Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa
File:                     3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa (raw, json)
Hash identifier:          C5kYHI1ZxSpCBLSnJ3SVbg256SsO+N4GWkVfednTP6M=
Subject key identifier:   50:E6:2A:F2:9A:C6:DF:C5:22:BF:99:09:02:43:0E:8D:A4:E5:01:C9
Certificate issuer:       /CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
Certificate serial:       2D910DDB6D0A2E62BED1C27907F2C71475C5F5E0
Authority key identifier: 32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa
Signing time:             Wed 03 Apr 2024 22:53:43 +0000
ROA not before:           Wed 03 Apr 2024 22:48:43 +0000
ROA not after:            Wed 02 Apr 2025 22:53:43 +0000
asID:                     271650
IP address blocks:        179.63.160.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:91:0d:db:6d:0a:2e:62:be:d1:c2:79:07:f2:c7:14:75:c5:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
        Validity
            Not Before: Apr  3 22:48:43 2024 GMT
            Not After : Apr  2 22:53:43 2025 GMT
        Subject: CN=50E62AF29AC6DFC522BF990902430E8DA4E501C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:d3:29:ed:0e:39:fc:0f:1a:14:fd:19:da:
                    e8:5f:80:88:2a:73:76:6e:4c:e6:ed:bf:21:46:b0:
                    54:76:88:82:86:58:5a:8d:1d:02:f2:88:dc:7a:4f:
                    39:36:d3:fb:cb:1f:18:55:59:e5:80:de:d6:0f:3b:
                    aa:39:b7:92:e6:ab:8e:4b:65:ad:d3:ea:b0:78:a2:
                    a2:58:81:e3:7e:ce:7c:26:fd:b9:01:3d:89:8b:13:
                    5e:11:90:2d:f4:79:6f:75:a2:13:6a:0e:e0:74:69:
                    05:25:10:cb:50:04:e1:4b:28:e2:1c:ec:ac:fa:32:
                    09:9b:c0:9c:26:d5:00:5e:b3:d5:7c:77:c8:b8:d6:
                    26:87:01:5f:aa:0c:4d:1e:8e:22:63:55:10:0d:bf:
                    44:00:68:04:9f:b1:47:08:87:ce:ac:a6:59:b5:46:
                    16:bd:8e:97:c0:95:41:26:22:44:d4:f9:fc:64:08:
                    db:19:47:37:88:b2:e7:3a:fb:55:8a:c2:48:d5:40:
                    14:83:03:3b:12:33:d0:5f:ab:20:8d:01:0c:d5:a0:
                    72:a1:cf:03:7a:fd:b0:30:64:a5:f5:16:02:4d:c1:
                    07:c4:13:ba:4c:aa:19:7d:2e:49:5e:e8:7b:0b:bb:
                    5c:bc:1e:a5:da:f8:8f:27:fb:9e:ad:e2:e8:d9:13:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E6:2A:F2:9A:C6:DF:C5:22:BF:99:09:02:43:0E:8D:A4:E5:01:C9
            X509v3 Authority Key Identifier:
                keyid:32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:ea:a3:03:a6:1d:c4:18:d4:ea:d0:fe:0a:3a:f2:2a:fe:
         fc:a8:c4:1e:d9:e0:dd:87:56:4e:a5:c5:2d:f6:fb:56:98:31:
         eb:03:99:73:41:f3:2d:a4:e3:5a:49:dd:59:05:18:3b:ba:e9:
         6e:89:7e:88:41:f9:8e:eb:f0:9a:ca:94:87:d9:f1:0b:4c:84:
         5b:f3:eb:d4:4c:f7:62:af:6f:37:4e:5f:8e:71:78:17:77:ed:
         73:05:c5:ef:89:60:48:ed:7c:79:53:c2:ef:bd:fe:e1:7a:5b:
         a5:45:41:27:96:2e:33:6a:9c:21:2d:dd:eb:52:b0:e9:79:d8:
         bf:ce:47:2a:38:7f:8a:78:76:f4:80:10:4e:ab:bb:a6:d8:5e:
         d8:e4:11:eb:3e:7a:a2:66:b2:22:08:93:2e:fd:e7:3c:c1:7e:
         dd:61:0a:b2:d5:dc:29:3e:5c:09:03:ef:1e:06:0f:3a:23:cb:
         e7:50:43:33:d6:a0:dd:f2:70:db:76:1e:ee:3f:34:c5:7b:92:
         c9:ff:d3:11:ba:4a:63:32:4e:f1:14:3e:20:36:ec:2f:ee:d9:
         dd:bd:df:65:7c:81:38:fa:9f:09:01:59:a9:07:11:0b:62:33:
         b2:90:56:1c:a6:ea:72:5e:05:5c:a9:ee:f0:c6:23:3d:37:cd:
         1f:e7:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org