Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          wVVL1s8pMZQEZ8XDWJIJ7Ohiz56zlHoMY57Ycfnseys=
Subject key identifier:   6C:8B:CD:D6:0E:D1:C0:80:71:77:B4:8D:1E:29:59:76:20:8D:71:5E
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       079554AE4D631A83C885BF16A2A4424EF469507D
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:41 +0000
ROA not before:           Thu 04 Apr 2024 07:15:41 +0000
ROA not after:            Thu 03 Apr 2025 07:20:41 +0000
asID:                     262569
IP address blocks:        177.73.116.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:95:54:ae:4d:63:1a:83:c8:85:bf:16:a2:a4:42:4e:f4:69:50:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:41 2024 GMT
            Not After : Apr  3 07:20:41 2025 GMT
        Subject: CN=6C8BCDD60ED1C0807177B48D1E295976208D715E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:b2:eb:ad:84:d0:e3:0a:a2:8b:ea:87:0d:
                    a9:24:2f:72:6e:6f:2a:e4:85:b7:1b:cf:e9:18:b0:
                    12:60:eb:cd:cd:50:06:2a:c4:69:0e:7c:67:35:42:
                    f5:0a:1e:c5:52:7f:25:a2:f4:1d:87:46:9d:62:00:
                    d3:14:1e:7e:d2:45:88:a6:56:69:35:12:6a:95:56:
                    57:1c:bb:02:ed:7c:c8:39:cf:df:54:40:38:bd:e9:
                    18:cc:70:83:3a:b1:92:59:61:66:63:02:9e:72:71:
                    ef:6f:85:17:7a:2b:59:51:87:21:7c:b5:46:ef:71:
                    19:ce:7e:dd:79:47:6d:3f:43:6e:3d:1a:00:ae:10:
                    ba:8f:ed:f2:80:55:40:c5:10:6c:54:0c:82:48:53:
                    dc:cd:c0:c5:78:80:7a:91:60:58:f4:b3:d1:99:1c:
                    b3:e1:34:d9:79:95:b1:b7:c8:24:11:35:43:e0:11:
                    6a:5a:10:42:1e:a6:07:b8:61:39:4f:cb:b1:08:05:
                    02:3b:e7:a9:dd:3f:c1:69:b1:85:23:0f:9e:b7:de:
                    8c:a6:fe:1b:86:af:46:7a:a3:9a:55:07:c6:ec:f7:
                    6e:2e:a5:18:bd:34:b0:22:38:de:26:6c:46:59:6b:
                    bb:36:76:d3:22:1a:94:20:c5:3b:3a:57:f7:9e:ac:
                    4a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8B:CD:D6:0E:D1:C0:80:71:77:B4:8D:1E:29:59:76:20:8D:71:5E
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131362e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:61:05:32:1b:5f:77:26:f4:53:63:0c:93:19:f6:c2:6b:
         71:c4:1f:56:b0:20:9d:d4:93:95:e9:aa:62:89:06:b7:32:d0:
         03:8f:66:3b:20:e7:1a:1e:ba:27:e4:6b:1e:f1:05:bd:e8:f5:
         57:db:0d:f7:12:90:19:24:83:e6:7a:a1:b0:8a:d0:1d:8d:f2:
         75:1f:9c:b3:a4:e3:52:14:93:04:e8:92:1c:44:6e:ef:88:fa:
         fc:b1:74:b0:20:0b:da:9b:ed:7d:ef:9c:37:95:28:02:6f:44:
         32:88:37:23:3a:91:37:80:74:25:77:63:29:9a:cd:47:26:c7:
         16:d2:77:a7:d3:0d:9d:8a:ec:30:3b:53:07:dd:80:49:99:ec:
         d0:88:75:80:38:f2:ff:f6:89:fd:a6:6c:6a:6c:db:e2:c4:f3:
         4f:0e:9c:8d:c8:60:4a:1c:f8:a2:3f:98:87:9d:61:c6:9a:5c:
         7a:96:4a:af:57:fb:8e:d1:51:ff:33:13:e5:0e:ee:81:d7:91:
         d5:55:37:e9:80:37:1d:67:ab:8c:f5:16:50:1c:23:02:59:41:
         ca:9d:61:52:01:f1:1f:99:4d:7c:3e:e5:12:e9:ee:b7:c2:05:
         9a:c0:c2:1d:1d:5d:ec:1b:25:0a:e7:7e:45:6c:ea:bc:c2:f7:
         3b:c6:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:21:38 2024 by rpki-client on console-fra.rpki-client.org