Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa
File:                     3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          JaGJOGnvX2ErzeaxE7hDrNceeleb8ctyOXhtdAxC3W0=
Subject key identifier:   D4:AC:16:B0:8E:7F:19:05:12:1A:4D:66:E5:A2:11:7C:98:16:DF:F9
Certificate issuer:       /CN=944E34DEA91B28826835424C55845E9BDF8C78BA
Certificate serial:       7A74E0B2736B0910E6A0CB34E3BA1788A100DF00
Authority key identifier: 94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa
Signing time:             Thu 04 Apr 2024 02:59:51 +0000
ROA not before:           Thu 04 Apr 2024 02:54:51 +0000
ROA not after:            Thu 03 Apr 2025 02:59:51 +0000
asID:                     263151
IP address blocks:        191.242.176.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:74:e0:b2:73:6b:09:10:e6:a0:cb:34:e3:ba:17:88:a1:00:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944E34DEA91B28826835424C55845E9BDF8C78BA
        Validity
            Not Before: Apr  4 02:54:51 2024 GMT
            Not After : Apr  3 02:59:51 2025 GMT
        Subject: CN=D4AC16B08E7F1905121A4D66E5A2117C9816DFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:1c:77:fe:89:27:3d:db:39:58:02:09:91:
                    2d:9d:98:0e:9a:a8:5b:eb:72:98:25:ec:99:cf:b6:
                    39:e9:05:1c:9a:70:29:c6:88:e6:e5:ff:64:8b:74:
                    fb:27:12:b4:61:b4:35:23:51:0a:55:b3:c6:c3:3f:
                    85:20:b8:b3:0f:8b:75:fe:b0:75:94:d3:05:05:8a:
                    ab:eb:e2:64:35:ae:29:3a:e0:e8:92:46:dc:0d:7f:
                    51:ac:8c:4a:5a:b9:3a:6f:18:5f:6f:aa:7c:f8:bd:
                    df:83:ad:28:64:ae:bb:8a:2f:15:fd:c4:1f:19:61:
                    89:d7:5a:61:16:13:30:73:3c:f0:30:3d:1b:ba:18:
                    e5:77:89:0e:85:d1:98:d7:a6:66:55:e2:14:23:8f:
                    e7:5c:d6:39:5b:62:89:1e:61:4a:d3:21:fa:a9:25:
                    37:1a:16:ec:48:73:3b:a9:9f:0c:c0:83:b1:aa:b2:
                    d8:a9:a4:ca:22:3b:d9:3c:8a:f3:c8:f0:1f:b1:c4:
                    8d:bd:fd:cb:3d:f3:05:ec:00:61:41:4f:96:78:31:
                    e4:8c:d6:b3:7a:e2:fd:a0:18:a5:be:9e:8c:18:fc:
                    93:6a:81:07:b4:27:e0:b4:ce:13:86:63:19:98:c9:
                    ff:9c:cc:7f:a1:83:9b:96:2a:1f:d7:6a:6c:72:88:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AC:16:B0:8E:7F:19:05:12:1A:4D:66:E5:A2:11:7C:98:16:DF:F9
            X509v3 Authority Key Identifier:
                keyid:94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/944E34DEA91B28826835424C55845E9BDF8C78BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:67:05:8e:05:97:42:0a:41:e2:22:ae:02:df:fe:8a:6b:9a:
         6f:4d:b2:e4:0c:84:7e:68:e0:97:c8:78:a0:33:7e:26:b8:b8:
         a5:9a:f9:92:1b:b5:eb:57:12:79:cc:8e:4a:b1:65:8f:7b:78:
         f5:e6:83:4c:34:ca:31:52:6a:e8:88:2e:8c:55:ca:1f:7c:20:
         96:21:89:a9:79:01:c0:3d:f6:ce:f3:f6:fb:52:91:d1:fa:fe:
         9d:06:d6:ed:bb:2f:6b:ef:70:f0:09:79:7e:45:63:29:32:00:
         ae:5d:c3:8d:79:3b:dd:b5:e9:ce:b6:b8:e0:98:32:8c:15:d3:
         de:c1:38:65:34:1d:57:2b:a2:f3:54:40:e2:04:28:88:bf:59:
         2c:8d:f0:2d:46:dc:13:35:d1:00:5c:f9:12:3c:fa:e3:46:6c:
         60:42:78:b6:80:ee:6d:62:d5:ba:e8:5f:e0:de:99:81:e0:82:
         dd:50:bb:b4:c0:33:a8:fb:fa:ff:90:cb:ab:89:fd:de:d0:dc:
         70:af:9a:df:cc:05:36:f0:56:5f:a8:b1:ef:29:30:22:71:4d:
         ec:b4:e4:c3:64:60:8c:a8:2f:31:af:8b:93:79:54:88:69:9f:
         0d:cc:75:a7:89:d8:e3:41:53:85:b6:f1:e2:0b:80:73:8c:8a:
         6e:5f:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org