Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa
File:                     3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          NnfuTEUySJFbfkn45qZBJ4vKi+s8bSXY1FHHFMCyOcQ=
Subject key identifier:   A9:19:BB:48:14:DA:26:C8:85:74:1D:25:B6:3D:4A:80:7E:E6:48:97
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       0B9CE6F6FA4869B34E71A4340EAF17CAE41C1856
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:42 +0000
ROA not before:           Thu 04 Apr 2024 07:15:42 +0000
ROA not after:            Thu 03 Apr 2025 07:20:42 +0000
asID:                     262569
IP address blocks:        143.137.61.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9c:e6:f6:fa:48:69:b3:4e:71:a4:34:0e:af:17:ca:e4:1c:18:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:42 2024 GMT
            Not After : Apr  3 07:20:42 2025 GMT
        Subject: CN=A919BB4814DA26C885741D25B63D4A807EE64897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:19:41:6b:e2:8a:9a:9d:2d:17:08:4c:bb:
                    39:34:21:c7:49:8c:06:fe:8b:ce:54:6f:69:c6:91:
                    9d:0b:e0:2b:93:8a:34:37:9b:0c:b1:b6:9f:22:06:
                    59:09:95:52:6d:ba:7e:b5:bd:e0:6f:9f:67:c4:56:
                    b7:84:d3:a5:a3:27:2e:57:db:fe:75:d8:4f:8b:9d:
                    16:74:25:9e:49:f2:a9:07:49:da:75:7d:45:8a:ce:
                    79:f9:e2:69:93:cc:34:fa:59:1f:90:15:73:44:40:
                    b7:1f:5d:8f:0c:8b:bb:85:16:3d:ff:fd:7c:58:74:
                    9c:23:85:6a:92:4d:b5:ce:3d:90:3a:02:74:6d:f9:
                    d1:b6:8a:cb:21:a5:dd:20:8d:9d:03:45:7c:bc:29:
                    5c:35:97:05:ad:04:44:d7:40:c9:87:0c:64:9a:21:
                    e7:f5:40:3e:3d:5d:5b:fc:e9:e0:12:59:48:a5:c6:
                    1e:1d:be:79:c0:95:13:0f:dd:5b:4b:dc:da:f0:33:
                    37:17:71:a6:1c:4a:d9:a1:73:39:d7:e3:48:ec:58:
                    21:83:e2:b5:ec:4b:e0:41:d3:b0:4b:79:af:b8:cd:
                    66:4d:df:eb:ca:7e:06:c3:55:2c:e3:e4:bd:d7:2e:
                    5b:54:42:c0:dd:75:36:cd:4a:3d:c8:07:1b:e5:a2:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:19:BB:48:14:DA:26:C8:85:74:1D:25:B6:3D:4A:80:7E:E6:48:97
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b0:d9:fb:04:45:7a:2d:3e:a4:57:3e:a3:e2:99:26:3c:51:
         b1:95:b0:f1:6d:14:68:41:29:7e:cb:8c:fa:b4:3c:e7:ae:b4:
         5b:7c:94:01:1b:88:79:d4:24:c6:4d:7f:88:1d:c5:19:57:0a:
         85:0d:d5:79:41:53:f5:cf:90:9c:d9:2b:1b:05:09:c8:d7:31:
         14:19:05:ed:28:9c:64:ef:69:24:94:b5:26:d2:4b:81:6f:60:
         ff:78:34:78:93:db:94:5e:69:15:51:a5:cc:a8:e9:a0:47:1e:
         76:c7:21:5c:77:bf:78:14:61:7d:8f:55:c9:0e:b1:53:76:30:
         46:00:50:a8:77:a8:b0:00:93:0a:de:98:8e:9e:f8:02:80:11:
         3e:91:5b:dc:ae:83:5f:8c:f0:ad:86:7d:82:f0:38:c2:1b:c6:
         75:42:2c:cc:e3:41:aa:57:c1:fb:2c:f8:c4:b9:0f:46:9b:e9:
         7d:11:05:3b:93:b0:df:61:9f:13:79:8c:53:cf:66:b6:cc:08:
         ad:d5:33:7e:23:b9:b9:c0:cd:77:fd:fb:12:fc:22:bd:0a:c1:
         86:10:37:c8:4c:4d:4d:a3:d9:b6:1d:39:48:78:c7:64:37:0b:
         c9:d1:ec:7e:16:1b:16:bf:ca:54:5e:06:c4:2b:18:5c:8d:1b:
         67:36:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org