Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3139312e352e3234302e302f32302d3234203d3e20323633353434.roa
File:                     3139312e352e3234302e302f32302d3234203d3e20323633353434.roa (raw, json)
Hash identifier:          tIwclNwutAnq8e2EivbZkzv9Wtm9vSyVQa0lKnlgu+k=
Subject key identifier:   E0:58:87:20:8F:F1:F1:0B:56:56:22:84:8C:BE:CD:80:97:FA:97:32
Certificate issuer:       /CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
Certificate serial:       0A6CE75C8AAED1643108E3363095E86E585D53BD
Authority key identifier: 87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3139312e352e3234302e302f32302d3234203d3e20323633353434.roa
Signing time:             Thu 04 Apr 2024 14:12:51 +0000
ROA not before:           Thu 04 Apr 2024 14:07:51 +0000
ROA not after:            Thu 03 Apr 2025 14:12:51 +0000
asID:                     263544
IP address blocks:        191.5.240.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:e7:5c:8a:ae:d1:64:31:08:e3:36:30:95:e8:6e:58:5d:53:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
        Validity
            Not Before: Apr  4 14:07:51 2024 GMT
            Not After : Apr  3 14:12:51 2025 GMT
        Subject: CN=E05887208FF1F10B565622848CBECD8097FA9732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:19:34:1d:a7:49:0f:36:ae:67:f9:da:6c:
                    7b:65:e4:82:68:72:97:46:d3:e0:fd:71:9a:60:a1:
                    b0:fb:79:8f:fc:f1:f1:89:ca:2e:1a:ea:08:23:a9:
                    5e:cc:7a:dc:bf:44:b4:68:1a:e1:bf:5a:b6:3c:d4:
                    02:13:39:8f:1f:ec:91:c9:20:69:23:a2:c9:92:e1:
                    75:3d:c8:91:6e:d0:63:39:21:ee:17:ed:b4:95:39:
                    a2:b0:6d:8a:a4:83:7d:bd:d5:4f:02:70:11:07:2d:
                    33:a2:a7:14:9b:fa:08:bf:99:0e:45:ba:5d:e3:12:
                    42:e3:55:6f:eb:35:c4:14:bb:4e:c5:76:ca:37:ca:
                    e3:d6:6c:5c:d9:87:c1:35:c5:cb:0f:06:16:a7:53:
                    58:4b:d7:f7:51:0f:f0:f9:b4:f8:81:88:51:03:55:
                    88:0f:3a:10:8b:74:85:d2:c3:8e:c5:9d:37:0d:88:
                    23:da:c0:25:63:1a:33:ef:b5:a4:07:eb:c7:d8:69:
                    2a:6a:5f:6e:53:3a:cc:25:8c:1b:bf:1a:5a:2b:cc:
                    c8:26:77:9b:73:69:57:08:14:16:b8:dd:98:c2:05:
                    4c:0f:0c:ce:40:75:fd:f6:16:43:21:5b:8e:b3:80:
                    e5:bf:59:ef:51:15:e8:e0:51:70:a0:fb:db:d1:c7:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:87:20:8F:F1:F1:0B:56:56:22:84:8C:BE:CD:80:97:FA:97:32
            X509v3 Authority Key Identifier:
                keyid:87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3139312e352e3234302e302f32302d3234203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:65:1b:13:97:96:a8:f7:6e:b6:a1:88:9b:43:d8:62:8f:a4:
         4b:70:27:ea:c4:c3:3e:45:78:38:31:25:74:ef:72:b9:2e:bd:
         f9:cf:a7:39:55:76:ed:25:37:92:13:00:54:52:d8:c7:e5:0d:
         f3:18:a0:11:a3:ea:05:36:dd:79:14:22:00:f9:89:32:f3:3e:
         5b:b3:bd:8a:af:47:41:e5:ae:7a:32:fc:47:7a:7c:43:bf:4d:
         7e:4e:2e:09:0d:46:c6:e2:cd:ad:fe:c6:18:98:91:6f:f1:58:
         b3:7e:bb:31:00:fe:bc:9e:30:23:dc:9a:e5:ed:13:9e:e0:67:
         a2:23:1b:71:2e:14:13:07:c3:25:10:c8:23:dd:7e:ed:8b:b0:
         3a:29:2c:43:40:1e:0e:87:b1:bc:d5:f3:26:71:dc:cf:9c:6a:
         db:67:5e:f9:3f:cd:77:75:af:f0:22:6e:72:13:61:e8:40:9d:
         1d:83:1a:bb:c6:a4:6c:20:ef:a6:39:e2:d5:73:5d:50:cf:89:
         87:b1:bf:ee:81:cd:87:e5:b0:c6:fa:af:65:36:a0:61:24:49:
         79:ee:e2:7f:01:b4:e2:f1:1a:fd:7b:8c:37:ce:2f:77:b2:d8:
         09:7a:1d:c2:4d:f8:fc:36:26:15:da:9e:f9:d1:39:7d:49:b9:
         db:83:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 00:01:37 2024 by rpki-client on console-fra.rpki-client.org