Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa
File:                     3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          xdMJzGtvq/pgew6VAqaUbeLRyjpdZj5w2X2gfGxyaAA=
Subject key identifier:   58:0B:80:A8:07:D3:16:02:74:DA:74:C2:79:B6:46:E7:E3:C8:D7:72
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       2C3604AD5ED01BF812DF8FDA8F7EA48233E85EEB
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:40 +0000
ROA not before:           Thu 04 Apr 2024 07:15:40 +0000
ROA not after:            Thu 03 Apr 2025 07:20:40 +0000
asID:                     262569
IP address blocks:        143.137.62.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:36:04:ad:5e:d0:1b:f8:12:df:8f:da:8f:7e:a4:82:33:e8:5e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:40 2024 GMT
            Not After : Apr  3 07:20:40 2025 GMT
        Subject: CN=580B80A807D3160274DA74C279B646E7E3C8D772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:24:91:79:9c:31:be:db:0f:1b:35:04:f6:d2:
                    11:a1:65:8e:14:36:72:30:76:61:c7:70:d0:fc:d8:
                    b3:71:52:3a:9c:ae:a5:85:df:41:74:02:d7:ad:97:
                    35:94:8a:27:f5:7a:00:7b:2d:9c:4e:31:e2:ba:4f:
                    7a:4e:bf:ed:4d:7f:13:0b:af:46:f9:fb:a3:3e:6a:
                    b8:d6:01:e5:ed:e8:57:fd:9a:a8:69:e1:f2:ef:ff:
                    2c:5a:e5:85:de:ef:65:5a:b6:e1:fd:d2:c5:20:92:
                    9e:19:2a:d9:34:90:38:e3:83:86:1f:10:5b:fa:eb:
                    18:5e:9f:1d:94:4f:c7:1c:05:4c:50:d4:6e:db:bf:
                    b0:f7:ff:5e:50:e3:ca:29:e2:0c:3f:09:58:01:e9:
                    69:6b:27:69:0a:1c:14:a3:60:4e:09:3f:e6:58:28:
                    fe:a2:66:65:f8:37:41:c5:67:e0:38:ab:66:6b:8b:
                    40:03:ba:20:64:58:7f:29:58:4f:98:be:86:d6:c0:
                    62:c7:86:2e:b5:27:30:97:be:b3:01:66:07:72:09:
                    a4:b3:74:9b:a5:d7:27:66:7c:73:80:68:d4:15:39:
                    c1:9d:7a:25:c6:6c:bf:a6:d1:fe:ea:49:9f:ca:8d:
                    5d:ae:52:f1:c1:3c:53:47:18:72:f6:ef:cf:1b:4f:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0B:80:A8:07:D3:16:02:74:DA:74:C2:79:B6:46:E7:E3:C8:D7:72
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:13:ba:1e:df:95:51:27:3a:13:14:c7:4e:0d:6c:8d:43:9a:
         76:c5:37:d7:5c:ac:21:3b:74:fb:f5:de:a5:64:11:43:ce:b4:
         b8:b2:1b:f5:2f:79:96:8e:3e:22:bb:4d:3a:77:42:cb:1a:4b:
         7e:e1:51:83:dc:4c:8e:8f:9e:ff:78:4b:9c:81:15:b7:a5:be:
         fd:eb:dd:dc:46:73:bd:61:40:fc:8a:c2:77:1c:c9:77:81:86:
         64:73:2f:22:76:c7:6a:8e:ee:b4:f5:61:eb:e2:79:b4:e1:ec:
         f0:7d:80:5b:b5:97:f0:60:0a:6f:58:0f:93:a7:fd:c2:1a:e4:
         27:3f:60:ab:79:f1:50:0b:e2:c3:5d:42:48:c2:ec:5b:17:9d:
         67:c0:ae:74:00:d8:fa:3c:0a:8f:d8:7a:e2:83:15:d8:cf:67:
         64:20:5b:21:b4:77:6d:58:6c:d9:42:94:ab:2a:e6:1b:7c:1b:
         55:02:a2:ed:ce:3e:8d:09:77:df:71:b3:b0:75:c5:6b:4a:81:
         45:60:ab:89:25:b7:f2:ad:27:7f:d4:9d:0e:c4:e4:23:2d:e7:
         f8:97:6f:44:77:b9:86:61:11:29:cf:3e:e9:19:fe:9b:4c:77:
         67:12:df:9f:c0:c6:55:cd:0f:49:93:cd:7e:05:f8:8e:29:f6:
         ce:14:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:21:37 2024 by rpki-client on console-fra.rpki-client.org