Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          BQpCd15k8nb9mZYDf+AdMT7EA2Xt2VJGhD+1czdoEZY=
Subject key identifier:   BA:E3:0F:61:9C:95:CB:E0:9B:01:B2:91:C4:59:DC:BC:1A:BA:EB:48
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       56F143C3C90F0A7B7CF3BFB04DB07CFAA4FF6F5E
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:45 +0000
ROA not before:           Thu 19 Sep 2024 14:06:45 +0000
ROA not after:            Thu 18 Sep 2025 14:11:45 +0000
asID:                     262494
IP address blocks:        179.191.58.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f1:43:c3:c9:0f:0a:7b:7c:f3:bf:b0:4d:b0:7c:fa:a4:ff:6f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:45 2024 GMT
            Not After : Sep 18 14:11:45 2025 GMT
        Subject: CN=BAE30F619C95CBE09B01B291C459DCBC1ABAEB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:29:62:35:e5:4e:d3:a5:09:55:60:b6:ae:
                    db:67:b2:e5:dc:7b:63:55:37:b1:bd:0c:9b:c1:52:
                    59:2d:45:35:f3:a6:37:8d:b8:a5:4a:31:ff:5b:b7:
                    cb:7e:05:97:68:95:b2:54:d1:c6:39:2c:ef:9a:93:
                    1b:87:4a:a0:f5:3a:99:2b:2e:a0:9d:7a:24:a9:4a:
                    e0:2c:c1:fc:52:02:c7:79:f6:4e:61:50:fe:13:a7:
                    a7:ce:d5:61:32:02:97:56:7c:67:4f:92:5a:3c:c5:
                    5e:17:2e:8d:03:ec:3c:b6:eb:43:fa:61:0a:73:70:
                    6d:d6:28:3a:ea:36:a6:20:fc:2d:ca:84:1b:cb:8d:
                    77:a1:58:e2:9a:96:3c:5c:ea:63:29:21:9d:5b:da:
                    9b:cb:e1:67:28:0e:ff:d7:ae:ce:cd:f4:55:b9:53:
                    60:cc:06:62:ff:33:fd:80:c5:1b:3e:f8:f4:74:2e:
                    f8:bd:11:8c:5b:f7:4a:3b:ee:d9:1d:b2:4f:b1:fd:
                    ed:dc:8c:5c:ab:8d:b9:95:9f:19:dd:78:c1:12:be:
                    2b:70:6e:02:f1:b7:23:66:7b:ce:4f:00:10:05:30:
                    46:3b:82:cd:10:e0:30:7b:52:c6:0f:74:91:17:0c:
                    62:37:0a:36:75:a7:4b:da:af:c1:bb:c9:d3:37:d5:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E3:0F:61:9C:95:CB:E0:9B:01:B2:91:C4:59:DC:BC:1A:BA:EB:48
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e35382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:be:31:c9:c1:04:81:0e:49:1e:8f:41:03:a3:4d:fb:35:ca:
         a2:09:ac:52:ec:30:99:9a:c9:67:a1:9c:92:a7:aa:2a:77:8a:
         a9:a5:13:97:2a:17:e6:54:e1:2a:35:83:81:f4:47:17:64:bf:
         19:1f:6d:42:23:d8:c2:86:41:b7:fa:49:e4:88:7f:c8:5a:4b:
         ee:29:5b:bd:38:16:87:60:fd:20:b2:c8:ed:05:39:de:c5:92:
         ed:81:6c:11:df:6a:f8:8e:81:d7:62:59:50:24:54:8b:11:b7:
         79:a1:a8:ea:9f:8e:ef:79:a9:c9:a0:2c:98:7c:12:c4:e2:85:
         82:54:56:3d:03:af:57:c0:67:bc:53:f3:56:a7:23:e9:93:3b:
         96:d7:66:f9:e5:3a:88:2d:58:06:c2:f5:80:b1:7b:e9:08:c5:
         92:28:a9:f6:8a:cb:7e:0f:bd:b6:b4:46:20:d8:9f:a8:c8:39:
         fa:83:c4:03:0f:06:f9:ae:09:a6:4f:11:49:4a:85:6b:91:c5:
         10:d8:57:cc:1c:ed:25:c2:01:f7:23:be:44:a8:d7:5a:c5:31:
         32:d9:5a:c7:fd:66:a1:c3:ef:f8:8a:f4:7d:4d:ad:50:b9:57:
         7e:5e:30:5b:81:6a:4a:06:bd:e9:f1:f2:1d:03:7a:44:72:8e:
         f4:92:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org