Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136322e302f32342d3234203d3e20323731363530.roa
File:                     3137392e36332e3136322e302f32342d3234203d3e20323731363530.roa (raw, json)
Hash identifier:          vxn+So14XN8ax4G08GZ2Uji7oKoihr8vUownNFJTSSk=
Subject key identifier:   23:9A:10:DD:0A:37:B7:D2:C4:89:CF:BD:82:E4:1D:82:1E:58:80:26
Certificate issuer:       /CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
Certificate serial:       6F785868D951BA429FCE2F563D523E4509AFA9A1
Authority key identifier: 32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136322e302f32342d3234203d3e20323731363530.roa
Signing time:             Wed 03 Apr 2024 22:53:44 +0000
ROA not before:           Wed 03 Apr 2024 22:48:44 +0000
ROA not after:            Wed 02 Apr 2025 22:53:44 +0000
asID:                     271650
IP address blocks:        179.63.162.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:78:58:68:d9:51:ba:42:9f:ce:2f:56:3d:52:3e:45:09:af:a9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
        Validity
            Not Before: Apr  3 22:48:44 2024 GMT
            Not After : Apr  2 22:53:44 2025 GMT
        Subject: CN=239A10DD0A37B7D2C489CFBD82E41D821E588026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:67:ba:07:4a:e0:7a:38:61:4d:64:fb:cb:
                    45:69:f2:db:b2:1d:52:0f:1a:c4:27:3e:86:f5:2a:
                    ec:ce:74:08:6d:28:88:00:f4:b9:80:15:bd:81:fd:
                    b7:a6:cf:e9:8a:e8:ca:58:1e:ac:30:42:37:20:03:
                    3d:7c:64:10:f4:8b:4d:0e:e1:c3:79:5d:1f:11:5f:
                    c0:df:c5:51:c2:78:54:ff:74:d3:fb:6f:e6:25:1b:
                    a0:ff:79:cc:6f:c7:07:5e:3b:c7:86:53:64:7e:67:
                    58:c0:35:b4:fb:0d:e8:4c:26:02:e5:fb:75:c1:7a:
                    f1:2e:e4:5b:da:2e:44:bf:87:45:93:ec:06:18:cc:
                    c2:56:fc:0d:73:b9:73:54:6e:e5:8d:19:ca:ab:25:
                    b4:00:2b:a1:d3:26:72:58:73:e2:8c:db:6b:a3:6f:
                    70:89:ad:46:05:c9:49:31:d5:13:f6:2b:33:28:1d:
                    53:e6:7a:d4:63:c2:54:52:56:35:b2:f8:aa:81:7a:
                    65:bc:42:25:82:7c:89:cd:f9:20:ed:84:a1:23:92:
                    f3:ae:8c:00:2c:73:b3:ea:88:bd:64:02:4d:40:bb:
                    f5:26:f4:d2:2a:29:09:37:f3:0c:c3:cd:11:ff:8e:
                    a0:98:bb:4d:81:5e:e0:b5:2f:76:c1:c7:0a:00:84:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9A:10:DD:0A:37:B7:D2:C4:89:CF:BD:82:E4:1D:82:1E:58:80:26
            X509v3 Authority Key Identifier:
                keyid:32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136322e302f32342d3234203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:62:df:f3:f9:18:79:5f:85:72:48:70:74:9b:d8:49:2e:4c:
         2f:11:30:c1:32:95:89:c0:0d:b7:62:93:fe:b3:ba:8f:9b:97:
         22:6e:68:5a:b6:e4:55:e3:dc:e8:af:53:41:bd:ca:90:51:e4:
         7c:94:14:ae:97:7e:a6:01:e4:c9:99:ff:eb:b0:d4:f4:5c:23:
         52:04:7f:5d:5f:3c:eb:b0:39:ad:e6:54:33:d4:d0:a2:c3:57:
         7f:97:a9:55:22:7b:b8:8e:93:3e:d9:a2:e9:b9:ca:18:8b:86:
         d4:ed:ff:a7:d6:97:96:d2:87:68:ec:51:e3:4a:d0:f0:4a:aa:
         25:9a:51:ff:1e:1a:80:dc:dd:c1:36:d6:8d:e9:b3:2c:16:a3:
         c9:b1:5e:c4:10:cd:a9:01:e9:95:4d:1e:39:03:4c:04:32:ef:
         c9:16:37:84:bc:37:28:8b:db:e2:17:87:78:f5:dc:f5:79:2c:
         69:39:39:1c:fb:99:87:63:6c:ce:f0:63:fc:b3:76:e3:9e:a3:
         cf:f0:0e:36:a3:38:65:5d:47:a1:f8:8c:ea:90:9f:ec:4b:fa:
         ba:55:38:db:4f:eb:86:ea:37:48:e1:81:7c:97:41:6c:c7:61:
         ce:bf:1b:ce:5b:3b:a9:41:52:5e:9e:60:0a:45:19:be:6a:a1:
         69:55:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org