Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131382e302f32332d3233203d3e20323632353639.roa
File:                     3137372e37332e3131382e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          /aA5y3VwSXSUXgnX83OZLOyPIU2joyAOhOeoRjwSshE=
Subject key identifier:   2A:92:BC:99:B4:51:2E:18:5B:E3:47:04:D7:C3:EA:14:C9:67:CF:BF
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       0D3B12E899A658E14C74A32D269A2B22BDE8F7DA
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131382e302f32332d3233203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:41 +0000
ROA not before:           Thu 04 Apr 2024 07:15:41 +0000
ROA not after:            Thu 03 Apr 2025 07:20:41 +0000
asID:                     262569
IP address blocks:        177.73.118.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:12:e8:99:a6:58:e1:4c:74:a3:2d:26:9a:2b:22:bd:e8:f7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:41 2024 GMT
            Not After : Apr  3 07:20:41 2025 GMT
        Subject: CN=2A92BC99B4512E185BE34704D7C3EA14C967CFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:5e:f1:f9:0d:96:27:51:45:78:88:a7:08:
                    ae:8e:dd:44:47:2a:2b:ee:e5:45:0f:a9:3d:c5:c0:
                    c3:76:7a:5b:eb:84:18:da:51:e4:2d:8c:ae:5d:83:
                    08:2a:a9:d2:8d:0c:1c:fa:db:16:19:9e:c0:46:f2:
                    ff:aa:fa:64:cf:9e:b8:bb:1d:12:e3:05:b9:4e:38:
                    21:2a:5e:86:0e:0c:d5:48:c4:78:e2:22:e9:82:1c:
                    ff:a4:29:db:42:81:28:5d:8a:e3:19:6f:e5:97:39:
                    c3:41:6f:d0:c3:3f:4a:cf:70:84:b5:f4:80:3e:02:
                    f5:87:0c:19:c4:ed:c9:13:07:7b:ab:89:ec:d4:0c:
                    f8:86:67:46:22:40:03:fc:7c:42:3d:56:37:0d:1c:
                    9a:f7:96:05:17:bf:d5:07:e5:cc:96:68:10:a5:24:
                    a5:9c:6d:3a:d4:37:18:c9:86:5d:7a:1b:3e:c9:e6:
                    02:f6:e5:18:e8:7b:ed:41:3b:7d:e1:a5:d4:d5:fc:
                    d5:ca:53:a7:d2:2b:ad:c8:d6:64:80:8d:0d:c8:66:
                    61:cb:1c:da:93:b0:46:89:68:e1:c1:1a:24:ec:63:
                    87:f9:20:fb:a8:b4:07:a6:08:af:2e:05:c3:0b:82:
                    ca:2b:27:da:95:4c:6f:37:ee:a3:c7:36:83:82:82:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:BC:99:B4:51:2E:18:5B:E3:47:04:D7:C3:EA:14:C9:67:CF:BF
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131382e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:88:49:37:d0:d6:54:00:b7:5c:34:e5:80:b9:0f:0a:53:
         25:ed:96:b6:f9:09:07:ca:f4:cf:65:00:6f:c6:2e:3f:f2:d0:
         7c:50:93:95:5a:a1:fb:79:70:d9:8a:12:34:62:92:4e:18:b9:
         97:68:d5:41:e6:1f:12:82:0b:fb:5f:45:cb:d4:5a:31:aa:8e:
         36:03:c4:3c:fe:36:56:c4:29:a9:e3:a1:3a:82:6a:e6:01:a1:
         ad:b7:0f:12:19:3d:0d:ab:9f:25:1c:3c:ea:13:18:4d:76:b7:
         51:eb:a6:ad:71:97:3b:25:ca:dc:07:27:e9:00:31:93:75:a0:
         7b:d3:2d:29:02:c9:46:9e:f5:8f:71:cc:fe:64:cb:af:bb:11:
         c6:86:9a:1a:67:57:82:53:f3:b0:b5:2b:ff:a7:5a:70:46:82:
         e0:c4:e5:e8:aa:74:22:88:3d:33:ef:27:4a:cb:4a:22:16:80:
         1f:2a:b1:72:2d:80:b2:23:42:cc:ff:9f:d0:b1:d8:fc:2c:8f:
         75:46:eb:4d:04:76:b0:55:74:d6:ad:a8:73:2a:b0:32:de:b5:
         50:f3:60:79:8f:7e:78:0b:b5:22:9b:52:a7:a6:7d:b3:17:3e:
         cd:6e:5e:1b:a6:6a:18:91:2b:9d:96:f1:83:f4:aa:2f:e5:4f:
         d9:07:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:21:38 2024 by rpki-client on console-fra.rpki-client.org