Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa
File:                     3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa (raw, json)
Hash identifier:          1p0Nl00syJyYDa/ht92pwgZeFqagy/V8pmNd/I6nEXY=
Subject key identifier:   43:D6:7F:5D:39:53:E7:7D:A2:B3:4A:57:BF:EF:8E:D2:26:A0:C0:7E
Certificate issuer:       /CN=7CC9540166EC287505A5559227CBD46E2F3EC666
Certificate serial:       2C823136EB65B08F1345818AD8B0796595F486F0
Authority key identifier: 7C:C9:54:01:66:EC:28:75:05:A5:55:92:27:CB:D4:6E:2F:3E:C6:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC9540166EC287505A5559227CBD46E2F3EC666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa
Signing time:             Mon 15 Jul 2024 14:57:11 +0000
ROA not before:           Mon 15 Jul 2024 14:52:11 +0000
ROA not after:            Mon 14 Jul 2025 14:57:11 +0000
asID:                     270426
IP address blocks:        190.111.140.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:82:31:36:eb:65:b0:8f:13:45:81:8a:d8:b0:79:65:95:f4:86:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC9540166EC287505A5559227CBD46E2F3EC666
        Validity
            Not Before: Jul 15 14:52:11 2024 GMT
            Not After : Jul 14 14:57:11 2025 GMT
        Subject: CN=43D67F5D3953E77DA2B34A57BFEF8ED226A0C07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:bf:de:98:c0:a1:25:fe:b2:35:ad:b3:70:
                    db:fe:9d:46:10:62:9b:b1:07:34:ad:83:18:d1:80:
                    43:74:59:9e:26:ea:24:d3:da:53:08:74:15:7f:40:
                    1e:4a:d9:50:75:05:cd:32:79:a9:cb:07:1a:ba:3b:
                    bb:e0:4b:d6:e2:24:3a:7d:a5:d4:2a:ad:59:e1:86:
                    2c:ef:77:88:ae:5f:14:44:56:40:6a:43:8a:ce:19:
                    aa:41:5b:00:49:38:44:93:5b:93:ec:7f:b7:17:5f:
                    61:0d:0b:d8:45:f2:f7:84:c0:b4:06:b1:5e:8e:16:
                    da:d2:d2:02:8a:40:33:97:da:1a:1e:b4:96:ab:72:
                    e8:1d:39:35:21:ee:4c:7f:23:b3:7f:7f:77:87:d1:
                    de:37:fe:95:85:ca:d5:81:ff:ba:05:57:b1:7d:33:
                    5a:3e:d3:0f:08:f7:b1:8d:95:06:ca:60:5f:7b:a3:
                    3c:9d:26:b0:9d:77:4b:84:73:86:60:d6:74:27:b9:
                    8e:b2:9c:bc:72:00:78:09:12:77:8d:ed:62:69:63:
                    7b:29:c3:c6:2e:8a:6c:92:56:f7:ee:57:d0:eb:51:
                    46:45:51:de:d5:37:92:86:22:30:7f:1d:99:a9:d2:
                    64:d2:fe:38:af:6a:bd:38:56:74:83:71:d1:ad:2c:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D6:7F:5D:39:53:E7:7D:A2:B3:4A:57:BF:EF:8E:D2:26:A0:C0:7E
            X509v3 Authority Key Identifier:
                keyid:7C:C9:54:01:66:EC:28:75:05:A5:55:92:27:CB:D4:6E:2F:3E:C6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/7CC9540166EC287505A5559227CBD46E2F3EC666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC9540166EC287505A5559227CBD46E2F3EC666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:27:44:9e:27:cf:19:20:dc:b1:f0:b0:e3:dd:93:1c:ba:d7:
         2d:99:65:b4:ca:d5:9a:b9:61:1f:1d:94:6e:6d:f5:34:18:1b:
         89:2a:ec:c8:c5:60:a6:78:dd:76:03:5a:eb:60:06:69:46:5a:
         d3:84:82:ab:66:63:8e:49:a9:bc:6f:fa:42:36:48:3b:dc:2a:
         5a:b2:c4:fc:8d:83:69:e9:20:d9:fc:8b:a3:cd:b0:9e:c1:7e:
         ad:36:83:ed:18:fe:db:ab:0e:1d:af:0f:54:b7:eb:97:db:f6:
         e9:34:78:08:ff:95:fd:18:86:73:31:6e:7e:18:c4:10:51:ff:
         0d:f4:67:89:53:f6:d7:c3:a5:2e:9d:95:1b:ee:c5:9b:b4:8d:
         15:9e:72:06:17:c6:c6:84:06:0a:bb:ae:fb:ab:ef:bd:ce:2b:
         8b:f6:71:7c:a6:6c:2e:4c:e4:8d:95:13:e4:a6:8d:a3:20:c3:
         21:3a:16:67:5f:2f:81:c6:03:24:f8:b7:7e:9e:fe:76:3e:db:
         96:ce:f0:43:ef:6a:16:2d:b8:11:fd:58:1b:bc:38:b4:14:d8:
         41:15:7a:7b:f5:72:9d:53:20:18:30:4b:37:95:8e:c3:2a:b8:
         c6:44:69:9f:82:7f:4d:07:7a:4b:8b:4d:cc:1f:50:02:72:40:
         ac:cc:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 20:24:33 2024 by rpki-client on console-fra.rpki-client.org