Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132312e302f32342d3234203d3e20323633353433.roa
File:                     3134332e3230322e3132312e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          XDrQELQMZPODXn2o/4B6y+/fKA6E4BQ5M2eLSHCcSFU=
Subject key identifier:   36:33:41:F8:0B:2E:B4:8C:17:4E:8D:47:14:45:37:2F:58:B8:D6:E0
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       7AE05726D95C858C70EDB771EEFCD45A2D40F962
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132312e302f32342d3234203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:41 +0000
ROA not before:           Thu 04 Apr 2024 20:35:41 +0000
ROA not after:            Thu 03 Apr 2025 20:40:41 +0000
asID:                     263543
IP address blocks:        143.202.121.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e0:57:26:d9:5c:85:8c:70:ed:b7:71:ee:fc:d4:5a:2d:40:f9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:41 2024 GMT
            Not After : Apr  3 20:40:41 2025 GMT
        Subject: CN=363341F80B2EB48C174E8D471445372F58B8D6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:9b:90:49:d1:56:6b:9a:bb:af:db:6c:e6:
                    5c:0e:52:a8:5e:be:69:30:a2:01:9b:60:db:84:bd:
                    30:3c:b5:07:de:ef:e6:90:e3:55:ae:d8:07:da:82:
                    b6:b6:88:06:01:d5:d3:78:21:28:f5:3d:77:12:4f:
                    7a:e3:7e:74:f4:71:af:74:c6:4a:23:d3:91:52:fe:
                    da:d5:e1:61:a5:ef:03:49:3e:fd:57:e3:06:f5:43:
                    4f:b0:7f:9c:67:0e:dd:be:ab:e3:c5:51:62:ca:75:
                    3f:86:c5:9a:19:df:07:eb:bc:d0:c6:a8:f4:34:1e:
                    cd:92:56:2c:ab:79:d7:2b:77:1f:fb:05:11:ca:07:
                    6e:49:96:0f:c1:9b:c5:73:f3:46:c5:eb:aa:fa:ec:
                    bb:81:98:18:8e:ef:e7:93:b9:6a:7e:fd:64:cd:b6:
                    ae:73:b0:6a:32:2c:c1:8b:bc:5f:a7:22:d8:71:da:
                    3c:e8:0a:dc:08:13:f0:29:f0:2f:c1:24:a8:d7:38:
                    0e:55:25:20:36:86:06:35:53:2a:d3:d1:79:39:94:
                    17:4e:b7:76:a6:2f:51:60:00:72:bf:5b:11:ec:37:
                    51:5d:a5:85:e7:e2:fd:5d:4d:2b:59:b9:8d:a5:26:
                    53:06:19:22:13:b0:8d:27:8c:86:7b:c3:64:d7:4a:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:41:F8:0B:2E:B4:8C:17:4E:8D:47:14:45:37:2F:58:B8:D6:E0
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132312e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:c7:ca:71:c8:03:c6:91:79:ad:34:b3:d8:d7:ef:92:2a:
         06:ec:75:98:ac:cb:72:57:73:a7:8f:4a:96:8b:1c:14:56:e8:
         1b:08:54:27:90:2b:65:ef:cf:61:ad:b2:62:af:24:3e:2e:8e:
         4b:77:b7:84:f4:71:6d:e6:09:4d:ec:9c:9a:96:7c:dd:e4:2a:
         52:57:1b:c4:81:ff:a6:e7:8e:38:39:54:b2:c4:ac:2f:9d:01:
         f5:d6:02:08:0f:b6:0a:5c:f2:67:d2:17:f2:95:03:72:c4:84:
         14:26:d6:96:a3:91:15:2c:49:e3:8b:46:30:7d:1d:12:72:cf:
         ee:4b:cc:cd:d6:68:aa:34:ea:26:2c:83:4b:cc:88:57:f0:86:
         5e:02:0d:4a:fe:fe:b5:f2:a2:64:52:ce:0d:9b:bb:c9:3d:78:
         a0:0f:1e:33:dc:b1:25:30:b1:20:5f:3d:1e:0d:06:dc:fc:c8:
         ae:82:49:08:d7:7f:22:5c:04:bc:5a:f7:8f:cc:b7:ae:3d:d7:
         f4:55:cc:e0:14:28:d7:c9:c8:e0:dd:b9:a7:4b:5b:b1:54:ea:
         58:1b:51:ef:20:9f:c5:46:e0:33:79:a4:24:26:17:7b:b5:25:
         24:99:f4:46:82:c5:af:93:36:ea:32:56:1c:0a:93:97:78:8a:
         fe:0e:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org