Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          zf9cjDZv2sWJvV//6e8Yo7pYQxVcWQ8fG7IqYMLH9AQ=
Subject key identifier:   CF:6A:76:DB:F0:95:8A:5E:C3:45:D7:42:EA:6D:D4:0A:A6:04:F1:AB
Certificate issuer:       /CN=69064F8F72CDE87A9EED7C07BB0FCBF94418E82B
Certificate serial:       6825C995430357677BBDFFB8323F0F4D2F56BF33
Authority key identifier: 69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
Signing time:             Wed 03 Apr 2024 23:33:39 +0000
ROA not before:           Wed 03 Apr 2024 23:28:39 +0000
ROA not after:            Wed 02 Apr 2025 23:33:39 +0000
asID:                     263444
IP address blocks:        177.91.160.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:25:c9:95:43:03:57:67:7b:bd:ff:b8:32:3f:0f:4d:2f:56:bf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69064F8F72CDE87A9EED7C07BB0FCBF94418E82B
        Validity
            Not Before: Apr  3 23:28:39 2024 GMT
            Not After : Apr  2 23:33:39 2025 GMT
        Subject: CN=CF6A76DBF0958A5EC345D742EA6DD40AA604F1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:1c:9b:6e:e3:0c:6c:cc:57:52:c4:06:6f:
                    e6:ab:66:f4:3a:96:1e:28:ae:03:3b:6c:6d:3a:b2:
                    1d:a9:a8:98:29:f6:c2:9e:31:80:ca:f8:9f:07:f4:
                    6d:06:79:81:08:bd:99:c2:35:76:88:aa:34:ad:5e:
                    1e:d1:46:81:22:69:c2:1f:a7:32:36:76:f4:2a:42:
                    83:2b:b5:78:ec:e2:77:0a:c1:13:53:e9:36:5d:9f:
                    d7:85:9c:f5:a3:05:e2:32:d6:2a:72:f7:cd:95:6c:
                    ca:8e:3f:0d:dd:77:dd:cb:40:f6:4d:ae:47:1b:fd:
                    0d:08:07:11:e2:c3:46:36:13:a5:72:8f:46:7b:9f:
                    13:5d:ff:c9:60:55:0f:fe:2f:05:b2:65:17:d2:70:
                    b3:62:6e:9d:77:67:ec:90:12:30:8e:95:6a:30:ab:
                    74:f7:49:ea:db:a5:b4:14:4d:d2:2d:f3:f5:b6:8e:
                    4f:fe:e7:09:3b:39:c8:8e:3f:09:c1:79:d9:0d:76:
                    6e:65:15:94:85:04:4c:b0:0a:e4:8f:79:73:cb:3b:
                    3c:c5:05:91:f1:81:e6:86:05:6b:53:2c:d7:37:8e:
                    cb:7b:8a:b1:73:20:f7:f6:7c:02:a0:4d:a9:55:56:
                    86:7d:c6:8c:dd:c6:6d:6d:15:c7:42:09:34:58:95:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:76:DB:F0:95:8A:5E:C3:45:D7:42:EA:6D:D4:0A:A6:04:F1:AB
            X509v3 Authority Key Identifier:
                keyid:69:06:4F:8F:72:CD:E8:7A:9E:ED:7C:07:BB:0F:CB:F9:44:18:E8:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69064F8F72CDE87A9EED7C07BB0FCBF94418E82B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/1/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:4d:e7:70:a9:93:1e:a3:d8:5e:07:bd:c9:95:bd:87:4f:
         17:9c:9f:29:28:53:1c:b4:39:d8:d6:1a:1a:c7:d1:c1:41:f9:
         c5:21:97:06:7b:91:cc:a9:d0:d0:d3:0d:16:d0:ee:cf:9b:08:
         b1:14:68:29:49:da:36:32:2a:af:f3:80:47:05:b0:52:ca:8c:
         f9:93:b8:9b:ef:6b:71:b4:c5:f4:31:f5:87:b3:6a:3d:f6:1b:
         57:1d:6a:27:98:69:55:b9:e1:3f:7a:50:35:ca:a8:2f:80:ad:
         3c:a8:10:fc:2d:6b:f1:ab:11:ed:76:f5:8f:f1:f0:6e:28:fc:
         7a:73:80:2a:27:91:0a:82:68:16:7b:43:a8:90:e3:d9:3e:5b:
         e2:6e:83:17:44:a1:d6:29:e2:5e:84:ee:d2:36:b0:d3:e5:ae:
         c3:26:19:aa:60:7a:37:28:f7:e9:00:1d:8f:1b:9b:3f:7e:2d:
         36:85:3c:65:c1:0e:62:49:5d:94:84:bd:59:df:0b:0f:78:27:
         2a:2b:ef:db:e0:86:a2:d5:f7:f8:19:71:28:5d:bc:4e:c2:33:
         37:1a:be:07:65:cd:78:bf:c1:8b:45:c8:cb:8b:23:e3:ec:17:
         ad:86:89:04:d7:36:10:19:62:54:f5:21:ce:cd:20:4c:87:80:
         bd:80:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 04:01:39 2024 by rpki-client on console-ams.rpki-client.org