Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3233302e302f32332d3234203d3e20323633333734.roa
File:                     3139312e33372e3233302e302f32332d3234203d3e20323633333734.roa (raw, json)
Hash identifier:          puhK3eblRAvDK3guqguGRONo/FNmD4e4daT3a3THGBY=
Subject key identifier:   D9:55:39:2D:97:D4:9B:E2:00:A2:7A:0E:59:BC:68:5A:07:A0:42:C6
Certificate issuer:       /CN=1334987718ED4E16EC43102E16C9A8547B52B52F
Certificate serial:       60262E877E513965BE7CDE5A2F77DA029B733220
Authority key identifier: 13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3233302e302f32332d3234203d3e20323633333734.roa
Signing time:             Wed 02 Aug 2023 00:20:40 +0000
ROA not before:           Wed 02 Aug 2023 00:15:40 +0000
ROA not after:            Wed 31 Jul 2024 00:20:40 +0000
asID:                     263374
IP address blocks:        191.37.230.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:26:2e:87:7e:51:39:65:be:7c:de:5a:2f:77:da:02:9b:73:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1334987718ED4E16EC43102E16C9A8547B52B52F
        Validity
            Not Before: Aug  2 00:15:40 2023 GMT
            Not After : Jul 31 00:20:40 2024 GMT
        Subject: CN=D955392D97D49BE200A27A0E59BC685A07A042C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:dc:e1:59:09:fd:75:b1:ef:e1:18:43:c1:
                    1f:c7:f1:f6:9d:ac:8e:f3:c7:74:ba:5b:1b:6f:e8:
                    71:64:26:99:2c:90:12:24:ee:e7:17:f3:d3:37:59:
                    d4:9f:cf:fa:db:93:fc:04:24:2e:5f:88:5e:4c:4e:
                    6c:ed:e0:3d:a9:47:52:e0:d7:b3:1c:8e:d2:9a:fc:
                    7f:71:33:73:a6:23:0e:db:86:b0:80:7f:cd:2d:6f:
                    c2:c2:1a:54:1f:e9:5a:56:42:a1:d7:ba:0b:dd:84:
                    a2:aa:c5:2d:0d:25:41:4b:be:6d:11:3f:91:b0:90:
                    07:ef:d9:b1:66:ec:bf:28:d3:45:6f:ea:30:52:3f:
                    6f:14:1c:44:43:ee:6d:2b:c1:63:cb:49:ac:b6:f1:
                    11:60:1a:6b:81:a2:50:b3:08:b8:7d:a4:b0:0d:bf:
                    6b:57:bf:e0:60:06:93:11:cf:99:3c:98:44:99:f5:
                    36:5d:01:60:01:71:d2:b6:72:e1:53:31:95:e9:6c:
                    03:bf:3b:23:ae:63:43:a7:ef:fd:01:8d:a6:40:be:
                    60:35:03:0b:f9:e7:f4:ca:4a:2e:8f:f4:52:0a:b4:
                    ec:88:45:23:ad:4f:e2:a0:21:bd:53:68:ba:1d:be:
                    25:59:50:9f:66:61:54:09:6b:02:d7:aa:b3:09:19:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:55:39:2D:97:D4:9B:E2:00:A2:7A:0E:59:BC:68:5A:07:A0:42:C6
            X509v3 Authority Key Identifier:
                keyid:13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/1334987718ED4E16EC43102E16C9A8547B52B52F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3233302e302f32332d3234203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:84:68:14:5d:7e:c5:78:b5:b0:74:d8:70:2e:7a:40:90:fe:
         90:98:c1:e9:57:04:f5:55:a0:55:43:0b:3f:17:47:b0:13:c5:
         3b:eb:d3:c2:c8:58:41:b6:dc:40:c5:0f:27:5f:40:d1:22:95:
         09:33:3e:1c:ea:48:27:31:de:e7:e0:87:29:eb:7f:fa:97:da:
         47:37:c4:46:b5:62:ce:d7:54:e7:28:8d:b2:0e:78:2a:12:c3:
         a6:91:8d:75:e2:39:28:20:47:a6:06:72:d4:6a:3d:37:4a:94:
         f9:1c:49:54:14:8a:59:38:ac:7c:1d:32:0f:2f:fd:4c:47:2f:
         1f:00:2b:ad:d5:ff:e9:8c:53:a4:a8:6c:e5:0b:a6:eb:c7:23:
         c8:13:ca:82:b4:c3:89:1c:8b:61:78:18:6c:e6:17:37:25:1c:
         ea:2c:79:b7:c5:a6:2e:56:25:38:17:f0:3f:68:1b:05:00:6c:
         82:0c:e4:a7:a1:b2:8e:63:3a:d8:e2:8d:9a:11:cb:78:de:3e:
         bb:be:f2:8d:e0:c1:90:f8:0a:e7:49:db:a9:12:11:41:4f:1c:
         bd:8b:db:55:13:a6:0a:30:85:05:56:42:cd:82:87:70:a9:a5:
         40:77:49:2a:cf:e2:bd:a0:61:0d:d0:cf:2a:c0:36:f3:58:9a:
         01:84:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:37 2024 by rpki-client on console-ams.rpki-client.org