Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa
File:                     3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa (raw, json)
Hash identifier:          ilh0g73MAdsR6CTpp82CToFdI7YVqwNzf6zSBuDNTkA=
Subject key identifier:   EA:05:57:C1:87:93:E7:54:51:0A:87:99:A9:A7:A9:92:AF:CC:D7:3F
Certificate issuer:       /CN=8702862D58ADBCEEF55F0F75AEB7256E85D1C96E
Certificate serial:       7113B5D9557C393E69CA95D736B2021E319F3B05
Authority key identifier: 87:02:86:2D:58:AD:BC:EE:F5:5F:0F:75:AE:B7:25:6E:85:D1:C9:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8702862D58ADBCEEF55F0F75AEB7256E85D1C96E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa
Signing time:             Tue 06 Aug 2024 02:02:52 +0000
ROA not before:           Tue 06 Aug 2024 01:57:52 +0000
ROA not after:            Tue 05 Aug 2025 02:02:52 +0000
asID:                     271215
IP address blocks:        179.48.124.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:13:b5:d9:55:7c:39:3e:69:ca:95:d7:36:b2:02:1e:31:9f:3b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8702862D58ADBCEEF55F0F75AEB7256E85D1C96E
        Validity
            Not Before: Aug  6 01:57:52 2024 GMT
            Not After : Aug  5 02:02:52 2025 GMT
        Subject: CN=EA0557C18793E754510A8799A9A7A992AFCCD73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:43:b2:af:59:e4:a5:a5:6c:5f:1c:f9:4d:
                    9d:ab:df:04:15:ce:89:f9:12:c0:41:95:14:3e:18:
                    bb:49:c2:05:ea:d1:bc:3e:c3:b3:5e:38:46:0c:1e:
                    91:68:62:c3:45:3d:af:f3:d4:d3:ac:e3:96:8d:84:
                    0f:f3:b5:b6:26:04:b3:e2:77:7b:74:8d:0b:8f:3e:
                    c9:10:1b:68:d1:fb:bc:64:9c:76:b5:b6:52:7a:68:
                    dc:e1:94:f1:81:21:b2:e1:72:28:f9:b3:2d:2a:7e:
                    e2:51:ef:dc:f2:f8:fb:0f:b5:1c:e0:7a:b5:8b:e9:
                    d2:e1:82:76:74:02:5d:cb:ef:c8:ee:6b:60:3f:9b:
                    dd:95:45:5d:42:a8:18:d9:e3:fb:fd:b2:6f:56:21:
                    6a:e8:09:40:db:66:20:f8:4e:ad:ed:90:91:c6:a2:
                    a5:fe:ea:79:5a:4d:cc:57:d3:3a:ba:9a:85:5c:99:
                    a8:7d:da:f9:95:31:4e:3b:66:4c:29:f4:b3:fe:07:
                    3c:31:2d:50:d9:6b:e5:ab:87:d6:17:49:98:5e:74:
                    a1:3b:8b:00:99:44:95:95:1c:c7:4b:0d:47:51:bc:
                    1c:9a:4a:0d:76:33:5d:cb:9d:54:ae:7d:aa:7f:13:
                    3f:43:c9:a3:36:e3:c7:d2:28:b2:d6:6b:9c:9f:61:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:57:C1:87:93:E7:54:51:0A:87:99:A9:A7:A9:92:AF:CC:D7:3F
            X509v3 Authority Key Identifier:
                keyid:87:02:86:2D:58:AD:BC:EE:F5:5F:0F:75:AE:B7:25:6E:85:D1:C9:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/8702862D58ADBCEEF55F0F75AEB7256E85D1C96E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8702862D58ADBCEEF55F0F75AEB7256E85D1C96E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:c7:53:df:fb:fa:9c:4e:c7:e5:53:f5:a3:21:06:03:86:
