Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa
File:                     3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa (raw, json)
Hash identifier:          phsvpNHNBpp0GochHdfw+L0YHvXRa8M0zEisVF3hjM0=
Subject key identifier:   07:71:CA:D2:5A:EC:1A:83:BB:56:99:12:83:9E:44:0A:24:60:4E:E6
Certificate issuer:       /CN=DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6
Certificate serial:       24CB5E2318AD57A0F8422B2758E3D094B3762369
Authority key identifier: DA:5D:A3:FD:DD:F8:D0:B5:0A:29:BF:49:5F:F7:94:1F:D5:C2:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa
Signing time:             Thu 04 Apr 2024 15:19:07 +0000
ROA not before:           Thu 04 Apr 2024 15:14:07 +0000
ROA not after:            Thu 03 Apr 2025 15:19:07 +0000
asID:                     267443
IP address blocks:        192.141.52.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cb:5e:23:18:ad:57:a0:f8:42:2b:27:58:e3:d0:94:b3:76:23:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6
        Validity
            Not Before: Apr  4 15:14:07 2024 GMT
            Not After : Apr  3 15:19:07 2025 GMT
        Subject: CN=0771CAD25AEC1A83BB569912839E440A24604EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:2b:05:15:93:ec:a2:96:6a:2a:33:f6:75:
                    59:70:56:1a:03:65:8a:52:ae:6e:36:a8:34:32:5e:
                    97:12:a7:7a:93:ae:5f:3d:e9:91:dd:65:31:70:41:
                    6e:a7:3c:f6:6c:1f:ae:40:96:d8:1e:57:41:a9:d5:
                    20:d6:78:79:c3:02:b1:df:9d:92:52:8f:c0:f5:36:
                    ef:fc:39:c9:bf:31:45:5a:9b:d2:7c:4f:43:bc:94:
                    46:70:60:bb:cf:70:aa:17:cd:ef:ce:3c:09:8b:9b:
                    8b:b0:4e:81:0d:f9:e4:c3:b6:0f:9c:47:47:55:e7:
                    35:7e:43:5b:cf:a7:86:a1:0f:1f:36:b9:4c:7e:50:
                    d6:75:dd:89:4a:e6:bb:1b:71:21:a2:99:fe:44:e7:
                    20:bb:25:b6:f9:d7:5d:55:13:89:6c:ee:b4:81:5f:
                    4a:fc:7c:37:29:53:d7:ef:f1:81:b2:94:f9:28:dd:
                    7b:17:26:69:0a:08:4b:2d:e3:e6:b8:d9:86:a0:c1:
                    15:76:bd:8e:57:f8:3d:04:03:1d:1b:ce:32:d8:f5:
                    e8:29:0f:86:ba:43:7b:e4:30:27:fd:63:b7:b9:b8:
                    90:dc:c4:32:7a:bf:99:aa:fd:cd:fc:ce:ec:e2:12:
                    3b:e1:3e:20:6d:24:e8:93:3b:0c:c6:18:b7:d5:41:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:CA:D2:5A:EC:1A:83:BB:56:99:12:83:9E:44:0A:24:60:4E:E6
            X509v3 Authority Key Identifier:
                keyid:DA:5D:A3:FD:DD:F8:D0:B5:0A:29:BF:49:5F:F7:94:1F:D5:C2:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:91:ae:96:ab:8c:22:e9:0f:24:18:4d:c9:42:fe:76:cb:f3:
         b5:dc:1b:b9:10:dc:3c:ac:be:3c:f2:ea:21:e0:f2:4c:a9:ef:
         64:63:4d:9d:bd:f0:b2:96:d9:a4:5a:9f:f9:0b:19:d0:87:03:
         66:a1:da:c1:42:7a:d5:9b:d5:d0:e6:3a:ec:50:73:58:3b:5c:
         70:0b:a7:60:35:97:ef:9f:dc:13:86:c2:f7:12:1e:28:f8:6d:
         c7:fc:3f:d8:27:60:25:33:7b:45:41:6c:89:72:85:2b:2c:dd:
         2f:af:ad:23:c9:f1:96:0f:1f:61:15:1e:41:c6:42:94:75:4f:
         ae:d6:58:cb:02:c8:e7:90:55:68:96:f4:4b:9f:96:22:91:dc:
         00:11:ee:be:c2:96:64:d0:22:9a:4e:8f:83:f3:1b:25:14:a1:
         7a:de:85:8c:5a:1a:b5:53:2c:ec:d9:b6:3a:c9:f5:e3:35:16:
         bc:02:09:46:44:f7:c6:8e:44:75:95:20:a8:e0:23:79:a9:86:
         44:d9:b3:08:c7:c7:23:d1:3e:3c:f5:0b:49:45:7a:11:a0:b5:
         bb:08:3b:03:ff:ff:8a:90:be:c4:db:06:34:f7:c1:f8:84:94:
         6b:ff:e9:c7:4c:49:a1:e2:a4:dc:a2:e4:8d:84:e4:fa:4a:19:
         d8:6c:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 17:55:48 2024 by rpki-client on console-fra.rpki-client.org