Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          sQ+2+JY2Dqva66Y8CSrqzbBRkq6bY4YV8FLz6vpXsaA=
Subject key identifier:   87:35:3C:DD:E6:D0:F2:80:9B:CC:0F:27:44:35:BB:15:9F:7E:BF:C1
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       2654B1EC93AB2868B79E37DDF344D78DF453E690
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:50 +0000
ROA not before:           Thu 19 Sep 2024 14:06:50 +0000
ROA not after:            Thu 18 Sep 2025 14:11:50 +0000
asID:                     262494
IP address blocks:        179.125.126.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:54:b1:ec:93:ab:28:68:b7:9e:37:dd:f3:44:d7:8d:f4:53:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:50 2024 GMT
            Not After : Sep 18 14:11:50 2025 GMT
        Subject: CN=87353CDDE6D0F2809BCC0F274435BB159F7EBFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:b4:b2:ac:f5:a7:e1:7e:a9:eb:0d:70:63:
                    51:ec:c5:97:2e:77:81:5a:8f:f4:e2:8c:19:d9:89:
                    57:2c:91:65:d6:fb:4f:69:2e:3e:a0:0a:74:49:4c:
                    5f:fb:a2:85:59:fc:5e:c1:a6:fc:6e:44:d7:d3:86:
                    91:58:c5:5b:0b:16:56:59:58:2b:d6:01:3c:40:a9:
                    24:00:94:db:61:5a:7c:d5:aa:12:ff:f4:5e:27:24:
                    8f:a0:02:70:7d:91:d1:66:e0:b3:6a:41:ae:4b:ac:
                    03:a1:ab:95:fa:35:11:c8:3d:94:b1:7d:31:af:04:
                    f8:13:46:f9:02:39:e4:7d:cb:fa:60:b3:e3:61:de:
                    f5:5a:7e:b7:ff:8b:fd:68:71:56:da:6a:85:39:e1:
                    63:18:cd:e9:cb:20:f3:4d:69:41:09:b9:6a:37:cf:
                    f5:e9:88:48:5e:06:98:26:d2:dc:27:7c:2d:41:3e:
                    fa:8c:2c:76:e9:40:48:bf:02:0f:35:ed:2e:5e:73:
                    e2:25:42:1b:48:65:8f:c4:55:82:b7:35:90:3f:8c:
                    b8:15:31:72:d2:01:94:8d:40:5c:8f:84:5f:fd:ed:
                    78:24:fe:fc:33:9c:38:48:94:fa:dd:4f:35:78:fd:
                    20:a7:e1:d8:09:74:07:e1:3d:8f:ec:fb:0b:ac:e3:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:3C:DD:E6:D0:F2:80:9B:CC:0F:27:44:35:BB:15:9F:7E:BF:C1
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:aa:00:14:c9:ba:e9:8e:37:8e:b2:a3:a5:8b:70:fd:b7:
         85:dd:ff:ed:a5:98:d9:63:e3:68:65:61:78:f0:ae:bf:77:e3:
         45:d4:05:23:54:a9:d0:55:5f:4b:93:08:a6:bf:99:e8:f2:00:
         91:39:e7:e0:81:da:74:67:02:d6:29:62:79:4c:f1:b3:a4:1b:
         fa:45:6e:f2:3b:01:61:fa:44:5a:0d:ac:b6:a7:99:aa:2b:26:
         4a:dc:2c:cd:12:46:8d:47:16:79:47:1e:3f:48:84:10:07:23:
         aa:ef:3c:ef:75:6b:53:b7:5c:c5:93:9a:f5:92:a8:63:61:9e:
         70:aa:86:1d:7c:65:ca:eb:4c:7c:43:65:e5:f1:22:a2:97:f0:
         aa:dd:6c:4e:ed:2e:ab:e6:50:7a:08:7c:71:a8:39:a8:30:a5:
         60:c5:b2:5c:01:51:da:15:24:a2:94:dc:b0:0d:68:12:be:30:
         99:77:a6:ea:90:f6:b5:2d:de:50:b7:d2:36:56:23:66:e5:f6:
         65:36:af:d5:ab:2c:80:f2:27:88:31:d0:8f:68:58:08:1e:21:
         af:7f:0a:53:3a:5b:69:f4:c9:ca:a7:a9:74:23:2e:c3:9b:f0:
         cd:0b:28:a2:31:50:b0:5b:c0:da:8b:70:14:03:3d:d6:32:c5:
         b9:01:39:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJlSx7JOrKGi3njfd80TXjfRT5pAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NTBaFw0yNTA5MTgxNDExNTBaMDMxMTAvBgNV
BAMTKDg3MzUzQ0RERTZEMEYyODA5QkNDMEYyNzQ0MzVCQjE1OUY3RUJGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFbSyrPWn4X6p6w1wY1HsxZcu
d4Faj/TijBnZiVcskWXW+09pLj6gCnRJTF/7ooVZ/F7BpvxuRNfThpFYxVsLFlZZ
WCvWATxAqSQAlNthWnzVqhL/9F4nJI+gAnB9kdFm4LNqQa5LrAOhq5X6NRHIPZSx
fTGvBPgTRvkCOeR9y/pgs+Nh3vVafrf/i/1ocVbaaoU54WMYzenLIPNNaUEJuWo3
z/XpiEheBpgm0twnfC1BPvqMLHbpQEi/Ag817S5ec+IlQhtIZY/EVYK3NZA/jLgV
MXLSAZSNQFyPhF/97Xgk/vwznDhIlPrdTzV4/SCn4dgJdAfhPY/s+wus455pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhzU83ebQ8oCbzA8nRDW7FZ9+v8EwHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzEzNzM5MmUzMTMyMzUyZTMxMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM0MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbN9fjANBgkqhkiG9w0BAQsFAAOCAQEAA/6q
ABTJuumON46yo6WLcP23hd3/7aWY2WPjaGVhePCuv3fjRdQFI1Sp0FVfS5MIpr+Z
6PIAkTnn4IHadGcC1ilieUzxs6Qb+kVu8jsBYfpEWg2stqeZqismStwszRJGjUcW
eUceP0iEEAcjqu8873VrU7dcxZOa9ZKoY2GecKqGHXxlyutMfENl5fEiopfwqt1s
Tu0uq+ZQegh8cag5qDClYMWyXAFR2hUkopTcsA1oEr4wmXem6pD2tS3eULfSNlYj
ZuX2ZTav1assgPIniDHQj2hYCB4hr38KUzpbafTJyqepdCMuw5vwzQsoojFQsFvA
2otwFAM91jLFuQE5Vw==
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org