Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          5i5nyjQw3hh4HPGbHQU58Y/FSvcE7lVewIs4DZwjUu4=
Subject key identifier:   B4:62:94:D8:8C:D9:88:B4:6C:6D:27:69:26:0A:10:74:0C:45:C6:F6
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       438DFB7EAC5EE724C9BC7C32C30CBDF2C5CCC185
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
Signing time:             Thu 04 Apr 2024 02:58:48 +0000
ROA not before:           Thu 04 Apr 2024 02:53:48 +0000
ROA not after:            Thu 03 Apr 2025 02:58:48 +0000
asID:                     263335
IP address blocks:        191.36.142.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8d:fb:7e:ac:5e:e7:24:c9:bc:7c:32:c3:0c:bd:f2:c5:cc:c1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Apr  4 02:53:48 2024 GMT
            Not After : Apr  3 02:58:48 2025 GMT
        Subject: CN=B46294D88CD988B46C6D2769260A10740C45C6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:f8:a7:9b:1e:eb:a4:01:4e:0b:ae:d6:2f:
                    9f:02:fe:1d:3a:46:b7:87:bd:9a:fd:5c:0d:77:88:
                    ac:15:d2:a2:dd:dd:3b:7f:02:de:0d:be:0a:c6:7f:
                    b8:58:3d:26:4e:02:20:a2:a2:1c:e2:57:62:75:0e:
                    ac:3b:1e:08:d3:7b:cc:6f:30:28:dc:32:2b:c7:11:
                    44:5d:ce:5e:b4:e9:f2:c3:b9:ec:d8:99:a9:55:35:
                    9f:41:30:3b:32:51:ed:ad:04:18:bc:40:c5:fd:9a:
                    3c:a5:74:96:75:69:43:8e:e5:32:5d:bc:1d:5c:06:
                    8a:33:96:d1:41:8d:60:56:50:28:2d:42:74:b1:38:
                    04:49:2d:14:70:11:32:5e:82:34:7e:b4:52:d1:ec:
                    34:de:6c:00:1a:3a:b0:61:5b:c2:cf:91:3f:45:e8:
                    2f:b0:5c:db:9f:d3:08:2b:ff:79:9d:1a:b8:9a:98:
                    76:c4:5c:da:b9:8b:08:4a:53:33:96:84:04:ca:96:
                    6b:1d:89:2e:17:c3:0e:1e:d0:cc:c2:4d:c0:dc:1d:
                    09:3a:66:f8:22:81:a0:41:d7:56:e2:df:12:a4:bd:
                    21:00:4a:d5:77:41:be:ee:03:60:e2:2d:03:27:7e:
                    be:95:f8:68:10:80:2d:95:42:81:7a:a6:0b:fa:31:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:94:D8:8C:D9:88:B4:6C:6D:27:69:26:0A:10:74:0C:45:C6:F6
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:b5:fd:60:db:d7:c8:e0:71:6c:6c:5f:f7:f6:0b:29:05:
         b6:3f:30:7d:0d:fb:aa:15:f3:ff:6a:72:32:29:c8:1f:be:cb:
         1c:1b:e5:9e:98:b2:fb:cf:38:2d:4a:85:08:ab:df:ca:ef:7c:
         fe:97:7e:99:c7:3a:11:91:f4:ec:3a:2b:8a:6f:ed:a2:d2:5f:
         b3:38:31:70:4f:92:52:07:05:28:f2:a3:ed:70:42:0f:5f:61:
         52:40:19:0e:d7:6f:94:e3:37:91:b1:00:d3:a8:47:e4:1c:99:
         a4:08:97:7f:65:d2:8b:e5:25:cf:00:d8:68:99:5a:b8:d0:77:
         91:f3:40:22:34:80:d7:a9:8e:d4:1b:91:88:69:5f:ee:06:0e:
         d5:14:8f:7b:ee:b9:7a:ec:de:2a:cb:5e:c6:87:b6:7c:29:4b:
         a3:67:25:e7:f4:7f:ed:b1:ac:a4:0b:80:d6:30:7c:37:34:2e:
         ba:57:ad:78:0c:17:65:1d:2f:01:34:80:90:f1:8b:a1:a5:97:
         45:e2:c6:32:41:ee:c9:4a:0b:d6:e8:f0:94:d9:cf:d3:c4:d0:
         ab:8b:a6:5d:4f:da:4c:c7:52:df:8e:f8:06:50:b7:8a:34:a3:
         f9:3b:2d:1d:ca:2d:59:38:74:d2:90:ee:d0:fc:f9:33:06:9d:
         b5:97:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 10:21:30 2024 by rpki-client on console-fra.rpki-client.org