Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3137392e3139312e3234302e302f32302d3230203d3e20323633343231.roa
File:                     3137392e3139312e3234302e302f32302d3230203d3e20323633343231.roa (raw, json)
Hash identifier:          9x9jBRlqWO8V36G4DEMDCnzj3XOfuOsnUbWR0DwtAFE=
Subject key identifier:   1C:87:E7:E0:D1:7D:A1:3B:7B:E9:3E:73:EC:47:1E:DF:15:B5:FD:CE
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       6C0D35B66ECC729D420414E05CE40948418CDAF9
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3137392e3139312e3234302e302f32302d3230203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:47 +0000
ROA not before:           Thu 04 Apr 2024 07:39:47 +0000
ROA not after:            Thu 03 Apr 2025 07:44:47 +0000
asID:                     263421
IP address blocks:        179.191.240.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:35:b6:6e:cc:72:9d:42:04:14:e0:5c:e4:09:48:41:8c:da:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:47 2024 GMT
            Not After : Apr  3 07:44:47 2025 GMT
        Subject: CN=1C87E7E0D17DA13B7BE93E73EC471EDF15B5FDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:5b:a9:0d:db:ff:89:f8:a6:4d:df:2c:43:
                    89:b7:39:71:50:7a:ba:a7:c4:d3:4f:77:12:71:57:
                    f7:50:9a:75:7a:57:24:5e:c4:ef:2b:47:f4:8b:6d:
                    de:a6:a5:cd:c7:2f:b1:8f:c3:c4:ae:ae:64:0b:70:
                    b7:03:8e:42:59:23:be:f2:47:33:e6:86:32:ab:89:
                    bf:82:96:0a:af:51:f7:b2:9d:ef:11:62:19:ea:1a:
                    67:7f:90:2c:34:a2:d5:c9:9c:09:00:f7:bb:c4:58:
                    38:26:a4:0c:45:8c:70:28:f8:b0:39:69:c2:f6:05:
                    b7:b5:bf:97:2a:5f:b2:b4:7a:66:ba:26:76:d0:75:
                    ff:b4:26:f4:d9:d7:a1:ce:d2:05:34:b4:ee:fd:65:
                    09:d3:03:39:64:c7:59:60:0f:c5:5f:b4:ec:fb:72:
                    08:e4:14:7d:5c:5a:a3:f3:df:2d:89:6a:b3:bd:d5:
                    77:c8:fe:a8:e5:62:a5:a8:d4:4f:93:01:c9:1a:eb:
                    7c:5a:e6:89:5a:2e:b5:9b:90:e4:66:2d:86:1e:2b:
                    c3:75:6f:e4:01:10:9b:91:dd:cb:82:ea:6f:ba:3b:
                    be:c7:74:c9:bc:11:48:9a:1e:d3:b1:0c:41:a4:fa:
                    9a:44:1f:ce:2d:20:e5:d2:04:d1:96:04:ab:c8:5a:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:E7:E0:D1:7D:A1:3B:7B:E9:3E:73:EC:47:1E:DF:15:B5:FD:CE
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3137392e3139312e3234302e302f32302d3230203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:02:b6:eb:23:e5:3f:c2:1a:c2:c6:f4:39:e0:c6:6a:21:2d:
         ea:32:08:89:a4:11:68:11:d1:b9:73:d0:dc:c0:2d:a8:0b:3e:
         0c:a6:c0:46:eb:df:6f:90:95:db:b4:af:8c:e5:ee:eb:06:57:
         e7:25:f6:81:82:f6:04:04:53:e5:82:39:07:9f:7e:78:44:c9:
         80:0b:13:5b:54:3a:15:c4:11:a2:d4:a2:b3:4d:21:44:fb:b7:
         69:15:26:f7:07:8c:bd:c1:ff:02:5b:fb:56:3c:6e:7f:ab:ce:
         8d:9e:d5:b8:00:c1:35:df:ab:9f:6c:eb:53:de:30:b5:2c:03:
         4f:fa:de:f4:a3:8b:56:08:22:68:f7:db:29:71:d7:21:d9:8e:
         83:d7:2d:9a:a2:2a:44:d3:a0:4e:68:b3:fe:57:9d:cb:24:be:
         86:e4:de:40:fd:99:ba:78:8d:eb:ec:f3:39:58:e4:d1:65:c8:
         67:2d:61:ac:a6:83:3d:d2:a7:ef:1c:5f:1f:fc:ab:f0:88:e5:
         08:ac:5d:ac:3e:39:b5:8c:ca:b4:2e:74:46:ea:6b:ef:9a:bb:
         b8:ef:6b:56:5e:70:fd:2a:41:03:1d:a6:0a:55:57:f0:8d:7b:
         6c:70:7c:9f:09:cb:b7:a7:53:28:e6:f5:52:72:36:d4:75:75:
         42:26:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 19:03:06 2024 by rpki-client on console-fra.rpki-client.org