Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
File:                     3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier:          DH7WNTLIpCAs8FFA6eNuTk5PxEquAuMcGf7g7eogx6E=
Subject key identifier:   D5:6D:8E:80:08:01:9E:4E:2E:62:5B:30:36:C9:B6:FA:95:2D:82:43
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       0125C0907C4E9D7F4F2D38B2657A3D462C565877
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:50 +0000
ROA not before:           Mon 14 Oct 2024 01:44:50 +0000
ROA not after:            Mon 13 Oct 2025 01:49:50 +0000
asID:                     28270
IP address blocks:        179.191.128.0/19 maxlen: 19

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:25:c0:90:7c:4e:9d:7f:4f:2d:38:b2:65:7a:3d:46:2c:56:58:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:50 2024 GMT
            Not After : Oct 13 01:49:50 2025 GMT
        Subject: CN=D56D8E8008019E4E2E625B3036C9B6FA952D8243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:95:32:44:4f:66:71:b7:fd:36:3c:11:0c:
                    05:00:e4:a2:bc:49:84:69:88:a4:a8:04:e0:8b:e9:
                    81:2c:6c:45:6a:47:46:50:96:39:be:27:12:89:40:
                    10:7a:12:5a:c1:c2:7b:0d:ba:24:2f:de:9b:bc:19:
                    7b:51:90:a9:f9:96:2e:30:49:99:56:10:6d:d4:a0:
                    92:9f:07:b1:50:a0:96:f5:df:64:31:f6:20:b6:5f:
                    a2:11:74:84:3c:42:bd:4d:4b:09:d0:4e:e2:29:08:
                    ab:b8:f6:75:2f:5e:54:15:14:9f:54:fa:c3:a2:1d:
                    ae:b9:1e:5c:5e:05:56:80:45:e3:d3:a5:08:17:18:
                    5e:b4:f2:7d:f4:e3:ad:03:46:3d:b5:28:de:16:7b:
                    8b:1a:be:52:99:6b:53:e2:ae:a6:64:27:08:3d:57:
                    b5:46:44:7e:bf:59:12:11:86:fa:cd:87:13:c5:42:
                    bb:b5:75:97:fa:95:26:03:5e:c7:85:dc:5d:74:88:
                    ed:fd:34:65:85:ad:4b:2f:cc:b1:0a:a4:fc:85:92:
                    2c:2c:ba:73:67:bc:d2:53:92:ac:d8:a6:56:7d:92:
                    b6:2c:a7:90:b8:02:ae:3c:52:ce:f9:34:62:c6:21:
                    86:6b:e0:97:0b:fa:21:3e:2b:f2:79:80:b1:86:ec:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:8E:80:08:01:9E:4E:2E:62:5B:30:36:C9:B6:FA:95:2D:82:43
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:55:52:21:ee:78:24:52:df:92:6b:d3:d0:8b:cb:6a:f2:8d:
         5d:a5:04:a4:85:d3:2b:28:46:3a:2b:ad:d2:0a:e5:a2:40:9d:
         78:6d:db:fb:df:b8:8b:bf:42:f9:90:01:d3:9c:06:d8:a3:69:
         f9:bd:cc:fb:b7:07:52:69:32:13:9b:84:49:d5:28:a2:f1:db:
         0f:29:72:e7:1f:05:0b:c8:e1:9d:a8:dd:04:bc:4a:66:ec:50:
         8d:8d:96:67:5c:13:8b:ca:6c:4d:ca:e0:7c:c4:e2:76:cc:87:
         09:48:bb:8b:4b:13:5b:8c:67:b5:d4:bf:88:99:c1:f0:5a:f2:
         cf:6e:4f:60:dc:c9:3a:bb:27:52:fd:f7:e0:90:53:d9:45:bd:
         a5:72:29:f4:f8:be:a7:3d:a3:7e:92:37:0a:5b:58:5e:66:d2:
         10:c7:a8:a4:1f:b7:b8:1b:5b:9e:d3:4f:40:f7:47:32:a4:3d:
         ed:ad:53:14:26:3a:c6:bb:e1:f6:7b:e5:fa:66:34:e6:14:b1:
         d4:ed:0b:91:57:22:a1:8e:9b:7f:66:e5:30:14:fc:e9:0f:27:
         0c:0e:03:a6:14:bc:6a:35:cd:33:f6:e2:a6:53:2b:a8:9a:c2:
         6b:16:9a:25:41:68:34:01:34:16:f8:94:6c:dd:4d:ee:6d:1d:
         ea:09:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org