Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          mz7/IaRPRs3NK4ZE3NdspnPK76+59QQP52Hs3VFnBVU=
Subject key identifier:   D9:CF:9D:31:6D:DF:79:32:10:D4:02:93:21:49:8A:FE:21:F3:CE:54
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       53D3B25500B3843855F4708C4C83CFC851B33A9D
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:40 +0000
ROA not before:           Thu 19 Sep 2024 14:06:40 +0000
ROA not after:            Thu 18 Sep 2025 14:11:40 +0000
asID:                     262494
IP address blocks:        179.191.56.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d3:b2:55:00:b3:84:38:55:f4:70:8c:4c:83:cf:c8:51:b3:3a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:40 2024 GMT
            Not After : Sep 18 14:11:40 2025 GMT
        Subject: CN=D9CF9D316DDF793210D4029321498AFE21F3CE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:68:71:db:1f:1c:9c:3f:48:04:11:1c:26:
                    64:57:3f:ee:0f:cc:20:88:7a:59:29:74:91:e0:ce:
                    b3:3c:02:6a:31:da:5f:16:5d:e0:8a:38:75:0f:cb:
                    d6:41:49:e5:7f:aa:c0:6c:84:13:ee:41:1f:ae:ad:
                    c3:b4:27:2c:62:db:d6:f8:dd:0b:f6:fb:d0:bc:5e:
                    ab:da:1c:2d:6d:49:93:a6:75:7b:7d:e9:70:f5:75:
                    d1:f8:44:78:66:8e:4d:9f:38:19:e8:01:80:d5:4a:
                    81:1c:c1:4d:7b:86:ab:59:62:65:0e:e6:38:4f:5f:
                    74:f8:7b:20:fb:2b:2e:64:5c:4c:fc:2d:2c:30:0f:
                    96:3c:99:6f:c2:32:f1:45:0e:5b:f8:47:ad:ac:48:
                    f2:41:fe:55:a4:81:27:ed:ff:e0:9c:22:a7:9c:c2:
                    5d:12:63:92:f9:48:b0:78:89:67:fd:fd:25:81:2d:
                    63:20:3d:3c:c0:80:d2:c4:53:5d:29:7e:33:da:95:
                    73:1f:aa:95:e6:ed:6d:c3:1a:42:4e:ff:e7:c1:d9:
                    bd:e0:04:0d:bf:23:0b:6c:58:fd:76:c2:ca:40:b0:
                    d8:f3:44:25:50:36:05:ac:d8:fa:24:36:70:bb:3d:
                    9f:7f:3e:c8:08:08:b2:cc:4f:a1:2c:1d:d5:f3:7f:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CF:9D:31:6D:DF:79:32:10:D4:02:93:21:49:8A:FE:21:F3:CE:54
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:70:8c:a1:42:38:45:72:8f:9a:de:57:2e:43:9d:86:00:
         55:ba:7e:62:5e:f4:07:f6:6e:82:39:45:7e:a9:b1:f1:3b:05:
         2c:f1:77:2a:9c:96:ad:7a:18:f7:33:0b:f2:44:b8:96:38:bc:
         f0:7b:9f:22:59:90:8e:ce:66:26:e3:22:4b:b2:01:a3:e0:33:
         dd:c3:82:2e:77:d2:15:42:81:57:2d:df:b5:cd:cb:0d:96:bf:
         d4:ba:7e:f9:18:52:66:b5:8b:19:86:01:a3:2b:ed:0f:5b:cc:
         b2:97:0e:5e:6e:af:f1:6e:2d:f4:c4:9a:b3:d1:16:b2:a5:d5:
         ed:5c:b2:9a:f7:b9:1b:19:ac:f4:cf:44:84:2a:f8:75:20:89:
         56:26:85:2a:2f:c9:fc:f9:e1:96:cf:37:2d:82:2b:0b:ea:e4:
         c1:0b:61:13:5d:43:f4:6a:7e:39:df:53:43:e8:ca:c4:64:db:
         56:ec:1c:5f:5d:01:aa:b3:a0:b7:24:19:4f:91:7a:b0:fe:46:
         d6:b2:57:13:ad:3d:ec:cc:c2:60:c2:82:ca:89:0a:e5:35:7c:
         a0:fd:65:2e:f4:12:35:0a:0d:ab:75:37:da:0d:96:ac:29:30:
         8c:8c:dc:5f:1e:54:ad:e4:9e:cb:8f:52:4b:30:d2:6c:25:20:
         f5:d7:7e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org