d:94:cd:4b:a3:49:60:5a:c9:f1:d6:af:4d:71:3c:48:73:
         79:d4:77:b1:f8:42:69:2a:22:ad:97:b4:12:84:27:21:ab:49:
         2a:6a:32:fc:b6:10:8a:48:eb:0f:0c:73:c9:e4:38:e1:18:3a:
         51:de:a1:b2:18:8c:1f:dc:cf:82:cb:fe:4e:ea:0e:b0:ce:77:
         1f:c9:07:82:4c:19:55:65:b1:c7:2b:c5:8b:14:17:4b:e7:f4:
         e8:1d:7c:35:2d:14:2e:0b:da:63:fc:0b:ce:62:3d:f4:aa:37:
         87:bc:2d:bc:ff:0c:d8:b9:e4:cd:ce:e1:11:92:9b:af:19:7f:
         b8:68:b4:80:4c:87:10:4c:22:21:ff:dc:e0:46:bf:07:d7:96:
         2d:28:ab:24:ed:8e:aa:f6:f0:26:8c:11:62:80:eb:e6:78:b5:
         9d:33:33:f4:48:7f:b0:24:ce:81:ec:51:7e:6f:8c:85:72:c4:
         58:f3:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 06:43:21 2024 by rpki-client on console-fra.rpki-client.org