Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3232203d3e20323633333734.roa
File:                     3139312e33372e3232342e302f32312d3232203d3e20323633333734.roa (raw, json)
Hash identifier:          bVf1ic5NB7TV2ouQaZnTuh5/KOdjGGjkX6OPbU6dn44=
Subject key identifier:   11:EC:DE:65:B2:AC:98:1F:55:3B:2A:06:A1:91:81:A0:A9:F9:97:52
Certificate issuer:       /CN=1334987718ED4E16EC43102E16C9A8547B52B52F
Certificate serial:       3D49E961638ADD46A904DE7E3C70904D16FDA4BC
Authority key identifier: 13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3232203d3e20323633333734.roa
Signing time:             Wed 02 Aug 2023 00:22:11 +0000
ROA not before:           Wed 02 Aug 2023 00:17:11 +0000
ROA not after:            Wed 31 Jul 2024 00:22:11 +0000
asID:                     263374
IP address blocks:        191.37.224.0/21 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:49:e9:61:63:8a:dd:46:a9:04:de:7e:3c:70:90:4d:16:fd:a4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1334987718ED4E16EC43102E16C9A8547B52B52F
        Validity
            Not Before: Aug  2 00:17:11 2023 GMT
            Not After : Jul 31 00:22:11 2024 GMT
        Subject: CN=11ECDE65B2AC981F553B2A06A19181A0A9F99752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:58:5e:b4:a1:c7:42:5d:68:57:f3:a1:db:
                    6d:0d:aa:df:d9:dc:53:b1:37:29:c6:db:30:7d:22:
                    e2:41:a2:20:d3:b5:3f:bd:16:d1:77:2b:5d:2b:19:
                    e6:5e:ea:93:a0:aa:a6:72:e2:08:6a:64:90:97:11:
                    ae:35:20:58:3e:eb:b4:12:52:dc:1d:cb:05:cb:c3:
                    68:47:40:42:08:70:17:bc:8b:5f:e3:e1:66:24:04:
                    68:35:e8:68:55:59:77:52:93:00:7c:bd:36:d1:73:
                    3e:60:9b:69:29:28:2a:53:95:c0:76:9f:39:ca:51:
                    01:db:77:e8:e8:e1:8f:c2:31:b4:6d:73:db:f3:f0:
                    e0:b4:cd:4f:98:3c:b6:18:b7:f6:d1:fa:92:56:2c:
                    e4:ba:54:1b:69:75:b4:b3:ab:c4:49:9f:09:a3:5d:
                    8c:43:75:67:89:07:73:ca:14:57:ef:af:4a:46:0d:
                    4c:30:35:f7:16:e7:cc:fb:5e:ac:9f:57:7f:81:5c:
                    56:0c:b2:bb:de:53:08:cd:46:0b:ed:ef:06:2d:7d:
                    1c:93:62:0d:79:48:5b:de:6a:4f:26:0c:50:c9:9c:
                    3e:de:5f:59:5a:e7:2a:5f:75:4a:b4:6f:90:94:62:
                    cf:14:e2:06:b1:27:2f:64:e9:9b:f6:89:85:a6:31:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:DE:65:B2:AC:98:1F:55:3B:2A:06:A1:91:81:A0:A9:F9:97:52
            X509v3 Authority Key Identifier:
                keyid:13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/1334987718ED4E16EC43102E16C9A8547B52B52F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3232203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:13:fa:87:ed:29:18:cb:58:31:a5:e9:13:18:93:86:a4:70:
         e3:3a:b3:2d:50:09:0e:99:dd:46:74:c4:0d:3a:c8:da:32:c0:
         34:cd:a4:35:12:a5:84:10:cf:c0:84:52:2d:73:63:60:a6:c8:
         48:bd:76:2b:11:8c:99:18:c9:68:cf:ef:fa:f4:70:f8:e3:a7:
         34:ad:e9:56:51:35:db:c2:ce:73:f3:00:06:96:70:6f:50:3a:
         09:ff:54:b5:5a:b7:39:5d:ea:6a:3c:2c:86:25:fd:48:a1:85:
         e0:51:70:c5:f4:67:bb:71:c8:df:62:d0:fc:c2:0e:f7:9e:64:
         18:66:c1:ba:ff:fd:57:c0:a9:4e:a6:e8:03:1f:43:34:c1:f0:
         bf:b9:c7:e5:83:62:69:c3:68:69:56:7b:0a:3f:77:28:a6:32:
         91:f1:81:a9:e1:d7:69:c6:91:8f:75:8c:25:31:32:2f:1d:21:
         8d:f6:64:21:89:5f:45:01:ed:92:a3:da:1e:8f:fb:97:be:b3:
         3d:82:e2:7c:4f:73:a3:28:03:fc:af:1a:84:a9:2d:60:f6:b9:
         02:92:67:55:b1:8f:a4:b5:98:a8:de:9f:42:e5:bd:a6:0d:eb:
         38:61:59:f3:0f:a6:cf:88:bb:b1:ff:75:f3:c9:5d:ae:bb:65:
         87:79:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:37 2024 by rpki-client on console-ams.rpki-client.org