Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/3139312e372e332e302f32342d3332203d3e20323733373434.roa
File:                     3139312e372e332e302f32342d3332203d3e20323733373434.roa (raw, json)
Hash identifier:          UAwiVblv0OoXjRjB3kQa+ZgU0X0kUkVaZxkQ+eCgz1U=
Subject key identifier:   4E:BA:15:BA:2B:45:E6:DF:23:08:C7:DC:7F:2F:09:AD:E9:4C:E0:A6
Certificate issuer:       /CN=1E9C638A61D43623956915FE3EBA074444C6A80B
Certificate serial:       0879FE0DEF0D42D3AD00B0AA113188913ADCC315
Authority key identifier: 1E:9C:63:8A:61:D4:36:23:95:69:15:FE:3E:BA:07:44:44:C6:A8:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E9C638A61D43623956915FE3EBA074444C6A80B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/3139312e372e332e302f32342d3332203d3e20323733373434.roa
Signing time:             Thu 20 Jun 2024 17:56:07 +0000
ROA not before:           Thu 20 Jun 2024 17:51:07 +0000
ROA not after:            Thu 19 Jun 2025 17:56:07 +0000
asID:                     273744
IP address blocks:        191.7.3.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:79:fe:0d:ef:0d:42:d3:ad:00:b0:aa:11:31:88:91:3a:dc:c3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9C638A61D43623956915FE3EBA074444C6A80B
        Validity
            Not Before: Jun 20 17:51:07 2024 GMT
            Not After : Jun 19 17:56:07 2025 GMT
        Subject: CN=4EBA15BA2B45E6DF2308C7DC7F2F09ADE94CE0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:80:16:73:93:55:df:3e:09:4c:c0:de:c5:
                    7d:5d:45:d2:86:07:25:51:d5:4e:c9:84:e3:3a:c6:
                    09:c6:67:78:ef:d4:af:21:3c:69:4d:ba:32:76:d7:
                    fa:74:99:f5:bb:53:ee:c2:5b:a5:ec:b1:bf:cd:25:
                    ad:f8:78:71:34:cd:81:10:c9:dd:31:16:4e:04:0e:
                    d3:a6:b9:70:45:d1:2f:c5:78:90:e7:45:d6:eb:87:
                    ef:a5:35:cb:40:bb:9a:93:73:32:0b:83:28:20:83:
                    ec:bf:b2:8a:79:f1:7e:ae:87:60:ff:e9:9a:9a:22:
                    fe:45:14:3e:5e:1b:c3:77:67:2f:d2:fb:d3:4a:6a:
                    57:e6:9e:37:aa:2e:ef:36:ad:9e:af:b3:6b:35:b4:
                    76:64:dc:b8:75:f4:10:2a:4b:39:e3:20:44:34:df:
                    2e:8b:81:85:a2:39:ac:84:e5:9f:5d:37:18:ed:26:
                    60:28:26:c5:77:2a:fc:32:db:1e:0c:d0:ae:d2:04:
                    0c:07:b9:c8:bc:62:4d:04:03:74:87:4b:51:06:f7:
                    bc:ea:09:e8:42:d5:30:39:a8:b2:6e:03:84:ba:c0:
                    b4:46:f6:42:39:5e:4a:01:9d:1f:f1:7d:71:ee:89:
                    a1:1d:fd:a2:3c:40:70:9a:61:b0:ff:d5:1c:14:fd:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:15:BA:2B:45:E6:DF:23:08:C7:DC:7F:2F:09:AD:E9:4C:E0:A6
            X509v3 Authority Key Identifier:
                keyid:1E:9C:63:8A:61:D4:36:23:95:69:15:FE:3E:BA:07:44:44:C6:A8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/1E9C638A61D43623956915FE3EBA074444C6A80B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E9C638A61D43623956915FE3EBA074444C6A80B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/3139312e372e332e302f32342d3332203d3e20323733373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:00:f5:8a:0e:fd:55:8f:77:26:ab:41:a9:f1:c3:22:5a:74:
         4b:87:05:0a:62:35:44:8e:15:33:3f:6e:c8:5f:20:89:57:a3:
         de:7d:22:2d:2b:c1:53:56:07:e4:72:2a:58:e4:bd:5d:1a:f9:
         b4:0e:a3:22:40:a3:c8:85:89:fa:16:c3:f5:e1:85:ab:02:10:
         72:f4:03:7a:71:83:a8:bc:14:dd:a1:0f:65:aa:92:71:6a:e1:
         2d:e0:09:36:f4:63:36:98:5a:8b:c1:e0:ea:5e:a5:b6:8e:02:
         7d:f4:6a:84:5c:dc:9c:8f:bb:c7:22:0f:75:75:26:9d:06:27:
         66:0d:dd:e6:78:38:b0:c9:b3:17:6c:b2:0a:5a:90:13:76:b7:
         f3:40:93:a0:c2:92:7c:50:7b:b7:89:cc:f7:23:aa:68:69:04:
         d1:ef:b0:d1:01:cb:a3:a0:dc:46:b0:5a:8b:fd:82:a9:8c:92:
         88:92:5b:77:e2:8c:15:6f:3a:de:81:88:0b:1a:5b:bd:ee:15:
         62:5b:f7:9a:d6:b7:d9:a9:98:30:15:e9:71:de:79:d2:cb:43:
         bf:1f:9c:c2:d4:d1:40:70:ba:7f:d3:a6:93:e6:ec:73:fd:02:
         82:84:2a:3d:7a:0d:29:a3:16:35:a0:c1:ba:a6:f4:64:ca:a1:
         e8:4b:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 10:28:11 2024 by rpki-client on console-fra.rpki-client.org