Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32322d3234203d3e20323633353039.roa
File:                     3139312e3234332e3137362e302f32322d3234203d3e20323633353039.roa (raw, json)
Hash identifier:          /xEjdjUyYj5vxmWa38/S14yheWluoKUluEAbzekiN9w=
Subject key identifier:   59:40:7E:CC:8A:DC:41:85:3A:BC:06:47:B2:CE:B7:4E:FC:96:51:10
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       1667F43C12DD9D4E8C4694CA310587910D74ACDF
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32322d3234203d3e20323633353039.roa
Signing time:             Sun 15 Oct 2023 06:33:57 +0000
ROA not before:           Sun 15 Oct 2023 06:28:57 +0000
ROA not after:            Sun 13 Oct 2024 06:33:57 +0000
asID:                     263509
IP address blocks:        191.243.176.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:67:f4:3c:12:dd:9d:4e:8c:46:94:ca:31:05:87:91:0d:74:ac:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Oct 15 06:28:57 2023 GMT
            Not After : Oct 13 06:33:57 2024 GMT
        Subject: CN=59407ECC8ADC41853ABC0647B2CEB74EFC965110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:00:87:be:c4:4b:8a:ba:56:0b:43:15:46:
                    bf:44:8e:6d:c9:be:b1:07:d4:60:ea:23:ef:d2:1e:
                    02:cf:23:d3:d7:a2:99:03:b6:61:e1:31:c2:5c:2a:
                    ed:fa:d0:a1:3d:9b:1d:3d:e6:9f:b8:46:e9:34:d4:
                    68:e9:1b:42:eb:0d:38:5a:17:eb:92:4c:58:c9:fa:
                    b0:86:78:e2:43:a4:98:7f:15:80:e3:63:0b:a3:67:
                    76:9d:ca:17:aa:95:78:8f:f3:53:4b:e8:08:f9:6f:
                    f5:41:d0:30:56:d2:cc:c5:ef:4b:90:b8:51:10:eb:
                    c3:b1:6a:cf:88:01:a8:d6:a6:f4:67:cb:77:fe:45:
                    47:37:c7:b3:3d:88:1d:d5:e8:ac:6b:34:f0:59:e2:
                    a2:b1:57:bc:08:31:9e:58:37:12:98:43:d2:69:56:
                    bb:2c:3e:0b:8c:90:47:ed:45:b7:be:3e:c9:c8:b5:
                    c2:f6:fb:54:0d:28:d4:54:0e:10:c9:0e:94:dc:f1:
                    01:e1:8e:de:0e:eb:0a:69:ea:10:2e:42:e9:fc:8d:
                    a9:54:5b:e4:8e:43:4e:ce:e6:6a:fa:ba:c5:bf:ed:
                    db:e2:f1:d8:75:0f:a5:bf:db:00:49:a5:5a:95:c5:
                    2c:fd:20:b1:ca:c2:d5:d2:d9:5c:9f:94:2a:19:21:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:7E:CC:8A:DC:41:85:3A:BC:06:47:B2:CE:B7:4E:FC:96:51:10
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32322d3234203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:db:49:8b:40:99:54:ab:c7:72:e7:44:53:57:1d:e0:8d:
         c0:cb:4c:a5:64:75:8f:9b:3e:bb:d4:f5:8d:90:0e:e1:b0:2d:
         39:93:61:61:d5:22:6d:e8:e5:95:76:4e:87:e9:df:c4:b3:20:
         db:80:45:77:f2:b6:e8:13:0e:cf:7a:d1:e7:12:b1:19:59:d9:
         be:93:dd:6f:9b:14:4e:13:b8:a8:ff:1a:5e:00:c0:7d:af:39:
         25:ca:66:d5:b9:9d:a6:ef:91:f8:0d:66:9a:18:1b:1e:64:e6:
         9b:82:91:65:75:22:b0:0f:73:b9:b3:ed:07:e1:b6:05:0f:77:
         61:e3:94:9c:a5:0b:34:71:7f:9f:f9:bf:cf:c3:ea:61:1a:90:
         a1:5c:b8:c2:a5:ae:78:23:9f:21:5b:69:82:aa:05:9d:07:4e:
         91:f5:81:3b:bb:e1:82:29:27:78:ea:b1:a4:ae:42:21:b1:84:
         fa:fb:9c:b8:c1:06:9a:88:4e:ed:86:7e:d4:a5:00:b1:cc:97:
         22:3a:61:e1:32:8b:7b:79:07:64:06:aa:c7:2d:58:19:91:82:
         0d:59:7e:78:3e:9d:66:d5:a6:22:3f:4b:aa:05:e9:ff:48:be:
         33:77:49:4d:a0:cb:22:b5:78:2b:ef:82:c2:6e:f2:f4:bd:ee:
         df:31:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:56:11 2024 by rpki-client on console-fra.rpki-client.org