Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa
File:                     3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          14kayFUWyL39BqTz4Zq0ocFReoME1duax90Lc03kTFA=
Subject key identifier:   A4:34:12:15:03:45:66:DA:7B:F1:46:D4:F8:CE:63:C0:A1:A6:3B:2D
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       1316D1AF7FF33663E64DBD93743296ED424BADF3
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:44 +0000
ROA not before:           Thu 04 Apr 2024 07:15:44 +0000
ROA not after:            Thu 03 Apr 2025 07:20:44 +0000
asID:                     262569
IP address blocks:        177.73.116.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:16:d1:af:7f:f3:36:63:e6:4d:bd:93:74:32:96:ed:42:4b:ad:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:44 2024 GMT
            Not After : Apr  3 07:20:44 2025 GMT
        Subject: CN=A4341215034566DA7BF146D4F8CE63C0A1A63B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:b6:26:eb:ad:47:de:34:5f:c7:13:dc:06:
                    42:29:53:c1:d5:3b:e3:ba:d5:25:5f:74:66:bd:c8:
                    81:e9:f6:22:8f:d5:a3:d8:07:09:02:d7:49:12:f5:
                    fd:e6:5b:99:54:df:c3:ec:eb:90:71:db:20:98:ed:
                    93:0e:cf:7f:b6:4e:b8:40:b8:41:99:73:c6:85:b3:
                    ad:7d:f7:a1:43:11:c4:8c:21:29:b2:ac:98:8d:b1:
                    67:e6:e8:68:78:d2:2b:04:40:58:c8:d3:8d:5f:2c:
                    a4:a5:c8:d0:d3:e9:0f:d0:6d:09:24:2a:3a:ff:69:
                    c9:d2:7d:f9:95:b1:8f:eb:fc:c3:77:b9:3d:13:90:
                    a6:99:fb:67:eb:ee:2b:d6:2c:1e:cc:9b:a2:a5:3e:
                    71:5a:b8:e8:b2:c5:fc:e6:0b:1b:2f:f5:c7:98:0b:
                    64:51:b6:5f:fe:02:ea:71:9e:cc:e8:e5:4a:ea:e5:
                    39:3f:90:29:65:3a:2d:ff:77:aa:fb:6e:a8:cd:7a:
                    be:fe:17:fb:d3:8c:54:8c:2d:79:22:a8:ec:8c:fd:
                    12:15:70:b1:7d:4b:6e:0d:2b:c9:32:8c:e5:aa:35:
                    9d:dc:b3:32:a4:86:1b:38:5a:e6:72:bc:33:96:55:
                    08:b2:c6:bd:42:0d:af:59:26:34:5a:2a:d7:c5:d1:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:12:15:03:45:66:DA:7B:F1:46:D4:F8:CE:63:C0:A1:A6:3B:2D
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131362e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:fa:9b:a0:51:65:70:d8:2e:d5:8b:08:f7:79:b8:ab:87:68:
         1e:12:7d:71:7d:02:3f:61:e7:58:40:7a:33:c0:96:0a:09:8c:
         9f:fd:15:8e:70:82:8c:b1:b6:6c:ba:cc:b1:15:3f:65:c5:0c:
         fa:df:7c:d1:e0:3b:75:b9:9e:a4:39:23:3e:8c:be:37:cf:af:
         4c:b6:d2:f4:f0:0f:fe:dc:51:33:e1:fb:9d:80:29:44:82:52:
         b3:db:db:ca:3f:12:bd:c4:cc:c3:07:81:b9:7d:b7:8c:c7:e2:
         9b:25:98:c2:2d:10:cf:8d:d0:e9:a1:90:1d:ad:e7:9d:0e:c2:
         b2:7b:fa:92:5f:06:f3:21:b2:7b:2c:ca:88:a2:0a:e6:c1:15:
         8e:61:8d:9a:84:6f:78:1b:53:0f:86:e6:f9:93:0c:13:e8:e5:
         ad:f1:24:80:27:58:e4:8e:df:31:eb:98:7e:66:94:d5:3f:af:
         2e:70:85:1c:91:17:ba:8f:10:c0:66:c7:09:d3:10:d8:a7:dc:
         fd:b5:63:c3:9e:b1:6c:1a:80:3a:50:57:2d:ce:79:af:a0:27:
         f5:fd:25:be:e4:7e:ae:1c:e3:68:31:3b:01:c9:9d:a6:59:15:
         8b:fc:22:5c:79:2f:7b:42:6a:a5:7e:2f:3f:f2:29:c1:9e:dd:
         a9:5d:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org