Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233392e302f32342d3234203d3e20323633353433.roa
File:                     3139312e352e3233392e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          iH3za9bvMgR+iwSuoDJtOx7S5ZaRpwAcZ38GnznVvFI=
Subject key identifier:   24:75:04:26:1B:8B:39:B8:D3:7F:22:AD:95:B1:AE:3A:75:67:3F:0E
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       7BB645AA24FD8CC3F1655D4B46645995B18EAA6B
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233392e302f32342d3234203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:41 +0000
ROA not before:           Thu 04 Apr 2024 20:35:41 +0000
ROA not after:            Thu 03 Apr 2025 20:40:41 +0000
asID:                     263543
IP address blocks:        191.5.239.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b6:45:aa:24:fd:8c:c3:f1:65:5d:4b:46:64:59:95:b1:8e:aa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:41 2024 GMT
            Not After : Apr  3 20:40:41 2025 GMT
        Subject: CN=247504261B8B39B8D37F22AD95B1AE3A75673F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:2e:e5:9f:41:9d:ce:9f:94:c8:92:fe:07:
                    28:d3:2e:e3:b3:9c:53:13:55:c7:ab:f9:f0:10:d1:
                    47:a8:2f:1d:2a:fb:9d:bd:4d:6a:3b:58:b9:ab:aa:
                    86:2b:b1:08:d0:6f:1f:05:28:30:f0:8c:18:3c:2d:
                    c0:fe:25:34:a1:66:91:62:9a:bd:3f:2b:5a:08:d7:
                    20:2d:9d:8b:6f:f9:b4:37:d6:6c:b5:d4:ee:70:de:
                    4c:70:62:f4:4b:60:a2:01:c2:3f:15:8e:19:6c:8f:
                    13:99:7b:20:ff:b9:fd:50:20:0a:d8:52:79:0e:e7:
                    1d:ad:c0:1d:3b:b0:ee:bf:c0:28:29:97:1c:57:f9:
                    64:20:d0:9d:6f:f4:14:3b:95:84:b9:9b:43:7a:a8:
                    04:05:db:b7:43:6a:b8:dc:02:b3:09:2f:45:00:f6:
                    37:07:fc:d3:48:ef:77:9c:96:92:08:0f:72:de:d3:
                    0f:8e:53:06:aa:37:cc:6c:bd:67:04:b8:3a:77:08:
                    d9:ba:d8:33:2c:5a:12:cb:ae:68:74:9d:a7:48:94:
                    81:c7:bc:c3:be:8b:eb:89:9d:4e:2a:7c:fe:be:ed:
                    8b:a4:6d:e3:77:95:19:b5:65:61:1b:75:dc:f7:59:
                    d0:4f:aa:90:85:3a:b2:d0:2b:f0:cc:6b:ae:8b:6a:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:04:26:1B:8B:39:B8:D3:7F:22:AD:95:B1:AE:3A:75:67:3F:0E
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3139312e352e3233392e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:45:e7:b0:8b:53:a0:8e:81:f5:f5:2e:14:d9:61:37:36:
         cd:78:dc:15:41:fd:89:8a:e1:a7:b7:c5:36:d1:23:dd:2b:cc:
         c2:05:89:9e:3b:72:09:85:9b:16:e9:44:5b:d6:2e:ce:94:60:
         c9:ec:b4:f6:47:cc:e4:10:0b:71:7c:78:65:3d:c3:b6:f9:5e:
         09:91:32:44:5e:7e:6d:6f:01:21:5e:f3:34:0b:78:b4:48:cd:
         0d:ba:94:1d:dc:7d:f0:b2:0b:ef:97:97:52:ce:98:5e:21:c6:
         22:c1:16:d9:0f:70:c5:a7:89:ba:9e:fd:09:7f:1c:ab:3c:20:
         25:67:12:4b:00:e2:00:63:69:09:ea:1b:2a:64:b8:43:c1:7c:
         d4:49:84:c3:a7:7a:2c:4f:8b:de:5e:a6:a3:3c:67:35:cf:9a:
         35:fa:10:93:b5:4b:ef:f8:22:64:2c:0f:07:06:b5:4d:aa:2e:
         da:50:92:cd:e2:09:25:07:69:51:a2:9d:5e:2e:55:c1:78:4e:
         23:a4:57:8d:04:bb:56:9d:f4:26:6f:4f:71:dc:25:57:77:8a:
         47:cd:eb:4f:e8:2d:99:66:de:94:c1:70:76:1d:14:8e:da:76:
         68:ee:58:f8:6a:f8:a3:06:15:a3:cd:2f:70:e5:5c:e2:ed:29:
         2a:5f:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org