Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          0FuQ6x5iu2Nn+u0e3p0i/rZlHC22eRYQDT7rgjwZTRA=
Subject key identifier:   97:00:05:BA:AA:3D:B1:41:78:11:7B:84:5F:92:F1:9C:1F:30:5C:30
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       3B9EBF1F1CFE62121C01C7DE1AE221971F8A5FC8
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa
Signing time:             Fri 11 Oct 2024 13:12:59 +0000
ROA not before:           Fri 11 Oct 2024 13:07:59 +0000
ROA not after:            Fri 10 Oct 2025 13:12:59 +0000
asID:                     263335
IP address blocks:        191.36.143.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9e:bf:1f:1c:fe:62:12:1c:01:c7:de:1a:e2:21:97:1f:8a:5f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Oct 11 13:07:59 2024 GMT
            Not After : Oct 10 13:12:59 2025 GMT
        Subject: CN=970005BAAA3DB14178117B845F92F19C1F305C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:69:c1:18:47:61:9e:33:4f:f9:93:19:ac:
                    e7:c2:f1:1d:57:7f:f8:44:fa:6e:fd:0e:c4:c0:da:
                    6b:c4:34:9a:6c:81:02:cc:84:79:bd:ae:35:88:3f:
                    9d:9e:f6:ae:b9:88:9e:00:c8:9c:1a:1d:5b:6c:f4:
                    87:7c:40:93:09:fc:29:34:08:85:f0:9e:fb:e7:33:
                    22:4e:44:db:5e:72:e5:d0:09:1d:58:74:df:cf:10:
                    0a:0d:28:57:27:58:e0:9b:15:97:0f:fe:3b:01:77:
                    4b:0f:b9:e9:7d:49:a8:1d:3e:a6:e0:a8:bd:07:93:
                    cd:12:19:e1:6b:12:9f:67:46:ba:44:ba:ee:f8:c5:
                    8d:90:10:5d:47:16:2c:68:19:62:c3:4e:66:33:54:
                    f0:26:ef:c8:06:9f:59:54:0a:8e:26:e7:a2:e4:b2:
                    81:79:22:ed:a0:d6:81:0d:ae:cd:75:fd:6a:fd:15:
                    d1:e0:df:a2:8e:60:18:ca:3f:9d:18:ca:a9:3d:67:
                    aa:9c:ec:d1:cb:26:d6:be:e2:ab:ec:5f:37:87:3b:
                    30:fd:7e:a1:54:7f:dd:18:33:7d:6c:ff:ce:07:1e:
                    89:50:e3:7d:c4:1e:98:15:43:ed:57:19:e0:76:8d:
                    4f:1a:46:d6:d1:53:d5:37:24:3f:5c:8f:b0:f8:08:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:00:05:BA:AA:3D:B1:41:78:11:7B:84:5F:92:F1:9C:1F:30:5C:30
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:a0:8b:c1:d1:1d:88:7c:a9:54:46:4e:eb:7d:0c:28:e6:
         28:01:e0:52:4d:3d:8f:de:60:09:ea:c5:ec:4d:89:43:28:94:
         33:e0:44:97:42:90:fd:bb:00:bc:74:3a:a8:4e:cb:3d:71:ea:
         e0:77:18:ed:76:86:d5:f1:b6:38:37:af:7e:a5:1f:ce:c2:ad:
         15:d5:df:df:7d:ce:2a:22:24:79:ab:f6:03:71:86:7c:cf:95:
         ee:2a:60:17:ac:e4:85:a9:c2:75:2c:8a:44:81:a1:15:49:0b:
         a7:bc:a1:a2:62:24:42:8c:19:7d:03:15:4b:c8:53:ce:27:d0:
         c8:03:1f:d3:37:82:b6:73:30:c8:b3:df:41:e3:40:10:d8:73:
         12:a4:b0:92:b0:6c:02:e7:a9:ed:f5:ac:a2:1f:ff:be:16:03:
         ff:c0:fe:ca:ea:e4:e6:ac:f5:d2:d9:8d:6a:8a:45:22:2d:2f:
         58:7c:65:d0:12:7d:21:a3:9d:aa:56:fd:a5:4b:9a:31:13:93:
         cd:ea:92:99:4a:e5:dd:66:d0:13:30:17:93:af:d3:a5:2c:ba:
         90:c5:ce:c9:ef:86:2d:34:19:1f:69:42:8a:ea:c0:90:44:f6:
         43:ae:af:ad:b1:20:74:c9:50:07:7f:8c:f6:4c:98:20:59:cf:
         86:f4:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 10:21:30 2024 by rpki-client on console-fra.rpki-client.org