Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          bCcm4onnkgDDtjdHVQB3wULgVw3Dmzqd1TYqsSpHtEw=
Subject key identifier:   C7:A0:30:25:D3:DE:8E:16:DC:C9:AB:11:B1:F7:7B:40:BA:01:0F:DD
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       0D4BA5BF2BE284405CFF087684BF3C23B49F1B38
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:57 +0000
ROA not before:           Thu 04 Apr 2024 08:37:57 +0000
ROA not after:            Thu 03 Apr 2025 08:42:57 +0000
asID:                     271134
IP address blocks:        167.249.91.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4b:a5:bf:2b:e2:84:40:5c:ff:08:76:84:bf:3c:23:b4:9f:1b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:57 2024 GMT
            Not After : Apr  3 08:42:57 2025 GMT
        Subject: CN=C7A03025D3DE8E16DCC9AB11B1F77B40BA010FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:86:91:2c:01:23:cc:c7:4a:d2:67:f0:23:
                    6b:ae:e8:d8:29:43:76:76:49:68:21:a8:ff:03:b8:
                    9b:c9:ff:4a:e2:25:3c:40:9c:ea:be:57:62:05:96:
                    6b:6c:f6:f9:29:5c:2f:1b:54:f5:b3:bc:c3:c3:b4:
                    7d:d5:a0:ca:16:54:28:5e:58:c6:ab:7e:c3:15:c0:
                    a3:f9:5f:d1:0a:6b:c7:b5:0b:8f:38:68:2c:08:f3:
                    13:39:17:56:95:11:6c:ce:0b:2b:8e:3b:4d:14:95:
                    db:9e:b9:20:92:c9:89:f7:9c:64:97:6f:d8:61:6f:
                    53:1d:d3:c3:8b:fe:f9:16:0f:46:91:43:db:29:7c:
                    4d:ae:ae:14:94:c4:be:6f:e6:99:66:14:c8:d8:92:
                    cd:3d:18:78:91:3b:88:66:ae:46:69:36:df:c6:c8:
                    a6:72:c1:56:95:2d:31:cf:88:40:f2:25:1e:26:05:
                    03:fe:d2:fa:30:9f:98:17:c3:f0:29:f0:16:a7:b6:
                    2d:a0:db:1d:07:97:96:1e:96:3b:30:6c:4f:cb:a5:
                    a2:5a:d8:ea:cb:f5:ed:42:34:81:70:52:84:3b:a0:
                    ad:e3:ef:b2:a3:2a:76:32:1c:58:f9:a0:ce:98:8d:
                    9b:4d:d2:66:02:a8:c9:db:87:35:39:eb:bb:f5:40:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:30:25:D3:DE:8E:16:DC:C9:AB:11:B1:F7:7B:40:BA:01:0F:DD
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:55:26:8c:7f:26:c1:b3:0d:fa:74:d7:73:60:16:cc:d5:40:
         17:4f:29:a2:86:e5:78:d5:f9:19:ad:d7:33:b7:63:af:8b:de:
         f6:fd:af:4e:d8:9e:6b:d6:34:53:75:49:a5:a4:ce:5b:92:e3:
         0a:22:43:96:62:65:5a:70:32:15:e4:93:c8:2d:51:2f:54:3f:
         44:88:36:1e:76:38:1b:c5:9f:a3:34:56:5e:e3:38:7a:a0:26:
         4d:6f:dd:74:f2:3f:75:44:d7:80:8d:59:87:7d:b3:9a:21:3f:
         ec:95:f6:e5:18:a1:fc:e4:a3:c9:4a:fd:2b:e5:3a:fb:dc:d4:
         ad:4f:3e:09:1a:7d:d2:fb:d7:58:61:99:d9:28:a6:2c:8c:de:
         de:09:7d:db:54:78:b1:05:bb:28:c7:b7:f5:cb:e1:ea:10:5f:
         ec:e5:d9:85:1e:74:09:67:e3:17:4e:7d:07:af:e2:19:e6:69:
         11:21:af:9e:53:70:de:8e:dd:30:de:04:ab:2c:f3:26:be:1e:
         3e:be:6b:aa:83:c4:c1:c9:94:ff:9d:e8:56:85:e1:8b:29:99:
         11:6b:2e:34:dc:27:ff:0e:78:7e:2b:02:1a:ed:9d:3d:f6:c4:
         c5:5a:30:d3:1a:ed:43:cb:2b:dc:04:bf:45:10:38:d5:41:b6:
         28:47:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org