Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          fDyECl17pEnou1XggevwjsB8USiUOZLvhWDOz4SD0Fo=
Subject key identifier:   C7:B7:D4:EA:93:AF:B7:B4:D6:2B:14:B3:49:FA:BA:44:28:A4:C6:1D
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       3A3473549C331FA07539A714A2B785DD76AADD9D
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:41 +0000
ROA not before:           Thu 04 Apr 2024 07:15:41 +0000
ROA not after:            Thu 03 Apr 2025 07:20:41 +0000
asID:                     262569
IP address blocks:        177.73.119.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:34:73:54:9c:33:1f:a0:75:39:a7:14:a2:b7:85:dd:76:aa:dd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:41 2024 GMT
            Not After : Apr  3 07:20:41 2025 GMT
        Subject: CN=C7B7D4EA93AFB7B4D62B14B349FABA4428A4C61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:f2:7a:b8:41:29:7a:e8:60:ea:a5:2d:40:
                    f6:09:1e:c8:01:f7:20:23:47:6e:94:bd:51:7b:8a:
                    5b:4d:ae:70:b3:e5:10:f5:63:80:c5:3c:0d:c0:9e:
                    75:a6:a0:36:ce:2a:67:cd:dc:a8:be:6b:99:ec:c0:
                    65:98:45:43:ac:da:58:39:6d:ae:2a:24:50:ef:0f:
                    dd:f7:53:65:84:63:27:24:78:2b:b2:55:96:53:f5:
                    c6:4d:3a:37:5e:b3:c2:37:b9:85:a4:c7:3f:d7:19:
                    1b:05:af:88:c2:bc:5d:ad:19:9d:c9:aa:bd:53:08:
                    5f:ff:20:0e:37:e7:b3:13:22:64:ee:2b:42:e0:9a:
                    20:dc:ae:5d:ff:41:17:a6:77:1a:d1:93:d7:92:60:
                    f7:fd:9d:d5:b3:0a:d2:7d:a4:27:55:e2:bd:86:2d:
                    d7:68:4b:fa:56:71:c2:10:cc:d0:06:48:b3:05:d9:
                    87:91:e8:1a:40:c8:bd:2f:26:8e:45:4c:0b:98:1c:
                    67:6c:e9:1e:74:d4:2a:a3:7e:70:75:d0:95:df:d8:
                    bb:45:45:69:cf:70:c2:6a:a6:e3:b8:1e:7c:8f:66:
                    0e:30:77:5c:c0:aa:6f:8b:52:76:bc:19:2a:62:fd:
                    b5:ed:c3:f6:15:95:02:f6:d1:39:2e:19:b1:9f:fb:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B7:D4:EA:93:AF:B7:B4:D6:2B:14:B3:49:FA:BA:44:28:A4:C6:1D
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131392e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:03:f8:60:63:a7:39:8a:5a:bf:8b:1b:a9:9f:03:eb:ee:cc:
         b4:62:13:84:fb:8f:2f:92:ee:1e:dd:c2:c8:a8:e5:c7:b0:3a:
         7d:a9:98:0a:36:f1:25:c5:0c:19:a0:c4:fa:c0:cf:95:97:f1:
         e2:e0:32:d8:71:14:ff:5b:e7:8d:54:f4:a8:8e:ea:eb:01:10:
         37:9f:51:80:cb:05:51:cd:a8:2f:3a:56:61:ff:c4:e4:f9:80:
         44:95:94:ca:98:07:49:02:5e:95:2a:36:02:a5:4b:9f:21:13:
         5c:b3:2a:78:fb:a7:e3:7b:f0:41:fe:8f:dc:26:1d:4c:c0:bd:
         9f:74:03:22:7a:fb:b5:53:03:82:f8:08:b5:06:5c:9a:dd:c5:
         cd:25:e4:7c:c0:50:e3:be:c0:9c:d0:85:92:fd:73:1d:0b:74:
         eb:6b:ee:63:0c:1f:19:3e:d0:ef:d5:f4:7a:3a:c7:14:1d:c8:
         44:7f:88:c0:63:3d:60:19:bd:95:3e:4f:92:b9:08:d0:8b:a5:
         0a:65:69:fd:33:d2:6e:e8:06:b7:91:3b:d6:a7:3b:7b:68:61:
         e1:d0:e6:07:71:48:65:ed:0b:e1:18:4d:dc:b7:fb:33:4a:92:
         da:23:8f:ce:c1:44:d6:18:34:30:11:a2:e1:a6:3d:c3:53:4b:
         cb:b5:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:21:38 2024 by rpki-client on console-fra.rpki-client.org