Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233322e302f32312d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          3GzHtlifWOmrwKHods+Lkwf1uUtKvzoLLYX5FZeoDQc=
Subject key identifier:   77:DF:55:C5:53:85:D3:63:EF:61:27:BD:69:14:E6:63:FE:9C:65:8D
Certificate issuer:       /CN=B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B
Certificate serial:       4589AD5EDCF29A0F4D76AA9556454942469FB3B9
Authority key identifier: B7:D9:50:16:B7:20:FE:7E:CA:7F:19:DD:5E:AE:4B:BA:4B:FB:5E:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3234203d3e20323633343834.roa
Signing time:             Wed 22 May 2024 17:00:36 +0000
ROA not before:           Wed 22 May 2024 16:55:36 +0000
ROA not after:            Wed 21 May 2025 17:00:36 +0000
asID:                     263484
IP address blocks:        191.242.232.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:89:ad:5e:dc:f2:9a:0f:4d:76:aa:95:56:45:49:42:46:9f:b3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B
        Validity
            Not Before: May 22 16:55:36 2024 GMT
            Not After : May 21 17:00:36 2025 GMT
        Subject: CN=77DF55C55385D363EF6127BD6914E663FE9C658D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:c1:64:04:a8:06:34:1a:bf:1f:8d:e9:0b:
                    98:49:7a:ac:1c:1e:10:a3:55:c0:7b:db:34:6f:22:
                    0b:c2:54:c2:ee:9e:95:1f:46:55:dc:1f:0f:14:e3:
                    1d:83:88:23:87:3e:c7:fd:f8:93:94:e9:e4:3f:df:
                    f6:d9:70:6d:05:fc:cb:ae:98:c0:2a:46:6a:ec:fc:
                    9c:97:48:74:09:85:63:62:29:f3:5e:05:99:ec:08:
                    24:4c:be:bc:88:6a:cc:af:96:9e:b0:be:c1:87:42:
                    69:b4:7b:fd:69:39:5d:f1:1e:17:63:90:02:f4:ba:
                    46:cd:22:b1:4c:0f:c1:14:d2:9b:01:d8:30:04:c0:
                    47:ac:3a:f0:a1:fc:9b:13:06:0b:47:29:2f:b5:8a:
                    e7:7d:9d:77:99:d0:1e:5c:36:17:a6:8c:ef:75:ef:
                    72:65:79:22:8c:21:f8:de:69:a2:8b:bc:62:57:fb:
                    2d:0d:62:09:4a:56:ff:d0:3a:b8:e0:d5:6f:87:37:
                    e3:a3:a2:f7:40:9d:be:1b:26:e9:de:14:0f:a2:c4:
                    b5:6e:5a:44:80:b7:70:98:f2:63:ce:5f:75:29:7b:
                    59:c1:c0:48:c3:2c:1f:df:c7:84:29:e9:47:6a:d4:
                    dd:f2:11:3b:69:e3:31:4f:a0:16:c9:ab:cc:39:e0:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:55:C5:53:85:D3:63:EF:61:27:BD:69:14:E6:63:FE:9C:65:8D
            X509v3 Authority Key Identifier:
                keyid:B7:D9:50:16:B7:20:FE:7E:CA:7F:19:DD:5E:AE:4B:BA:4B:FB:5E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:f2:24:f2:80:72:65:bc:73:90:09:49:b9:c9:95:b4:38:
         43:8f:9d:d8:10:48:db:a5:c4:08:a3:1a:af:26:f9:de:1f:c6:
         18:37:fa:c4:00:23:4c:ad:cb:67:1e:4a:71:b5:4f:f0:5d:90:
         3f:1e:5d:2c:00:a9:a5:f2:78:6e:b0:d6:3f:47:07:46:05:26:
         61:9c:50:0f:ff:0d:e0:1c:fe:f1:aa:b3:fa:62:c1:b1:3e:70:
         8f:9a:53:6a:3f:df:ed:a9:e0:13:5c:6a:eb:ab:2f:eb:5d:57:
         ee:3d:be:a9:39:dc:cb:c2:50:92:b5:72:fa:a9:e9:17:b3:bd:
         b3:2f:17:cb:06:e8:33:4a:23:fb:5e:3a:ee:cc:25:7c:76:44:
         93:55:4d:d8:2b:9e:d2:42:29:0a:a6:e7:0e:4b:12:cc:f1:b1:
         2f:87:42:40:a4:7d:b2:af:7e:0f:98:27:91:1b:ac:82:87:d7:
         ad:f7:a5:ae:de:4d:7e:14:3e:eb:6e:f5:26:a1:02:59:9b:2b:
         7e:0f:1c:d8:a0:7b:83:2d:3d:6f:60:e8:fe:14:87:00:e3:44:
         36:71:07:3c:d4:54:53:d9:21:97:41:21:51:87:1e:b4:51:d8:
         df:5b:a4:26:6a:59:c0:ae:10:69:7e:81:93:4c:3d:e0:5a:1e:
         15:0f:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 15:20:14 2024 by rpki-client on console-ams.rpki-client.org