Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          W9mCZFNIl0vUN0Ly1bAS3x19Lk7XzOXHpfU2ZpWtSBw=
Subject key identifier:   FE:39:2C:E5:03:1D:E8:57:9E:76:D6:58:F8:6F:70:CE:74:6F:6D:C8
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       43C0BD3F5B52A37BE0BA1148C8E310F7466E5D04
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
Signing time:             Fri 11 Oct 2024 13:12:18 +0000
ROA not before:           Fri 11 Oct 2024 13:07:18 +0000
ROA not after:            Fri 10 Oct 2025 13:12:18 +0000
asID:                     263335
IP address blocks:        191.36.140.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c0:bd:3f:5b:52:a3:7b:e0:ba:11:48:c8:e3:10:f7:46:6e:5d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Oct 11 13:07:18 2024 GMT
            Not After : Oct 10 13:12:18 2025 GMT
        Subject: CN=FE392CE5031DE8579E76D658F86F70CE746F6DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:12:51:ea:06:bd:91:f4:65:94:ca:b5:5a:
                    54:4d:80:8a:57:f6:2a:b2:be:8a:30:76:a8:a7:e7:
                    16:77:a7:53:5e:99:3a:81:ab:a2:5b:97:4d:e9:91:
                    ef:f9:3c:aa:88:ff:07:39:26:23:6f:d5:57:7c:1b:
                    8c:97:62:03:bc:4f:79:13:2a:71:ed:90:9a:d8:b2:
                    cb:85:49:f0:c2:16:97:75:65:c0:09:b2:a6:95:51:
                    82:0f:9b:5f:cb:45:37:b4:4f:e9:31:f1:b2:82:fc:
                    d2:d4:9c:50:db:fd:47:3f:c0:d3:97:54:6f:65:e4:
                    be:e4:2c:20:7a:d7:0a:6d:ce:57:0e:d5:11:8f:2c:
                    68:fb:47:22:f3:ab:38:3f:8d:fc:13:52:78:eb:aa:
                    0e:34:ef:0d:14:c9:20:5b:ca:6d:50:2e:a0:cb:0c:
                    a7:64:06:a7:92:57:25:41:f3:e6:5c:90:5b:26:55:
                    57:83:56:59:37:28:1c:87:e7:7b:70:6d:de:38:3a:
                    29:c4:53:4f:84:8d:2f:9f:b0:26:0f:1b:62:58:b7:
                    11:c8:aa:cd:24:4e:a6:68:49:9a:6a:31:bd:f2:91:
                    5b:9e:a8:e1:9d:84:24:f0:17:11:3c:39:3d:0f:25:
                    d6:7b:44:b1:19:9b:ce:9b:7d:20:39:4b:67:c8:f5:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:39:2C:E5:03:1D:E8:57:9E:76:D6:58:F8:6F:70:CE:74:6F:6D:C8
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:da:d2:08:73:37:13:0f:9a:be:6e:25:ca:48:78:7f:32:c7:
         d4:2f:c6:36:98:7d:71:e5:e8:7b:cb:2d:18:e2:53:b1:c5:71:
         47:22:98:9a:ee:36:fb:e0:98:28:f1:24:ab:2e:d6:09:bd:27:
         79:65:d2:6d:06:ee:3a:06:66:11:60:b6:21:26:eb:d2:57:19:
         44:c6:f2:8e:5c:cb:75:4c:60:25:56:f2:21:58:27:e7:b0:79:
         22:2d:a7:50:5f:c2:af:a6:d5:ff:76:49:33:62:55:3d:55:17:
         ae:bd:54:9a:b5:a8:64:f7:b6:0f:0e:5f:6c:24:38:20:0f:4e:
         0c:a8:c0:e2:8c:0e:b9:5a:f4:36:58:5d:bd:69:17:1c:af:1b:
         1a:6a:18:d7:fb:5c:72:b8:7d:36:da:91:d5:81:c8:29:c1:4a:
         48:4b:8e:fc:f7:02:0b:d1:98:f0:47:a4:fb:b7:18:79:33:91:
         c4:78:8f:aa:53:9b:a8:65:89:13:26:fe:6a:2d:c3:58:46:36:
         7f:52:b5:2b:a3:16:e2:8e:9c:e8:3c:02:76:8a:92:e9:eb:6a:
         47:63:92:51:10:dc:0c:bf:7a:d1:6c:ec:97:23:f5:4e:52:19:
         90:c2:82:b9:3b:a5:f2:7d:d8:45:a4:73:82:54:d5:f1:1c:2c:
         b8:79:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 12:42:50 2024 by rpki-client on console-ams.rpki-client.org