Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/3139312e372e3139322e302f31392d3234203d3e20323633333237.roa
File:                     3139312e372e3139322e302f31392d3234203d3e20323633333237.roa (raw, json)
Hash identifier:          9yc65liKrLRayoaY5RYuf2iaveRee44Dn3Y069ElemM=
Subject key identifier:   A1:B8:91:F4:C6:C9:10:A6:0A:45:14:79:55:20:7D:91:3B:E3:95:F1
Certificate issuer:       /CN=EE85037D3580A407793B86B1161445493E825B07
Certificate serial:       0231E26D7DC765376D1D70355914F6E24EBD6DFB
Authority key identifier: EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/3139312e372e3139322e302f31392d3234203d3e20323633333237.roa
Signing time:             Tue 06 Aug 2024 20:46:09 +0000
ROA not before:           Tue 06 Aug 2024 20:41:09 +0000
ROA not after:            Tue 05 Aug 2025 20:46:09 +0000
asID:                     263327
IP address blocks:        191.7.192.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:31:e2:6d:7d:c7:65:37:6d:1d:70:35:59:14:f6:e2:4e:bd:6d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE85037D3580A407793B86B1161445493E825B07
        Validity
            Not Before: Aug  6 20:41:09 2024 GMT
            Not After : Aug  5 20:46:09 2025 GMT
        Subject: CN=A1B891F4C6C910A60A45147955207D913BE395F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ba:d3:c3:02:d8:21:3d:39:6e:d3:d7:38:e8:
                    5c:08:31:5e:e3:d9:d4:58:ed:79:74:57:cc:92:81:
                    f8:01:40:ca:8b:cf:5b:e5:ab:30:f5:1b:89:1c:c6:
                    f2:c3:9d:be:7d:7b:96:22:47:6a:86:5b:e2:bd:57:
                    33:5f:98:67:11:b6:c0:0d:2a:28:9d:5e:35:27:4c:
                    da:af:73:65:9b:36:83:44:77:f2:46:3b:19:61:00:
                    0f:98:98:f0:b5:3f:7a:ea:1e:46:5d:11:bf:c9:4a:
                    c3:10:2b:5e:aa:a1:a5:f9:59:bf:68:ad:f5:74:3a:
                    4b:6e:f2:0a:11:20:ae:57:ec:48:e2:50:9e:62:ac:
                    d6:42:69:31:bc:8b:d3:30:98:aa:40:03:e2:bf:89:
                    60:9e:01:4e:7d:9b:53:84:94:4b:3d:ed:64:ec:4e:
                    35:c5:69:c5:72:76:00:a3:2a:49:85:d4:03:2f:69:
                    18:e8:73:14:18:df:35:bf:ff:5e:1c:cf:5b:7c:c7:
                    2b:c9:b1:5b:01:9f:51:8e:37:50:65:28:87:bc:c9:
                    72:04:52:fd:08:9b:d3:ab:6a:55:93:ff:8d:a2:31:
                    ac:69:5d:0d:64:e2:fc:94:bc:96:e7:f8:c9:d9:05:
                    4e:9a:a2:15:13:6a:31:d4:2b:b6:0f:e6:b5:a7:c4:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B8:91:F4:C6:C9:10:A6:0A:45:14:79:55:20:7D:91:3B:E3:95:F1
            X509v3 Authority Key Identifier:
                keyid:EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/3139312e372e3139322e302f31392d3234203d3e20323633333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:c1:f9:80:63:22:4b:74:42:33:68:4a:4e:84:66:28:ef:
         a9:76:ec:08:70:5d:c8:fb:85:4c:79:02:33:29:33:68:a9:62:
         c1:70:d6:ac:74:06:77:bc:b5:ba:96:a9:9f:4f:6f:48:5f:88:
         17:46:a5:ce:23:4b:b2:37:7e:65:b0:81:f3:0f:f5:9b:7f:d3:
         ad:e7:7a:87:e6:22:73:8b:91:bb:a4:79:0f:6f:10:89:cf:c3:
         46:5c:71:88:58:f4:a1:14:91:69:eb:d8:de:c2:45:a5:b9:83:
         d5:e3:ee:d5:dd:cf:94:5c:bb:0d:c6:bd:df:9d:e9:12:3c:42:
         6d:1d:95:c7:c1:1e:ff:77:82:a1:f3:1f:d5:ee:97:5c:4c:9a:
         a2:e0:f6:d0:fc:23:fe:23:3d:aa:cf:5e:32:8f:58:af:6a:28:
         8b:1f:01:e0:48:96:ae:88:a2:9c:bf:66:54:75:d7:aa:6a:1d:
         7c:61:6d:32:17:7c:e8:06:bb:d5:ad:34:fc:35:e6:c7:2c:d9:
         cc:bc:ef:ae:c1:4b:90:1a:8a:4a:19:0b:df:24:36:3a:12:42:
         0d:ef:3a:ef:9b:f7:ec:7f:f2:00:a4:21:c7:76:c8:e5:09:86:
         5b:e3:4a:e6:f2:ff:ed:db:1d:ec:9a:ba:a6:03:dc:a4:9c:de:
         ab:8c:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 18:56:15 2024 by rpki-client on console-fra.rpki-client.org