Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa
File:                     3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          SLqbdpVt5BUq2mh965iyW9hG6iKqNF+UJzwVdFWCjUQ=
Subject key identifier:   3C:FD:ED:76:64:1B:2E:BC:E5:48:DA:FD:F3:A6:7F:62:17:0D:CF:FB
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       75AEFE0071CB5DDF6267E4E95AB1CA5ED08A5030
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:34 +0000
ROA not before:           Thu 04 Apr 2024 16:07:34 +0000
ROA not after:            Thu 03 Apr 2025 16:12:34 +0000
asID:                     262847
IP address blocks:        179.125.32.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ae:fe:00:71:cb:5d:df:62:67:e4:e9:5a:b1:ca:5e:d0:8a:50:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:34 2024 GMT
            Not After : Apr  3 16:12:34 2025 GMT
        Subject: CN=3CFDED76641B2EBCE548DAFDF3A67F62170DCFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:65:01:76:0a:94:ab:26:45:64:41:3c:dd:
                    57:b1:be:ba:02:bb:74:a3:6a:20:73:99:05:61:bf:
                    4b:1c:ef:a6:03:bc:9a:9d:de:fd:a4:47:28:66:2a:
                    77:1b:54:52:ee:1b:7a:5a:4a:62:1d:8a:3f:87:b7:
                    ca:45:c1:9e:55:5c:3a:5c:81:b8:1c:a9:56:da:1d:
                    14:2b:5b:11:16:35:ef:5e:e9:05:39:89:4e:33:f1:
                    0c:31:47:79:3a:74:cd:01:4a:3e:17:98:50:87:a8:
                    dd:19:02:13:e6:4f:15:a3:72:c2:60:cd:0e:08:4e:
                    b5:e9:d8:1e:fd:03:a8:5b:6b:9b:9f:24:81:b3:c2:
                    d2:2c:da:64:39:49:be:ed:56:69:0c:7b:6c:0e:d5:
                    5b:61:d7:f3:4a:c6:79:58:6d:65:36:55:68:94:7c:
                    b3:ad:72:7a:6a:eb:5c:22:e8:05:1c:44:a4:83:86:
                    95:ed:93:20:6f:ae:28:4d:0f:e5:89:9e:f0:f9:15:
                    44:7b:c9:5f:7a:97:39:a2:8c:13:9c:a7:f4:2d:06:
                    55:e4:c7:9b:fe:7d:a0:4f:0d:f3:9f:b1:e2:d2:69:
                    af:40:77:b2:d2:16:41:20:9f:48:d7:de:0a:c1:0a:
                    5c:02:8c:4a:d5:0d:d5:97:72:20:85:ea:fc:5a:2d:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:ED:76:64:1B:2E:BC:E5:48:DA:FD:F3:A6:7F:62:17:0D:CF:FB
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:db:a4:bb:92:ab:c4:d7:f0:c6:1c:cc:d5:ea:d5:e9:81:
         fd:b8:50:ee:a0:e4:55:e9:e5:22:a8:12:93:9c:70:7f:15:70:
         5a:65:50:9b:48:30:16:77:35:ce:0e:8d:9c:8a:0b:81:0e:bb:
         2e:ac:4a:2b:4b:c8:63:64:3d:82:49:e5:df:12:a6:c7:23:c3:
         77:b3:46:d2:cf:b1:82:82:21:db:9f:83:81:46:61:1a:3b:a3:
         15:d1:2e:a6:d5:5f:74:e4:b0:5c:39:0c:b9:67:9b:cc:a3:a4:
         4d:7a:90:4e:5c:2a:12:bf:9b:ca:46:08:1e:b1:f0:3e:17:af:
         de:28:f0:3d:e6:ea:63:ec:25:6e:c2:14:1d:c2:e4:34:9c:0e:
         fe:31:e6:0f:c6:78:71:f3:a4:5b:4a:76:fd:fe:37:a1:67:fd:
         c0:19:f8:58:9b:6d:bf:02:ae:f2:51:a9:a7:bd:e6:cf:69:2f:
         94:34:78:31:67:14:69:a8:4d:46:21:79:ec:86:64:cd:8f:4c:
         9a:8d:a8:f1:c3:5b:37:bc:ca:e0:e5:6d:dd:14:42:7d:26:70:
         02:dd:f0:36:07:92:23:3b:8e:ee:b0:1d:07:0d:ba:e3:18:52:
         f8:1c:d5:92:b1:5e:2e:97:8a:9c:eb:8d:49:f2:3c:6d:e2:b5:
         02:93:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org