Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136332e302f32342d3234203d3e20323731363530.roa
File:                     3137392e36332e3136332e302f32342d3234203d3e20323731363530.roa (raw, json)
Hash identifier:          ZLt8y+0cdEnEFJj7zHIOlbu5V2NylsAg42Qi3ZC2WuM=
Subject key identifier:   72:71:65:ED:B1:1B:82:04:4C:06:1B:33:03:3C:D7:05:CA:70:CB:F5
Certificate issuer:       /CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
Certificate serial:       5BC47140D085131ABDD8DBCCBAAA56C3ED9717C1
Authority key identifier: 32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136332e302f32342d3234203d3e20323731363530.roa
Signing time:             Wed 03 Apr 2024 22:53:44 +0000
ROA not before:           Wed 03 Apr 2024 22:48:44 +0000
ROA not after:            Wed 02 Apr 2025 22:53:44 +0000
asID:                     271650
IP address blocks:        179.63.163.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c4:71:40:d0:85:13:1a:bd:d8:db:cc:ba:aa:56:c3:ed:97:17:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
        Validity
            Not Before: Apr  3 22:48:44 2024 GMT
            Not After : Apr  2 22:53:44 2025 GMT
        Subject: CN=727165EDB11B82044C061B33033CD705CA70CBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:44:08:9f:1c:ab:30:ee:6e:39:fc:05:b5:
                    8b:13:5b:6f:8e:43:77:8a:02:5e:98:19:e8:94:35:
                    37:f6:08:d5:fe:75:03:f6:ef:88:f6:2b:0b:55:23:
                    32:6a:c5:29:97:66:0a:02:b1:4c:2b:d8:4b:97:b1:
                    21:98:28:a0:94:08:64:a6:20:11:ef:e3:c6:62:fa:
                    47:0b:dd:db:36:f4:82:81:26:f6:f9:ce:1a:09:5a:
                    39:53:3b:1d:e9:a0:7b:20:85:a7:05:6b:42:d9:8c:
                    e5:b5:1e:79:c5:3f:e4:9f:d6:bb:39:84:d1:85:e7:
                    f9:19:44:18:72:b7:86:29:06:14:28:8c:5a:e4:34:
                    18:18:0d:ad:61:95:f7:22:3f:ad:37:a0:92:89:7c:
                    81:23:1a:6a:0f:d0:81:88:d8:47:f2:ee:8a:f5:df:
                    93:cd:d8:cd:96:57:cd:31:62:56:47:5e:47:6c:3b:
                    62:3c:54:48:fb:5a:d8:b4:57:73:7e:c0:a7:36:8f:
                    42:8f:8c:e2:01:8c:9e:bd:5e:4e:3e:bc:a7:9c:8f:
                    ef:3b:f7:0e:b0:d4:59:48:cc:22:c5:1f:fc:9f:73:
                    a3:ad:2a:16:d3:14:be:ea:c3:c1:56:99:63:a6:87:
                    37:24:8c:88:89:89:8f:09:39:f5:2e:08:72:ca:a9:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:71:65:ED:B1:1B:82:04:4C:06:1B:33:03:3C:D7:05:CA:70:CB:F5
            X509v3 Authority Key Identifier:
                keyid:32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136332e302f32342d3234203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:18:f4:9c:04:13:27:d5:b7:30:74:40:0a:e5:83:3c:5b:64:
         f0:42:10:68:a5:87:9a:ce:62:98:40:8c:70:d5:2f:8b:2a:89:
         cb:ed:32:87:4f:6b:ce:f7:1c:c2:52:4c:fa:65:eb:7f:ec:c0:
         ba:27:1d:b7:b3:3a:5d:50:03:91:44:d6:d3:b8:7f:ae:e9:4e:
         55:76:32:39:4b:91:1d:00:a1:7d:c1:46:58:07:03:ee:84:a3:
         ad:9d:92:da:2c:8d:8f:40:8b:6f:48:33:b6:6b:1a:08:0b:b3:
         be:c6:91:c0:dd:5d:9f:39:e8:31:01:a0:dc:64:90:7d:9d:15:
         df:e0:36:d5:b1:4c:5f:b0:27:6b:0b:cc:2d:bd:00:b7:f1:04:
         36:8a:54:37:d5:5d:9d:90:a3:cd:06:7d:16:3b:e0:17:d0:f9:
         f3:49:5b:9e:f3:86:5f:53:18:f7:ac:09:6b:a1:4d:98:6a:c6:
         4e:db:ae:86:3b:1a:93:95:40:6c:ce:18:c1:b4:4e:30:d5:cd:
         91:bf:6a:94:9d:f4:13:29:27:64:4b:21:82:71:66:bd:17:5e:
         ad:0d:84:48:36:c5:c5:28:35:12:c1:ec:31:89:63:f6:de:c0:
         97:fd:9e:8c:09:d9:6c:93:98:f0:96:54:88:3d:29:f0:ee:65:
         2e:65:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org