Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37332e302f32342d3234203d3e20323731323338.roa
File:                     3139302e3137312e37332e302f32342d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          O0+9Emi9WsCcnyhKVmpHbgWu69c7B/oLTN5MMyu5U+c=
Subject key identifier:   6A:43:C0:65:9D:6F:14:04:53:96:7E:DA:03:77:F2:D5:1A:66:13:B5
Certificate issuer:       /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial:       74B909547751A7353F0D7A21A8948735DEE0BD31
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37332e302f32342d3234203d3e20323731323338.roa
Signing time:             Wed 24 Apr 2024 14:35:23 +0000
ROA not before:           Wed 24 Apr 2024 14:30:23 +0000
ROA not after:            Wed 23 Apr 2025 14:35:23 +0000
asID:                     271238
IP address blocks:        190.171.73.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:09:54:77:51:a7:35:3f:0d:7a:21:a8:94:87:35:de:e0:bd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
        Validity
            Not Before: Apr 24 14:30:23 2024 GMT
            Not After : Apr 23 14:35:23 2025 GMT
        Subject: CN=6A43C0659D6F140453967EDA0377F2D51A6613B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:17:71:49:bf:c9:a8:dd:69:e3:4f:fa:7f:
                    40:0e:19:66:7d:a9:c9:10:b0:f1:62:15:53:6c:6e:
                    43:ed:de:88:5b:88:7b:40:4c:0b:8f:90:c9:1b:50:
                    c6:ba:72:e5:90:a0:65:88:a0:66:e5:e6:15:3b:3c:
                    7f:75:ff:0c:57:bf:30:29:be:d4:8c:99:97:c7:a9:
                    c1:75:c2:0c:47:36:29:ac:a0:90:a5:ca:f9:9e:67:
                    6d:b1:5d:f2:75:41:c6:8d:15:76:6b:40:07:4f:3a:
                    86:3c:12:14:61:33:c7:d7:72:e9:77:74:dd:50:9f:
                    99:94:08:86:a0:71:65:24:c6:c0:5e:26:6e:c8:69:
                    8b:ec:1b:0c:c6:ef:78:48:17:ef:66:04:b6:81:35:
                    05:19:dc:ac:b4:ed:ea:c7:43:84:c2:bc:cb:64:5c:
                    c8:cb:d5:fa:70:98:b0:b2:a8:0f:f4:31:c4:be:79:
                    39:e9:67:ec:8d:d2:54:b7:f5:78:e2:c3:9a:51:b0:
                    a0:7b:b0:93:26:f3:2a:45:59:74:37:68:3c:86:a7:
                    6e:9e:63:e0:cb:96:cc:eb:76:29:aa:bc:8e:e5:e9:
                    b6:d1:93:da:97:de:68:3c:12:b2:f2:e8:d4:68:cc:
                    94:7c:62:89:de:14:b4:ff:2e:cc:22:da:cb:2c:e1:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:43:C0:65:9D:6F:14:04:53:96:7E:DA:03:77:F2:D5:1A:66:13:B5
            X509v3 Authority Key Identifier:
                keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37332e302f32342d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:c7:90:63:2e:00:c6:39:86:c9:c7:2b:ac:6c:a6:b4:1d:
         51:90:83:9b:8f:fa:f3:61:26:bc:78:d3:47:54:ad:2c:69:e9:
         cb:b8:59:58:d9:db:6c:3b:af:b0:05:c2:b1:a1:31:0b:60:c6:
         97:57:a3:8a:de:69:41:50:12:df:9c:63:68:e9:25:b8:8e:dc:
         b4:a8:3a:0c:31:6d:5d:ca:59:e3:67:61:ae:15:8c:cf:df:94:
         12:08:df:32:90:7e:fd:22:cc:be:45:01:f1:8c:c7:6e:cd:8f:
         bc:5b:d1:52:82:d3:6b:1c:06:ff:b4:30:10:88:c5:bb:d2:fe:
         83:d8:0a:9f:49:f4:77:08:5d:92:60:53:1a:ba:67:03:38:91:
         14:58:1e:aa:a2:3c:84:18:19:3a:61:51:a8:e5:4a:42:e2:7b:
         82:80:20:ca:dc:b0:e6:39:2a:2f:09:a7:fa:82:a5:46:40:69:
         81:6f:59:ab:9f:63:12:a5:03:4e:2a:87:cf:6f:00:68:bd:3e:
         5b:cd:bf:d3:ab:0a:92:f2:78:01:00:f5:47:72:3a:57:a8:00:
         6f:90:ec:14:a0:da:99:f0:b3:db:b5:ef:c2:5d:f1:4f:c8:f5:
         36:a7:31:36:73:82:60:20:e7:bc:ec:48:59:43:8f:f1:8d:f1:
         72:d9:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 19:40:55 2024 by rpki-client on console-ams.rpki-client.org