Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          GbKjXaaFTx72lqn6GMx5DEFMwdDYH+JHqiR/LP9319U=
Subject key identifier:   25:38:58:5D:0A:20:32:81:0A:E4:83:25:E5:C5:5B:73:DC:F2:77:23
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       6D3E503C24306E79C2B669267868481DBE6E7981
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:44 +0000
ROA not before:           Thu 19 Sep 2024 14:06:44 +0000
ROA not after:            Thu 18 Sep 2025 14:11:44 +0000
asID:                     262494
IP address blocks:        179.125.124.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3e:50:3c:24:30:6e:79:c2:b6:69:26:78:68:48:1d:be:6e:79:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:44 2024 GMT
            Not After : Sep 18 14:11:44 2025 GMT
        Subject: CN=2538585D0A2032810AE48325E5C55B73DCF27723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:63:1d:d9:44:18:15:df:3e:24:9f:89:35:1f:
                    56:93:84:fc:7d:65:9a:e1:42:ff:c7:ba:c7:5a:e8:
                    f3:cb:de:54:34:bf:62:7c:a4:eb:3b:04:aa:8f:e1:
                    c6:7f:a9:25:fd:67:ac:fc:5e:29:5d:7a:c6:7b:d3:
                    09:02:28:14:e0:ad:be:35:50:9c:3e:87:fe:cb:96:
                    93:85:fd:9c:ac:92:82:1c:98:92:58:1c:01:9a:be:
                    da:30:a8:9d:45:c2:39:e2:24:d6:5d:8f:95:35:8f:
                    92:7f:d2:52:19:7c:87:69:4d:f6:43:b7:ac:fa:51:
                    7b:df:8d:30:8e:ef:14:d3:e8:b1:f6:45:cc:28:c4:
                    8a:4c:63:90:61:d3:f7:96:8b:72:15:a8:95:6a:07:
                    4b:11:58:60:d2:d6:81:40:48:b5:26:ef:33:c2:7f:
                    d3:7d:f7:4f:17:16:10:af:12:2e:a8:90:b0:1d:b5:
                    80:28:0c:79:cd:40:48:0e:43:c4:b7:fe:e1:34:8c:
                    3a:dd:05:f0:59:1d:97:12:d1:33:59:76:e7:79:a0:
                    67:31:ec:93:3b:8f:c0:75:3c:34:24:ea:b1:80:56:
                    6d:53:c2:f9:11:6c:41:98:62:be:c5:32:db:52:ea:
                    c4:52:18:98:39:74:8f:5b:46:f4:df:3f:cd:c0:95:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:38:58:5D:0A:20:32:81:0A:E4:83:25:E5:C5:5B:73:DC:F2:77:23
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:fc:fb:d6:20:d2:47:fd:af:ba:67:25:fb:fa:a9:80:13:
         c3:db:8f:ce:f1:d8:a4:16:c2:da:07:26:53:91:73:9a:36:59:
         d9:48:3f:52:c6:32:12:25:78:41:ae:20:69:70:64:6c:da:3e:
         83:47:37:00:2f:08:82:b7:5b:e2:ef:0e:07:b3:ff:56:1d:a1:
         a4:63:56:48:76:ca:6f:2a:26:2b:07:a3:af:d3:07:39:9a:58:
         4b:96:32:d1:76:bb:f2:75:6c:cf:2a:32:91:e3:3a:58:44:a0:
         8d:3d:a9:f3:ae:b0:75:e0:e6:94:40:de:9e:f9:8a:d4:cf:6e:
         96:b5:57:30:25:39:42:63:6a:4e:83:ba:00:5b:06:d6:ec:94:
         95:7a:96:e1:be:ae:a4:70:e8:81:08:f0:09:46:45:ec:d0:ee:
         9f:c6:a7:91:7f:39:59:e5:11:c2:c9:de:18:47:3e:e6:f5:64:
         8e:bc:ac:db:66:53:e9:d6:3a:5f:78:29:8c:b6:17:24:cc:13:
         f1:cb:51:de:13:7b:3f:d0:fb:c0:1c:c2:f2:13:31:e5:c6:8e:
         2a:62:d4:de:c2:a8:61:b8:0c:be:9a:e6:2c:e4:4a:31:53:7f:
         c7:22:ff:42:aa:05:fc:c7:ab:db:7c:c5:ba:cd:7e:fe:3f:73:
         a7:d2:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org