Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          U2R6vGhAc02QQzaF7E7XdaJanIP+pCKsIB+v3qzFdIA=
Subject key identifier:   DB:43:64:1D:4E:4E:B4:81:6C:08:E5:00:BF:FB:A0:3B:5F:6F:C0:5D
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       50F0A48B8E133F868F36CBB6EB682B8E64209A7E
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:43 +0000
ROA not before:           Thu 04 Apr 2024 07:15:43 +0000
ROA not after:            Thu 03 Apr 2025 07:20:43 +0000
asID:                     262569
IP address blocks:        177.73.112.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f0:a4:8b:8e:13:3f:86:8f:36:cb:b6:eb:68:2b:8e:64:20:9a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:43 2024 GMT
            Not After : Apr  3 07:20:43 2025 GMT
        Subject: CN=DB43641D4E4EB4816C08E500BFFBA03B5F6FC05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:25:f2:d8:43:35:e5:3e:f9:c2:0b:d8:df:
                    bf:46:87:59:b6:c6:57:12:f2:9d:1f:7a:04:15:21:
                    36:94:4c:d3:e3:0b:61:bc:5a:cd:ae:81:35:98:1e:
                    a3:6b:b9:52:d3:c4:9c:c6:25:ea:49:b3:5f:12:82:
                    54:f3:e6:5b:07:50:48:46:c4:9c:60:6c:0a:a7:49:
                    f3:20:14:f3:d0:42:a9:11:51:7e:29:d8:5e:2e:a0:
                    b6:9c:9c:c6:93:d9:37:f0:cc:f5:5b:ef:ed:c0:6c:
                    db:7c:1b:4d:99:96:2f:1a:6a:01:63:ce:ef:f7:75:
                    32:03:c5:8f:bf:3f:4c:c5:2d:4f:af:88:24:64:61:
                    aa:2e:ff:f3:ff:f9:87:6c:fe:cd:b6:99:aa:79:d9:
                    4e:c9:24:4c:0e:2d:e1:38:c4:31:45:dc:f3:f5:d8:
                    60:ea:6b:5d:ba:9b:6d:24:83:7e:7a:9a:9d:47:1d:
                    38:3e:ad:10:ce:28:a7:c1:30:0b:b5:f3:e7:cc:10:
                    a3:48:0c:29:78:70:bf:b5:ef:42:52:5f:79:1e:50:
                    b4:81:04:bb:43:9b:b9:77:71:08:6e:49:e1:6e:92:
                    88:24:be:8e:02:8e:77:62:18:ed:4e:45:79:9c:94:
                    4e:3f:9c:3c:77:cc:17:7d:11:b2:92:7a:24:16:c7:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:43:64:1D:4E:4E:B4:81:6C:08:E5:00:BF:FB:A0:3B:5F:6F:C0:5D
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:40:f5:65:7d:20:07:bc:92:5d:d5:b8:db:ad:34:48:80:14:
         45:66:91:70:b7:59:2f:b6:2e:88:c6:ad:59:6f:08:74:e6:a2:
         32:e5:e0:af:72:46:a4:f3:ae:03:ba:e9:eb:16:3e:01:c3:90:
         48:aa:f4:2d:4a:21:74:65:a2:3f:89:3c:ed:28:af:93:69:51:
         64:02:08:a6:00:2c:63:e9:3f:a3:fa:84:fb:46:fc:d9:de:26:
         e5:63:6e:a2:f7:78:cd:4d:15:d5:49:1e:21:7b:93:bf:89:8c:
         72:cd:45:2c:85:64:81:db:8b:ce:90:30:4f:df:c8:4b:f6:22:
         97:65:91:ac:13:05:8a:65:bc:31:d8:8a:c9:b2:3c:38:bb:fb:
         d0:42:18:6a:27:a6:51:bc:aa:19:0d:78:c3:4a:da:bc:12:a7:
         a1:73:e4:1c:5e:ed:05:9c:4d:ca:6f:80:29:bb:b4:26:8a:11:
         bb:1b:ab:44:4e:78:c0:7c:5e:83:fa:a1:c8:91:85:9f:62:8e:
         83:90:48:25:a2:4f:9f:67:98:6d:73:37:5d:fd:42:90:84:41:
         57:79:36:9c:ae:4f:b0:d8:ff:56:b1:a0:e1:62:d9:10:f4:58:
         bc:52:47:59:3b:30:16:91:39:f1:83:be:17:0b:96:51:b0:d4:
         c5:b4:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org