Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa (raw, json)
Hash identifier:          wV1JKp+iPN36fk/MxiRGEG7TBI242TOMXFOtbBvNKNk=
Subject key identifier:   52:7A:EF:E2:B0:DA:8E:68:57:F8:E0:08:54:F9:7F:27:F4:FE:B9:DC
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       3D855995D1DB406D844A6A0730A6024242824B40
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa
Signing time:             Thu 04 Apr 2024 02:58:49 +0000
ROA not before:           Thu 04 Apr 2024 02:53:49 +0000
ROA not after:            Thu 03 Apr 2025 02:58:49 +0000
asID:                     263335
IP address blocks:        191.36.136.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:85:59:95:d1:db:40:6d:84:4a:6a:07:30:a6:02:42:42:82:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Apr  4 02:53:49 2024 GMT
            Not After : Apr  3 02:58:49 2025 GMT
        Subject: CN=527AEFE2B0DA8E6857F8E00854F97F27F4FEB9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:8e:a8:79:da:61:36:d0:76:11:6b:79:21:
                    bc:a7:d5:3a:5f:44:50:62:85:28:4d:0a:12:15:45:
                    12:a4:31:62:f8:58:75:f9:c1:0f:65:6a:76:7d:50:
                    38:5e:af:1a:ef:15:f3:2f:0a:4f:ba:6b:f2:05:23:
                    d2:10:3c:4e:3a:aa:10:2b:ee:2a:f3:f4:06:29:24:
                    4e:57:c7:b9:1e:c8:ae:6d:18:5c:dd:4d:1c:9f:87:
                    d3:63:e5:72:6a:b1:f6:6d:86:11:a2:27:4f:ee:82:
                    70:80:16:7c:0e:a5:37:e0:c9:1d:62:db:9c:f9:f5:
                    3e:43:63:f6:32:53:83:09:a2:81:ac:8a:75:6e:b3:
                    8c:71:cd:ce:ea:22:b9:2b:29:ec:c8:c9:78:af:47:
                    b7:34:3d:cc:bd:54:a9:d0:5d:5b:fc:de:45:d3:98:
                    5b:49:d9:57:fc:ab:4e:c8:21:d4:53:97:65:c4:32:
                    d6:43:39:d1:27:76:a6:29:b0:4d:2c:c6:9d:a2:3a:
                    2f:bb:19:0b:33:f5:e7:46:79:23:c9:a4:2a:41:38:
                    ce:a4:28:43:63:9a:4d:50:0a:2f:d3:47:9e:d6:e8:
                    71:93:33:60:0b:81:ff:b1:f3:a8:46:6c:87:e4:c3:
                    64:d7:24:c4:a0:d3:ba:97:8e:94:23:64:a2:fe:c1:
                    6f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:EF:E2:B0:DA:8E:68:57:F8:E0:08:54:F9:7F:27:F4:FE:B9:DC
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:22:6a:dc:ef:98:9e:4e:87:88:00:ed:be:ab:14:87:67:23:
         45:c0:67:27:be:ca:ef:a6:0b:be:d4:42:40:fe:1b:d6:5e:40:
         7e:18:f1:e8:56:c9:12:d1:a4:42:b3:71:55:1f:30:48:39:3c:
         d2:5a:ce:aa:d2:23:4b:ad:bb:d3:fe:c9:16:6f:fa:2a:60:98:
         46:7b:ee:17:a2:c3:9d:b7:b7:b2:a9:d3:e9:2e:b8:d4:2c:e4:
         85:1c:d8:d3:e0:37:40:68:89:39:ee:10:ad:4e:ba:95:c7:94:
         b2:6d:dc:ee:1e:ba:88:e1:f5:7b:af:79:58:c6:58:9f:8c:42:
         2c:31:b9:07:dd:37:91:42:b0:d9:09:06:59:20:a6:68:fe:85:
         44:a7:4d:91:c7:46:8f:86:1d:06:c2:f8:a7:5f:d1:aa:a6:ee:
         4c:36:37:b9:9c:1b:8c:9b:fb:08:03:c8:fd:37:37:ed:73:47:
         31:f9:01:70:3e:e9:fd:6b:85:e4:e4:3c:9e:af:fb:fc:7d:2a:
         27:ba:57:16:ac:e5:73:f5:e7:34:4a:a5:73:17:fe:8b:54:00:
         2b:95:e5:ce:54:8d:29:01:95:4d:aa:10:35:bd:d4:be:0b:04:
         a5:45:3e:6e:c1:8e:01:b4:1d:09:df:15:57:0b:db:94:aa:64:
         55:4c:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 12:42:50 2024 by rpki-client on console-ams.rpki-client.org