Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233382e302f32342d3234203d3e20323633353433.roa
File:                     3139312e352e3233382e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          G7bGBpHEk4Sy/p+MfvejSWyBdixNPywWDGtUWpa4vdg=
Subject key identifier:   8D:63:B9:B1:4C:E6:78:0D:99:2E:46:98:65:CF:8A:A8:87:0C:21:AB
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       0157FACF248DFCA2FF28C519C7329D2A118CC68D
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233382e302f32342d3234203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:42 +0000
ROA not before:           Thu 04 Apr 2024 20:35:42 +0000
ROA not after:            Thu 03 Apr 2025 20:40:42 +0000
asID:                     263543
IP address blocks:        191.5.238.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:57:fa:cf:24:8d:fc:a2:ff:28:c5:19:c7:32:9d:2a:11:8c:c6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:42 2024 GMT
            Not After : Apr  3 20:40:42 2025 GMT
        Subject: CN=8D63B9B14CE6780D992E469865CF8AA8870C21AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a3:ea:33:02:3d:f5:db:b5:fa:bd:26:69:b0:
                    5c:e6:fa:57:cc:06:a7:98:ed:75:4c:87:c2:7d:b2:
                    7c:d5:db:9b:c5:fb:30:fc:7e:71:9d:42:a0:73:4c:
                    e3:d3:f8:f3:35:b3:24:00:5c:27:56:77:da:68:76:
                    e1:6b:57:c1:c9:61:75:ba:5c:67:7d:24:bd:68:7b:
                    a3:17:7c:d9:ca:99:53:9d:cd:ad:8b:35:a0:cc:fb:
                    02:07:96:e4:79:f5:0d:5e:1e:fb:f1:56:27:d0:61:
                    8d:e7:af:a9:6c:99:57:4c:15:e0:91:3e:3d:11:e1:
                    0d:9f:76:07:9f:db:c2:02:40:6e:e2:bb:a6:9f:80:
                    1d:6f:ae:96:bc:48:b4:b6:08:d9:4f:04:ea:ab:90:
                    3e:64:c2:25:e0:eb:01:96:3f:9e:43:81:7d:4c:3e:
                    8e:2d:91:04:ae:fa:0f:c9:7a:03:4b:e2:e2:48:82:
                    1f:b0:d3:12:48:58:d6:af:bd:d6:ae:17:d6:f9:ca:
                    14:14:fe:83:f3:6c:cb:bc:76:6f:b7:2b:26:e1:19:
                    42:9a:84:1f:ce:20:14:a4:2a:02:c9:de:92:07:da:
                    08:29:c1:ca:a1:dc:f6:88:80:6f:9d:d3:f9:d4:bb:
                    32:7c:10:1e:39:66:6d:fb:97:30:9a:eb:28:e3:c6:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:B9:B1:4C:E6:78:0D:99:2E:46:98:65:CF:8A:A8:87:0C:21:AB
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233382e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:b4:47:4a:29:f2:63:c0:ca:bd:ad:50:fb:59:dc:68:14:
         63:c1:17:23:6c:40:62:aa:ca:e7:10:b1:0a:79:a0:81:f0:20:
         f1:a6:bb:d3:7c:71:95:44:97:94:72:08:4e:2c:3d:f9:26:4f:
         9b:7b:71:1d:0b:20:b3:5b:9a:89:1f:f8:1e:18:e0:2b:e0:42:
         44:15:67:78:8c:80:91:f6:76:95:d5:e9:21:8e:3e:14:e3:a9:
         70:35:d5:93:84:6b:56:85:42:e8:a9:ff:75:50:f5:e8:42:aa:
         46:91:d9:7c:54:a9:44:43:99:5b:6f:93:63:79:37:0b:76:cf:
         0a:f0:99:f0:a6:07:a4:80:48:d0:67:20:c4:56:4a:b2:12:a6:
         85:47:97:6b:54:9d:3f:fa:31:e1:b6:05:cc:d3:0d:1d:6d:52:
         2d:38:93:bf:e9:9e:d6:90:3d:d2:f0:cc:4e:ea:ac:ba:0a:aa:
         ea:5c:51:32:66:da:f1:d4:06:90:88:ac:c0:b0:e3:ab:7c:7a:
         bd:b9:64:70:21:26:c3:9d:65:e7:ec:ce:9e:63:49:d4:c0:76:
         5f:11:ce:23:bb:7d:2b:fe:99:c0:c0:2f:e4:44:9b:27:45:ab:
         70:12:3e:55:c3:80:51:92:28:37:f5:a3:bd:12:b7:ad:45:1b:
         86:25:23:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org