Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32312d3231203d3e20323633353039.roa
File:                     3139312e3234332e3138342e302f32312d3231203d3e20323633353039.roa (raw, json)
Hash identifier:          eAPP625jRz4yOTaQEQYKiXlnsUDgM9I7UaLmw7S1dxM=
Subject key identifier:   E1:67:8A:1D:57:5F:5E:6F:B5:A5:78:CC:99:99:A9:DA:D4:2C:74:D3
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       10EB22A20B40A71CC72A43FD3D9770F04FD28FDE
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32312d3231203d3e20323633353039.roa
Signing time:             Sun 15 Oct 2023 06:35:06 +0000
ROA not before:           Sun 15 Oct 2023 06:30:06 +0000
ROA not after:            Sun 13 Oct 2024 06:35:06 +0000
asID:                     263509
IP address blocks:        191.243.184.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:eb:22:a2:0b:40:a7:1c:c7:2a:43:fd:3d:97:70:f0:4f:d2:8f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Oct 15 06:30:06 2023 GMT
            Not After : Oct 13 06:35:06 2024 GMT
        Subject: CN=E1678A1D575F5E6FB5A578CC9999A9DAD42C74D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:52:b2:3f:13:88:0c:c6:09:dd:7b:4b:c9:75:
                    c3:be:37:9d:29:7f:71:38:72:ca:d1:14:64:6b:94:
                    60:ec:e8:1c:fc:ac:b7:5a:22:93:17:4d:b4:da:8a:
                    cf:2f:51:8e:67:bf:6d:a6:fe:62:a0:b4:49:1c:fa:
                    59:04:15:9c:3b:0e:36:1d:fd:8d:30:45:21:a7:14:
                    8a:59:ba:d7:18:43:26:c6:64:65:7a:b4:5c:22:f2:
                    28:14:d0:36:c7:91:cd:b1:73:05:3c:a8:c6:43:5b:
                    25:08:eb:87:5b:8a:8e:40:7f:2f:3d:bc:6a:4e:20:
                    39:fb:8a:46:6b:16:82:f7:49:a9:04:e6:b1:b8:3f:
                    4a:6d:d8:2e:31:cb:11:ca:c6:54:bf:55:5d:a4:de:
                    24:36:bd:9d:57:20:bd:b4:2c:f3:09:50:bb:72:31:
                    b6:4a:2a:b8:c7:42:1d:0c:91:49:82:93:77:34:e0:
                    1a:b3:ec:01:6d:a2:7d:54:13:f0:6b:c1:c1:12:9e:
                    b8:72:fd:5a:05:4b:bd:d7:5d:24:b9:ca:24:1a:73:
                    44:24:06:80:28:9c:45:be:02:4b:ad:b8:81:2a:c0:
                    e8:30:33:f5:91:77:8b:3f:15:e8:82:26:ff:ab:57:
                    e6:a6:33:cc:5b:40:f9:65:8f:3b:c1:34:e9:6d:b8:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:8A:1D:57:5F:5E:6F:B5:A5:78:CC:99:99:A9:DA:D4:2C:74:D3
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32312d3231203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:29:b4:7f:4f:41:b3:57:44:85:d5:a2:73:c7:68:f0:93:98:
         87:36:39:72:ae:31:bc:5d:2e:47:ba:af:3c:07:38:8c:64:d8:
         ba:c8:00:ad:03:ba:d3:57:0b:d5:fd:f4:c6:6e:37:0a:15:2e:
         c1:08:9f:f2:44:69:af:74:4d:d3:08:af:b1:e1:61:a6:81:b9:
         17:67:a9:84:ff:05:7b:e0:9d:38:c5:78:b0:c2:ad:13:b6:40:
         9c:b3:e8:48:13:b5:28:92:15:8b:8f:4c:62:80:3d:1c:a9:9e:
         d7:65:ed:d2:96:68:5f:4a:8b:5e:99:64:77:7d:ab:44:26:2a:
         b1:ef:89:97:07:e9:76:ac:39:0b:69:2b:71:cc:ce:fa:45:3b:
         47:d7:09:01:20:54:85:1f:6d:34:7c:8e:0e:fd:e9:9d:c6:cd:
         19:58:33:a8:53:85:4c:38:4e:b9:4d:d3:6a:33:cc:c8:e4:1a:
         5c:78:5a:28:80:12:56:85:cb:af:32:82:eb:78:80:c0:38:27:
         02:a6:d9:43:c4:87:a4:e3:eb:5d:48:65:cc:41:ab:3d:62:30:
         42:1e:bf:c2:bc:b0:5e:f5:4c:1f:5b:6d:92:df:85:ca:70:86:
         b1:0e:5d:55:28:25:5b:76:78:83:c5:73:38:c5:f0:7c:d9:ba:
         b8:35:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:55 2024 by rpki-client on console-ams.rpki-client.org