Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa
File:                     3137302e38322e37322e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          s0MqB3YyCP4CajQ8NYlbrsp+tefG4qb1J1qUgtBLSR8=
Subject key identifier:   41:4A:79:02:F2:83:41:82:58:D8:DA:25:4B:17:1A:FB:A3:B4:B3:B6
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       1526374A93462A0FF0FF03E2A55DFC29F8C1C7F3
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:42 +0000
ROA not before:           Thu 04 Apr 2024 07:15:42 +0000
ROA not after:            Thu 03 Apr 2025 07:20:42 +0000
asID:                     262569
IP address blocks:        170.82.72.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:26:37:4a:93:46:2a:0f:f0:ff:03:e2:a5:5d:fc:29:f8:c1:c7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:42 2024 GMT
            Not After : Apr  3 07:20:42 2025 GMT
        Subject: CN=414A7902F283418258D8DA254B171AFBA3B4B3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:19:39:73:d2:80:4d:f8:43:40:9d:ad:e9:
                    1e:a8:2e:46:55:93:0a:bb:b8:fb:f8:81:9c:60:6c:
                    60:62:7f:43:d7:8b:78:7a:e1:59:c0:fe:d7:a4:37:
                    de:1d:9b:30:f8:55:c1:4a:1e:85:e0:b5:82:8c:3d:
                    97:3b:31:23:a6:cc:55:52:3b:f9:a5:e0:dd:85:fa:
                    1e:29:2e:61:bd:cd:8d:8a:48:28:39:4f:01:3d:25:
                    05:8a:79:82:07:53:28:69:77:d1:b5:3b:b6:27:20:
                    1c:c3:19:b0:d6:1a:95:4d:c3:31:28:ff:cf:84:0c:
                    1b:84:48:e0:5c:a5:c1:f1:76:ac:bf:f6:ba:2c:ab:
                    c9:26:e8:93:53:c5:86:c6:2a:25:32:f6:09:d0:f2:
                    93:3a:6e:28:9f:45:c5:b6:32:21:c0:58:e7:f3:f7:
                    25:05:fd:6d:aa:be:1b:ff:e8:43:57:0b:8b:e2:82:
                    bd:89:da:ac:b0:3e:31:87:87:07:2b:a6:69:b4:9f:
                    ad:88:a0:7b:a8:4d:e7:e0:05:02:d6:37:68:0d:01:
                    de:44:cc:e9:c5:2e:6a:89:fb:46:ee:cb:0b:df:20:
                    25:04:a9:8d:02:7c:2f:e9:8e:09:f2:a0:c5:7b:3f:
                    05:47:0b:08:db:1b:1f:92:48:91:fa:1d:f8:82:d5:
                    b5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4A:79:02:F2:83:41:82:58:D8:DA:25:4B:17:1A:FB:A3:B4:B3:B6
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:9d:cc:5a:83:30:72:b0:78:88:bf:e4:a2:8f:66:71:34:
         a7:c7:41:96:33:86:68:d6:d9:4f:da:10:b6:03:6e:40:37:90:
         12:16:8f:10:ff:e1:fd:48:ab:4c:87:73:5d:bb:0a:73:76:16:
         52:45:00:5b:56:62:b2:f4:46:b9:19:52:4b:db:58:1d:85:e0:
         f8:28:c1:88:5c:05:e2:d0:8d:6c:c8:02:41:28:44:da:1c:38:
         ec:a3:ae:d7:90:2c:60:ce:44:f8:c4:f8:d1:65:f7:88:5b:21:
         84:a3:40:67:33:d0:31:2e:7b:b5:f5:65:92:ac:24:ea:63:99:
         73:ea:3d:11:a5:93:bb:63:ff:20:92:81:18:7b:14:a4:49:c7:
         72:70:1c:da:b8:86:f5:eb:99:7f:bd:f2:09:f4:3d:98:cd:ae:
         28:e0:22:6f:1a:79:6e:5e:11:ec:63:e9:17:27:23:9b:58:ef:
         61:b6:6a:6d:9d:74:bd:e3:07:83:4a:1c:df:13:cd:f5:ea:93:
         0c:26:e4:4a:19:45:47:5c:e4:e2:2f:a2:13:11:3e:6e:ec:de:
         f7:8b:51:bb:9b:5d:8c:2f:6b:ef:b1:e4:ca:24:2f:7c:45:49:
         57:14:55:7c:f0:35:31:9d:fd:4b:ee:70:af:3a:a2:88:a3:c0:
         53:76:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org