Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa
File:                     3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          1CCOHfQb2xK+5xy3SEcc678Epu+MfQdgcc5gCImX8FM=
Subject key identifier:   CB:95:F8:72:C5:04:9B:48:AF:EA:42:6B:14:72:A2:BA:CC:6D:99:89
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       1E5A235AF89459EC43BA162ED72C71E43CE9FB21
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:42 +0000
ROA not before:           Thu 04 Apr 2024 20:35:42 +0000
ROA not after:            Thu 03 Apr 2025 20:40:42 +0000
asID:                     263543
IP address blocks:        143.202.120.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5a:23:5a:f8:94:59:ec:43:ba:16:2e:d7:2c:71:e4:3c:e9:fb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:42 2024 GMT
            Not After : Apr  3 20:40:42 2025 GMT
        Subject: CN=CB95F872C5049B48AFEA426B1472A2BACC6D9989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b4:72:8a:07:8d:18:fd:2e:0a:8f:d5:fb:d2:
                    d8:cd:29:1b:aa:b0:de:0d:3f:b7:98:39:93:55:1f:
                    17:44:7d:cf:18:55:73:c1:c2:3e:35:e7:d8:80:5b:
                    f0:e7:00:e3:8e:42:ff:55:03:d3:43:b9:ba:3d:25:
                    eb:a3:fb:9d:f2:51:d7:f5:6c:d4:5a:8c:ed:c9:2a:
                    32:9c:5b:da:1c:70:8e:39:b6:31:ac:65:6f:43:5b:
                    85:80:a2:59:1e:61:34:14:d6:1a:45:c3:a5:c3:72:
                    a3:1b:be:61:b4:03:10:66:2d:58:25:e5:b5:2d:f7:
                    0a:f0:7e:85:a7:71:a2:2a:68:38:78:5f:08:6e:40:
                    cc:41:42:96:56:cd:20:24:7f:35:a8:a2:91:00:e3:
                    08:a0:9f:4e:9e:0e:11:88:41:82:b6:64:f9:6a:83:
                    85:78:ac:1a:fe:c4:ba:22:a1:07:d6:49:a8:e2:f5:
                    1f:9d:3b:f7:3c:4a:7f:37:95:ab:71:3f:0d:ba:66:
                    bc:ef:27:f7:65:8e:4f:a9:bd:7b:55:7e:a9:98:10:
                    84:e1:0b:70:ff:59:15:c2:e0:86:20:fb:25:75:b9:
                    23:77:23:41:91:cf:b0:71:ce:54:8d:31:b4:90:05:
                    b2:47:74:4a:2d:34:52:71:c0:29:c1:b2:37:f3:4f:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:F8:72:C5:04:9B:48:AF:EA:42:6B:14:72:A2:BA:CC:6D:99:89
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:37:8d:b6:17:b1:19:f2:47:a4:59:9e:55:df:94:29:25:
         de:71:6f:5d:7d:be:6f:19:1c:ac:f5:27:55:94:68:bc:36:36:
         26:93:f5:70:73:81:4a:9b:13:36:6b:3f:b4:4a:8b:75:6f:23:
         6f:3c:a5:05:6a:bf:6a:8d:90:6a:48:7f:97:b5:f1:8d:94:97:
         ee:4d:6f:6b:02:d8:02:77:d9:d3:72:81:94:3e:1b:7c:c9:82:
         a6:08:b3:45:20:d7:22:8f:74:cf:4b:f5:a3:b7:53:5d:50:e1:
         df:eb:ad:64:da:d2:14:27:37:bb:00:fb:f2:fd:4e:82:55:5a:
         bd:ad:28:ef:63:e6:a9:e3:a3:be:e5:0a:62:8a:41:4c:57:22:
         76:9f:14:33:dc:42:21:51:2c:58:b8:7b:0b:5d:45:20:39:9e:
         6b:68:c6:ae:a4:06:38:25:c5:49:14:1a:4a:5e:da:f4:36:8c:
         35:a6:c1:6d:59:71:a1:b7:23:b8:12:3f:a7:8c:9c:ea:59:88:
         b6:70:af:4b:f0:95:14:cd:51:5e:7b:82:96:f5:11:a7:de:76:
         88:e1:70:bc:51:b4:19:71:a3:46:ed:ea:46:de:7a:25:3d:3a:
         98:c6:a9:20:41:c5:4c:04:c2:1c:55:25:2b:1b:73:b9:b4:84:
         5f:aa:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org