Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233372e302f32342d3234203d3e20323633353433.roa
File:                     3139312e352e3233372e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          W58/3RF3E9IqGhNS6W4MRKezIAwZphdeTIKhvhe57oM=
Subject key identifier:   25:65:F1:43:7E:CC:DC:0F:D1:62:56:95:19:6E:09:57:55:3C:48:34
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       665C8DAC2918342155BBBC9C6AD569406F5808A0
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233372e302f32342d3234203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:42 +0000
ROA not before:           Thu 04 Apr 2024 20:35:42 +0000
ROA not after:            Thu 03 Apr 2025 20:40:42 +0000
asID:                     263543
IP address blocks:        191.5.237.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5c:8d:ac:29:18:34:21:55:bb:bc:9c:6a:d5:69:40:6f:58:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:42 2024 GMT
            Not After : Apr  3 20:40:42 2025 GMT
        Subject: CN=2565F1437ECCDC0FD1625695196E0957553C4834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:5d:50:15:b7:bc:f5:fc:e8:cd:83:26:56:
                    a6:ee:9c:0f:e4:a4:db:01:3c:e5:3b:47:ba:61:88:
                    75:d8:62:e7:9f:9c:fb:c7:0e:c1:f6:b4:3f:ca:47:
                    a7:c1:32:ef:79:08:a5:34:76:95:44:82:07:20:22:
                    5f:8a:a8:eb:67:7d:02:a6:4f:0f:1a:81:a1:60:37:
                    4b:ea:cb:5a:0a:5b:16:d3:5d:ff:43:87:40:e0:6c:
                    e2:8a:58:a0:16:bd:a5:1d:a8:36:23:18:b0:18:79:
                    5c:8e:3c:6c:51:bc:36:30:51:51:fe:63:8f:ff:98:
                    e6:6a:49:39:88:0f:6c:73:fd:b6:00:62:82:16:eb:
                    0b:69:dd:1f:9a:dc:d7:88:4c:91:f3:66:ba:cf:d5:
                    0a:3a:9a:86:1c:f7:c2:bc:b0:7d:6c:7c:47:cc:3a:
                    30:5f:9d:59:3d:17:51:18:16:b1:50:73:ec:2b:a9:
                    a6:f7:51:9f:e7:2f:4d:92:26:40:d9:c2:a2:bf:5b:
                    67:b5:36:e0:bb:1d:2f:f0:d5:9c:f7:e9:0b:0d:17:
                    25:f7:5c:8f:f4:1d:33:9d:50:e5:90:3b:35:80:4f:
                    70:27:65:e4:65:b4:78:6c:df:a8:dd:d9:76:5a:de:
                    aa:80:77:23:79:d9:d3:af:67:1b:0b:9d:7e:5a:51:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:65:F1:43:7E:CC:DC:0F:D1:62:56:95:19:6E:09:57:55:3C:48:34
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233372e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:78:f4:67:91:37:7c:91:c0:a9:c2:78:e1:df:df:03:26:
         3e:b2:b8:5e:73:72:82:06:91:53:b9:15:41:84:ca:50:f9:b1:
         c0:3f:3d:a8:93:71:6d:15:63:9f:55:41:86:9c:e3:5f:ff:d3:
         e1:b2:93:77:96:85:19:b2:5e:84:1e:f0:2a:1e:e9:55:e1:ec:
         74:c5:70:9a:45:fc:f8:96:a0:db:d8:ff:2d:b8:3b:6d:20:bc:
         e8:ce:33:6e:cc:82:42:b8:ad:11:c3:48:7a:d1:61:10:06:86:
         8f:28:81:b3:17:33:ba:08:b5:e7:cb:16:25:c0:9d:9b:02:45:
         27:c5:2b:72:f2:b0:e2:67:a3:df:90:d7:aa:55:da:80:7b:54:
         46:fb:9c:c0:23:01:42:74:10:0b:5d:58:68:33:bc:a1:d7:57:
         b2:83:73:ad:48:75:94:f9:e3:43:7c:84:97:ae:16:74:47:04:
         e5:68:33:ad:c0:bc:bc:55:c8:13:4b:ef:02:09:64:88:6c:c4:
         7b:a8:2d:38:3f:3c:3b:0f:a2:c5:f8:c6:30:44:60:cc:4b:7d:
         7c:37:b1:b1:c8:6f:a1:e7:1f:de:18:5f:3e:76:6b:ba:29:99:
         ee:fc:5d:86:6b:17:99:c5:fe:18:a1:10:a3:79:23:75:84:dd:
         8b:31:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org