Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
File:                     3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          P8pcYE2nolO93sDIYa6zCAnz14+MpsQeN9tcVxTO28A=
Subject key identifier:   94:31:5D:19:F2:EA:FA:DA:78:5A:26:4E:E6:76:9B:C8:95:E6:9E:92
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       12EE70E0FCDF3F810B724334FDFE539E689AB256
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 14 Oct 2024 01:49:50 +0000
ROA not before:           Mon 14 Oct 2024 01:44:50 +0000
ROA not after:            Mon 13 Oct 2025 01:49:50 +0000
asID:                     271724
IP address blocks:        179.191.144.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ee:70:e0:fc:df:3f:81:0b:72:43:34:fd:fe:53:9e:68:9a:b2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:50 2024 GMT
            Not After : Oct 13 01:49:50 2025 GMT
        Subject: CN=94315D19F2EAFADA785A264EE6769BC895E69E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:18:f1:0b:ee:a8:9b:a8:cc:43:b7:00:60:
                    92:c2:8e:a9:3a:5b:39:de:8a:8f:b0:17:df:48:01:
                    be:33:e8:29:1c:f9:22:83:d1:9b:e0:91:0c:76:96:
                    f1:13:cd:24:bc:60:27:90:fe:ec:96:32:7d:9f:d1:
                    65:be:74:46:0c:45:87:0c:84:89:3f:48:82:ec:80:
                    18:77:5e:8e:46:ba:37:51:29:6b:52:5a:c2:d8:ef:
                    ed:70:21:f1:c9:9d:be:d9:57:62:d7:fb:10:78:ce:
                    41:37:35:31:52:8b:19:97:8b:60:23:9d:7c:37:4b:
                    66:4d:2f:2e:52:2c:89:88:3b:c2:09:bc:4c:43:2b:
                    ad:49:df:8d:2d:f5:c6:8c:3c:78:cd:8e:4c:c6:c2:
                    98:0b:f6:f4:8e:96:19:ab:ff:f0:5e:5f:e9:b8:e9:
                    ab:f4:1e:36:4f:6b:77:43:de:b2:ed:d9:63:ad:06:
                    d6:96:27:69:ef:c6:b8:4d:e9:ce:04:9e:72:c5:b6:
                    22:78:12:a6:41:a3:03:65:72:8c:0c:c3:20:cc:03:
                    3b:f0:76:2f:8e:6c:4c:b8:f5:fe:c9:68:da:c4:28:
                    e4:26:1f:bb:fb:8b:9a:69:f0:56:de:0f:ea:70:ed:
                    40:58:7c:3d:c3:3c:ff:d3:15:62:39:a5:ac:03:05:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:31:5D:19:F2:EA:FA:DA:78:5A:26:4E:E6:76:9B:C8:95:E6:9E:92
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:45:f1:02:56:38:32:9a:3b:e8:ad:85:49:0c:05:91:e2:e5:
         5a:40:d0:77:1d:bb:fc:2d:3c:a7:bc:58:77:91:ee:7d:21:24:
         88:af:8e:a7:1c:9f:31:aa:b0:04:31:ef:94:3b:18:9a:a1:2b:
         ed:28:28:2a:b9:ad:bb:5d:24:a4:29:8d:6e:ef:7b:d3:7d:c6:
         3c:a1:b3:c9:a7:73:33:c3:5a:d6:d3:a3:d4:5b:aa:ad:2f:32:
         be:1c:ea:87:2b:0a:e7:c7:d4:24:cd:38:6d:48:66:15:72:82:
         4b:97:85:40:a9:ea:eb:4d:cb:24:46:df:f7:aa:04:29:58:5c:
         00:eb:e2:38:9f:93:a1:e6:fa:47:93:f1:20:a3:39:72:95:2a:
         5c:fd:0f:4e:5f:c3:24:1c:ac:b6:8d:e4:03:29:0c:8b:d4:d7:
         89:5c:18:04:22:60:36:45:1b:a9:5e:61:ae:b8:56:17:86:92:
         f9:f7:37:cf:f2:ef:ed:ac:35:d3:ce:99:02:38:9e:f0:23:c8:
         a1:f9:df:c3:c5:39:64:8d:60:d5:d8:e1:c8:84:b2:71:53:57:
         ec:d5:d4:28:d1:99:ed:a7:36:f8:5c:30:a6:59:59:ce:c2:4d:
         97:e9:7a:6f:4a:20:ad:8f:45:6a:21:00:d6:1a:f6:8c:4b:17:
         99:83:b1:0a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEu5w4PzfP4ELckM0/f5TnmiaslYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NTBaFw0yNTEwMTMwMTQ5NTBaMDMxMTAvBgNV
BAMTKDk0MzE1RDE5RjJFQUZBREE3ODVBMjY0RUU2NzY5QkM4OTVFNjlFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisxjxC+6om6jMQ7cAYJLCjqk6
Wzneio+wF99IAb4z6Ckc+SKD0ZvgkQx2lvETzSS8YCeQ/uyWMn2f0WW+dEYMRYcM
hIk/SILsgBh3Xo5GujdRKWtSWsLY7+1wIfHJnb7ZV2LX+xB4zkE3NTFSixmXi2Aj
nXw3S2ZNLy5SLImIO8IJvExDK61J340t9caMPHjNjkzGwpgL9vSOlhmr//BeX+m4
6av0HjZPa3dD3rLt2WOtBtaWJ2nvxrhN6c4EnnLFtiJ4EqZBowNlcowMwyDMAzvw
di+ObEy49f7JaNrEKOQmH7v7i5pp8FbeD+pw7UBYfD3DPP/TFWI5pawDBbsHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlDFdGfLq+tp4WiZO5nabyJXmnpIwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLO/kDANBgkqhkiG9w0BAQsFAAOCAQEACkXx
AlY4Mpo76K2FSQwFkeLlWkDQdx27/C08p7xYd5HufSEkiK+OpxyfMaqwBDHvlDsY
mqEr7SgoKrmtu10kpCmNbu97033GPKGzyadzM8Na1tOj1FuqrS8yvhzqhysK58fU
JM04bUhmFXKCS5eFQKnq603LJEbf96oEKVhcAOviOJ+Toeb6R5PxIKM5cpUqXP0P
Tl/DJBysto3kAykMi9TXiVwYBCJgNkUbqV5hrrhWF4aS+fc3z/Lv7aw1086ZAjie
8CPIofnfw8U5ZI1g1djhyISycVNX7NXUKNGZ7ac2+FwwpllZzsJNl+l6b0ogrY9F
aiEA1hr2jEsXmYOxCg==
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org