Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa
File:                     3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          1+GGnGJ1tIgWzM+iXzxzt2iabiuEkO4raABWQ2Qy7yY=
Subject key identifier:   6E:9E:EE:DA:43:7B:89:5A:0F:22:C7:59:4F:E2:C6:0A:59:62:60:3C
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       40D8AF732F898B63EE20E2E07B848FEFDD35EC27
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:41 +0000
ROA not before:           Thu 04 Apr 2024 07:15:41 +0000
ROA not after:            Thu 03 Apr 2025 07:20:41 +0000
asID:                     262569
IP address blocks:        143.137.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d8:af:73:2f:89:8b:63:ee:20:e2:e0:7b:84:8f:ef:dd:35:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:41 2024 GMT
            Not After : Apr  3 07:20:41 2025 GMT
        Subject: CN=6E9EEEDA437B895A0F22C7594FE2C60A5962603C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:d2:f9:09:74:f9:24:3a:a0:6f:66:d8:90:
                    af:0e:67:af:6f:c2:fa:83:25:57:46:0d:a1:02:97:
                    aa:1a:0f:0b:30:84:10:5f:e0:22:cd:1c:36:68:b5:
                    ee:a4:e5:d4:91:0c:88:b4:ef:35:b4:90:a1:d5:f1:
                    dc:66:64:fc:2d:22:fa:62:49:c6:fe:31:d3:a3:d1:
                    32:a9:1a:4f:01:6e:c4:6c:10:ea:1f:f0:06:83:f3:
                    65:b7:1c:90:1a:99:ff:d3:d3:77:58:bf:a8:09:02:
                    7f:96:09:c6:c7:38:74:76:50:be:99:62:94:65:fd:
                    17:a8:f7:9c:21:bb:46:7e:06:24:6c:c3:f7:5e:50:
                    a3:9b:67:36:77:11:0a:a0:6d:43:5f:43:d1:8d:a5:
                    b0:6f:5d:4b:ce:fc:d8:f5:46:d2:db:60:e8:e7:ec:
                    9d:36:b1:e8:8a:1b:22:47:4a:e4:63:3c:c1:37:66:
                    27:d5:66:fe:fc:a2:39:f2:f4:07:60:ac:bb:9b:e9:
                    b8:52:d3:e4:db:98:e2:d6:45:dc:2e:7e:57:2a:cf:
                    65:1b:07:29:cd:e0:88:51:cf:8c:0c:ff:7a:c9:75:
                    ba:e0:46:1d:00:1a:73:16:9e:e8:db:39:89:9b:f8:
                    13:66:a5:7f:ab:7d:06:36:8f:af:42:53:85:fd:de:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:EE:DA:43:7B:89:5A:0F:22:C7:59:4F:E2:C6:0A:59:62:60:3C
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:40:2c:ad:26:58:0b:f4:c5:cf:f5:e6:9c:b1:2b:59:70:
         6d:d9:6c:54:c5:d3:72:dc:7d:e6:e9:f0:e8:b6:07:26:90:6b:
         84:05:7f:eb:57:3c:08:b5:45:07:e3:c3:79:4a:e9:13:71:75:
         f3:71:90:ce:89:04:9d:c4:9f:39:61:71:fc:6c:11:ff:c7:f4:
         6b:2c:86:6a:00:78:4d:2a:fe:c2:4d:20:4e:a4:9c:b2:4f:05:
         e6:39:be:28:1e:5d:c0:b5:f4:9b:e6:1e:af:ee:4a:65:bf:55:
         2d:70:f5:47:b9:5a:b7:49:5f:40:c7:4e:ec:12:aa:07:22:fd:
         55:4f:56:e4:ea:a7:28:b5:7b:ca:62:6d:55:6e:2c:08:18:f2:
         2d:c6:d9:2f:8c:7c:7f:3e:3d:84:a3:5b:80:fb:6b:65:5a:a7:
         8a:82:d3:40:cb:8c:27:f1:fa:dd:f7:ad:87:5e:82:32:3e:b7:
         a2:13:0b:a6:a7:4c:c3:ce:c8:28:d6:e3:0c:c8:69:6a:d8:bd:
         42:14:73:a1:82:50:e6:19:78:bf:75:92:a3:70:72:9f:3d:3f:
         30:29:8d:57:60:e0:2f:66:b9:41:cc:32:33:65:ff:5f:4a:d3:
         66:e8:27:d1:31:20:74:13:f4:28:18:bf:d2:fd:27:33:96:3d:
         a9:25:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:21:37 2024 by rpki-client on console-fra.rpki-client.org