         0c:d6:08:f4:49:b0:ef:b9:fd:51:af:b2:57:b7:84:be:81:85:
         1a:fe:f8:2e:3e:d1:21:79:3c:74:e2:94:ae:84:5b:58:47:c9:
         9d:06:d4:f2:d7:1a:bd:1c:bf:97:22:f2:8b:89:07:ca:80:d1:
         45:50:e3:9a:a4:24:f7:de:62:26:74:a4:b6:53:3f:13:1e:e4:
         e4:c5:02:74:91:53:2b:9d:db:30:41:0d:5d:d8:d6:1a:3e:7d:
         dd:bf:c9:61:08:a0:0e:db:20:77:f4:f4:d1:05:75:d6:af:0e:
         63:9a:c4:72:a8:6d:b0:97:c8:58:3e:c2:1f:63:48:b2:ce:c9:
         35:e0:fe:34:17:0a:e7:6d:85:f1:8f:81:e3:ef:24:7a:0b:e2:
         6f:9e:d1:7a:da:ae:7c:7c:98:05:e6:a0:07:2a:ed:ff:bc:3f:
         34:47:7d:49:b9:18:21:f3:a3:5b:18:1f:5f:4d:0f:d1:7b:af:
         ac:5f:74:13:dd:85:16:06:c2:9e:b8:78:61:7b:7b:db:63:12:
         28:fe:96:69:69:68:e8:a5:1a:5f:44:ef:60:04:9f:22:af:ee:
         ef:7d:21:57:5d:2c:69:93:19:6e:e7:ac:4c:50:08:7b:60:ff:
         c7:7f:9e:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcRO12VV8OT5pypXXNrICHjGfOwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwMjg2MkQ1OEFEQkNFRUY1NUYwRjc1QUVCNzI1NkU4
NUQxQzk2RTAeFw0yNDA4MDYwMTU3NTJaFw0yNTA4MDUwMjAyNTJaMDMxMTAvBgNV
BAMTKEVBMDU1N0MxODc5M0U3NTQ1MTBBODc5OUE5QTdBOTkyQUZDQ0Q3M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRaUOyr1nkpaVsXxz5TZ2r3wQV
zon5EsBBlRQ+GLtJwgXq0bw+w7NeOEYMHpFoYsNFPa/z1NOs45aNhA/ztbYmBLPi
d3t0jQuPPskQG2jR+7xknHa1tlJ6aNzhlPGBIbLhcij5sy0qfuJR79zy+PsPtRzg
erWL6dLhgnZ0Al3L78jua2A/m92VRV1CqBjZ4/v9sm9WIWroCUDbZiD4Tq3tkJHG
oqX+6nlaTcxX0zq6moVcmah92vmVMU47Zkwp9LP+BzwxLVDZa+Wrh9YXSZhedKE7
iwCZRJWVHMdLDUdRvByaSg12M13LnVSufap/Ez9DyaM248fSKLLWa5yfYU0hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6gVXwYeT51RRCoeZqaepkq/M1z8wHwYDVR0j
BBgwFoAUhwKGLVitvO71Xw91rrclboXRyW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0RYNEhMYUYxRHM0cDNqMnZTSGs3MjgzSlp6UDhSUjd1dU02R3pCU2pw
R2cvMC84NzAyODYyRDU4QURCQ0VFRjU1RjBGNzVBRUI3MjU2RTg1RDFDOTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MDI4NjJENThBREJDRUVG
NTVGMEY3NUFFQjcyNTZFODVEMUM5NkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNEWDRITGFGMURzNHAzajJ2U0hrNzI4M0paelA4UlI3dXVNNkd6QlNqcEdnLzAv
MzEzNzM5MmUzNDM4MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMjMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMHwwDQYJKoZIhvcNAQELBQADggEBAI+1x1Pf
+/qcTsflU/WjIQYDhgzWCPRJsO+5/VGvsle3hL6BhRr++C4+0SF5PHTilK6EW1hH
yZ0G1PLXGr0cv5ci8ouJB8qA0UVQ45qkJPfeYiZ0pLZTPxMe5OTFAnSRUyud2zBB
DV3Y1ho+fd2/yWEIoA7bIHf09NEFddavDmOaxHKobbCXyFg+wh9jSLLOyTXg/jQX
CudthfGPgePvJHoL4m+e0Xrarnx8mAXmoAcq7f+8PzRHfUm5GCHzo1sYH19ND9F7
r6xfdBPdhRYGwp64eGF7e9tjEij+lmlpaOilGl9E72AEnyKv7u99IVddLGmTGW7n
rExQCHtg/8d/nk8=
-----END CERTIFICATE-----
Generated at Thu Oct 10 02:55:14 2024 by rpki-client on console-fra.rpki-client.org