Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32312d3231203d3e20323633353039.roa
File:                     3139312e3234332e3137362e302f32312d3231203d3e20323633353039.roa (raw, json)
Hash identifier:          h+10OUmP896Osqg2tHYBYpb0Kmgy7u5HEmtGb0VcoWE=
Subject key identifier:   4E:C8:97:B2:26:7A:AC:5B:F8:52:FE:65:02:23:0E:7D:AC:E6:1D:36
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       1F6DAFD1D1B477CD9CA5A6095F84BC7D1A25C447
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32312d3231203d3e20323633353039.roa
Signing time:             Sun 15 Oct 2023 06:35:04 +0000
ROA not before:           Sun 15 Oct 2023 06:30:04 +0000
ROA not after:            Sun 13 Oct 2024 06:35:04 +0000
asID:                     263509
IP address blocks:        191.243.176.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6d:af:d1:d1:b4:77:cd:9c:a5:a6:09:5f:84:bc:7d:1a:25:c4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Oct 15 06:30:04 2023 GMT
            Not After : Oct 13 06:35:04 2024 GMT
        Subject: CN=4EC897B2267AAC5BF852FE6502230E7DACE61D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:13:98:60:6f:e4:99:0d:02:6a:ea:ce:de:
                    b7:e5:f6:c3:50:d7:e4:7f:91:81:83:27:c8:88:f2:
                    dc:26:c3:08:28:d8:f2:40:bc:b2:11:7f:a8:dd:0b:
                    91:c2:f8:24:ee:b0:b2:08:6d:97:f7:02:44:9b:09:
                    f5:3b:61:b4:29:f1:e0:2e:1a:79:42:62:f3:44:17:
                    a8:aa:e2:93:45:47:d7:27:00:24:d0:f1:f4:a6:82:
                    1f:a4:18:cd:09:9d:ab:f5:1f:6f:80:28:38:b7:27:
                    93:52:8b:57:a5:f2:bd:39:52:2f:d6:25:69:cf:a5:
                    93:43:f9:6a:72:d2:7c:98:95:42:62:98:01:3d:57:
                    d1:6b:d9:fb:7e:0c:c2:50:84:db:0b:f8:6a:49:fb:
                    08:ec:55:d1:dd:b5:c7:4e:c0:9f:44:2b:a3:5e:34:
                    e0:d2:38:61:ac:de:44:97:ed:41:e5:0c:d9:3c:bf:
                    1d:79:43:e1:96:41:74:d5:96:38:7b:01:fa:81:19:
                    8a:2a:18:86:55:f5:db:f5:09:37:65:1f:1b:23:ba:
                    d1:c5:8a:38:19:fa:66:66:14:05:88:e8:b0:a8:ca:
                    a7:c0:84:82:1b:ff:79:65:70:7e:af:d4:61:29:6c:
                    c4:3c:31:9c:03:e4:f3:ae:74:04:17:3b:6f:36:ef:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:97:B2:26:7A:AC:5B:F8:52:FE:65:02:23:0E:7D:AC:E6:1D:36
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32312d3231203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:89:6f:f7:5d:8b:a2:e2:ae:ff:b7:92:2c:a8:4e:e1:f5:
         f8:64:6b:03:aa:93:bd:32:ab:05:b5:b9:1b:d6:b4:73:cc:45:
         23:fa:dc:11:5a:a3:1e:d4:ab:65:48:54:6f:00:6a:eb:3c:5a:
         73:fa:5d:11:ac:dd:6d:f8:bc:1a:2b:26:1f:26:bb:96:1f:3b:
         1d:ef:3f:71:4f:72:c9:3b:06:e8:f0:52:f1:98:21:9d:55:31:
         72:e9:6d:e9:06:06:64:9d:6d:7a:94:7a:14:19:a2:da:5a:0e:
         ee:d7:59:64:68:ac:06:7f:34:f1:18:1e:4d:d6:9e:2d:b0:52:
         50:53:51:d5:12:b8:c3:75:3f:e0:72:e7:3a:dc:e1:0e:c6:f4:
         f9:4c:19:e3:6a:61:de:2d:f7:4a:e0:e4:74:1d:db:5b:52:f1:
         f4:a6:bd:c7:5e:4e:ec:51:c5:2e:0a:97:c6:a1:7e:52:9a:ab:
         63:98:11:45:0c:c6:0e:3e:cb:df:2a:0c:3b:c4:cd:d4:3a:37:
         ce:f2:96:e3:80:dd:25:72:02:52:c9:b4:81:b1:d4:2b:36:aa:
         26:d0:a7:3e:7f:15:a0:41:ee:e0:a8:35:fd:64:0f:ff:ff:28:
         ca:14:fe:1e:17:a3:c6:26:8c:a8:24:05:32:da:2b:69:eb:d8:
         4b:74:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:56:11 2024 by rpki-client on console-fra.rpki-client.org