Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132332e302f32342d3234203d3e20323633353433.roa
File:                     3134332e3230322e3132332e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          PYPyKXDunpfbASpOy5bW7t9HeLFKRx1IsjmLmFfgfXM=
Subject key identifier:   9E:8A:22:3E:CB:76:28:65:1B:B9:BB:A8:2F:1F:2F:E6:3A:D2:15:4B
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       20052AC226FA4D75B064A0432BF1677F44BCE8CA
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132332e302f32342d3234203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:41 +0000
ROA not before:           Thu 04 Apr 2024 20:35:41 +0000
ROA not after:            Thu 03 Apr 2025 20:40:41 +0000
asID:                     263543
IP address blocks:        143.202.123.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:05:2a:c2:26:fa:4d:75:b0:64:a0:43:2b:f1:67:7f:44:bc:e8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:41 2024 GMT
            Not After : Apr  3 20:40:41 2025 GMT
        Subject: CN=9E8A223ECB7628651BB9BBA82F1F2FE63AD2154B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:25:84:c0:f8:d6:a0:c0:97:15:3b:6d:c3:
                    ce:b9:7f:6a:f0:fa:c5:9f:b0:1d:90:24:63:eb:cf:
                    90:63:27:ca:e1:42:4f:a5:44:aa:88:a0:7a:93:60:
                    ff:1a:61:c1:b3:59:4d:79:ff:84:eb:07:ea:de:4e:
                    f6:47:c9:3e:cc:7a:13:e5:d9:eb:e1:7d:e2:f4:a7:
                    cb:8a:6e:79:3f:e5:dc:35:92:84:06:74:00:47:e1:
                    d8:99:8d:d7:e3:95:95:d9:f5:c0:99:8a:5d:2c:6d:
                    c5:1d:49:bb:fa:a5:06:6d:e6:d8:7f:ab:7f:80:91:
                    1e:24:31:d2:d0:8c:e9:2c:e1:78:76:35:73:b9:76:
                    4c:dd:9d:0a:07:67:f6:49:09:36:81:f1:ed:76:8a:
                    1b:6d:99:41:10:b5:17:a3:64:dd:24:8a:cc:0f:3b:
                    51:0b:64:fc:f1:13:09:e0:6d:54:5f:4d:d6:72:7f:
                    2b:88:b4:19:74:e8:60:11:36:15:2f:74:5e:c2:03:
                    44:68:07:98:96:3c:38:40:56:db:f0:39:79:d5:c4:
                    a5:62:ae:11:74:6f:b2:e2:26:5d:b4:be:28:07:b1:
                    6a:80:d3:40:ce:ef:a6:22:fc:c6:bf:c5:7f:cc:f3:
                    7f:8b:cf:1f:e6:75:85:8d:44:33:fe:0a:16:cc:29:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8A:22:3E:CB:76:28:65:1B:B9:BB:A8:2F:1F:2F:E6:3A:D2:15:4B
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132332e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:0b:9d:80:2d:09:db:6e:9b:5b:8e:a2:99:69:d6:c4:77:67:
         b7:ec:49:03:4a:5f:b1:f4:09:45:84:cf:90:15:8f:7b:16:13:
         4d:d2:0c:b4:ef:3e:65:30:66:34:70:f9:63:1d:5e:85:1e:f5:
         59:5c:00:02:82:a4:fe:be:ca:ad:95:96:09:d0:48:4d:52:21:
         68:1b:03:c6:cf:d6:b3:ef:6a:c1:77:2a:ea:5f:ce:eb:57:94:
         f9:20:8e:8d:68:48:26:0e:76:9b:81:7e:22:b6:01:6d:de:87:
         af:c9:c3:d2:a7:bf:59:dd:b6:98:e9:b7:80:8a:0f:01:1a:8a:
         ac:65:7c:bf:07:c2:5f:86:29:21:39:9c:0c:c5:b4:15:c9:0d:
         7d:58:b4:2f:26:22:96:90:4d:99:28:b3:e6:e7:c4:48:d0:28:
         7c:3b:37:2f:23:7d:cc:60:b6:7c:6a:27:62:7d:e3:4c:91:66:
         a8:25:db:b4:38:6a:42:6a:1c:b1:83:11:3a:72:e5:17:94:5f:
         1d:66:4a:b0:f8:0d:b6:6e:b0:7e:1f:dd:1b:5f:83:70:7f:9e:
         93:e3:a5:2d:d6:37:9f:77:5b:65:80:a0:6e:ba:98:d3:e8:d1:
         dd:85:71:d7:5f:ce:e1:6e:35:e9:ab:82:71:03:10:d9:71:dd:
         d2:29:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org