Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          vIElk0PYG673/Ol+DOD00NSJiBpz4Isx5R0KhO8GhZg=
Subject key identifier:   ED:94:D9:C8:C8:86:7C:45:1C:8A:01:D7:4C:82:0D:68:72:61:C0:C9
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       3D25181CC0501FA4B72D78CAEC324F13921E235A
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:54 +0000
ROA not before:           Thu 19 Sep 2024 14:06:54 +0000
ROA not after:            Thu 18 Sep 2025 14:11:54 +0000
asID:                     262494
IP address blocks:        179.191.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:25:18:1c:c0:50:1f:a4:b7:2d:78:ca:ec:32:4f:13:92:1e:23:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:54 2024 GMT
            Not After : Sep 18 14:11:54 2025 GMT
        Subject: CN=ED94D9C8C8867C451C8A01D74C820D687261C0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:fc:3c:61:e2:13:af:c4:83:f3:d1:53:59:
                    97:9f:4c:74:33:b6:18:22:53:85:9c:c8:19:94:f1:
                    20:63:68:e8:93:08:d6:61:da:04:6d:da:53:41:d6:
                    96:87:ed:d8:c9:e0:62:b8:5b:a9:f6:52:86:b7:96:
                    69:e2:11:c3:3c:fe:ba:1d:29:1d:90:c8:80:e8:ab:
                    57:c4:eb:62:54:05:24:a2:2d:4f:6c:05:9e:5a:95:
                    54:19:4b:9f:13:1c:d0:aa:d1:97:bc:31:62:bb:b3:
                    a5:5e:44:39:0d:7d:bd:b9:46:bd:dc:0e:31:18:37:
                    b3:d1:1f:fe:8b:33:e1:07:90:dd:fb:81:13:63:5f:
                    55:8d:19:cf:32:7f:ac:fd:47:03:cd:25:ee:91:62:
                    50:f2:c7:e4:16:fc:11:af:be:41:04:a3:ab:b5:d5:
                    7a:0f:e0:11:11:98:c3:9c:67:05:6d:df:c4:1b:41:
                    c6:31:94:de:90:8f:b1:63:23:f3:58:84:f6:05:c5:
                    56:64:9c:97:6f:04:77:ea:ed:f4:16:a7:75:9d:71:
                    47:00:67:3d:db:ba:8c:de:31:07:75:b5:70:fd:96:
                    54:82:0c:ce:68:ad:fb:08:80:aa:b3:dc:5e:dd:93:
                    ce:f5:7c:43:fe:0e:75:56:7a:32:b3:da:cc:50:60:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:94:D9:C8:C8:86:7C:45:1C:8A:01:D7:4C:82:0D:68:72:61:C0:C9
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3139312e36322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:26:ef:f1:87:93:d7:1e:5b:7e:c5:c5:2a:da:c6:fd:4f:
         5e:4a:27:1a:23:01:f8:9a:40:ef:1e:5c:2f:cf:d4:e3:f1:b6:
         db:03:4b:08:08:32:7b:fb:99:f6:9c:88:db:76:97:2d:43:65:
         40:53:8d:8e:09:b8:de:70:29:3c:1e:1b:4d:1e:78:52:e0:35:
         ab:cc:ac:c1:b9:f5:82:e2:15:ab:47:f6:e5:0c:6a:9a:8a:90:
         25:cb:4e:0f:c5:83:26:55:b8:fe:62:c9:6c:25:ac:41:92:22:
         63:97:1f:7c:d7:d8:3e:6d:0e:de:18:95:d0:c3:e8:aa:ac:38:
         19:2a:24:e9:02:2d:df:c0:0e:81:29:a0:bb:3d:99:af:08:7e:
         11:56:62:0d:76:2b:03:b0:0b:b1:56:7a:4e:d9:3e:bc:80:ed:
         9e:77:bb:d0:1c:d0:32:00:ac:d3:aa:83:ea:7d:20:d1:41:a1:
         45:cf:f7:0e:9f:45:a4:3b:12:17:09:de:31:48:69:a8:9c:ee:
         ff:ba:4b:49:f3:02:01:04:4a:f9:03:54:a4:4f:5d:ed:0f:ad:
         d3:e6:cf:54:35:ad:bf:70:6a:b9:ee:1a:f6:85:68:00:1f:ec:
         1f:1e:2e:7c:1b:c0:e6:8c:2f:19:3a:21:50:36:43:9e:07:f1:
         34:62:b0:67
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPSUYHMBQH6S3LXjK7DJPE5IeI1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NTRaFw0yNTA5MTgxNDExNTRaMDMxMTAvBgNV
BAMTKEVEOTREOUM4Qzg4NjdDNDUxQzhBMDFENzRDODIwRDY4NzI2MUMwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKcPw8YeITr8SD89FTWZefTHQz
thgiU4WcyBmU8SBjaOiTCNZh2gRt2lNB1paH7djJ4GK4W6n2Uoa3lmniEcM8/rod
KR2QyIDoq1fE62JUBSSiLU9sBZ5alVQZS58THNCq0Ze8MWK7s6VeRDkNfb25Rr3c
DjEYN7PRH/6LM+EHkN37gRNjX1WNGc8yf6z9RwPNJe6RYlDyx+QW/BGvvkEEo6u1
1XoP4BERmMOcZwVt38QbQcYxlN6Qj7FjI/NYhPYFxVZknJdvBHfq7fQWp3WdcUcA
Zz3buozeMQd1tXD9llSCDM5orfsIgKqz3F7dk871fEP+DnVWejKz2sxQYAtxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7ZTZyMiGfEUcigHXTIINaHJhwMkwHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzEzNzM5MmUzMTM5MzEyZTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzvz4wDQYJKoZIhvcNAQELBQADggEBABSMJu/x
h5PXHlt+xcUq2sb9T15KJxojAfiaQO8eXC/P1OPxttsDSwgIMnv7mfaciNt2ly1D
ZUBTjY4JuN5wKTweG00eeFLgNavMrMG59YLiFatH9uUMapqKkCXLTg/FgyZVuP5i
yWwlrEGSImOXH3zX2D5tDt4YldDD6KqsOBkqJOkCLd/ADoEpoLs9ma8IfhFWYg12
KwOwC7FWek7ZPryA7Z53u9Ac0DIArNOqg+p9INFBoUXP9w6fRaQ7EhcJ3jFIaaic
7v+6S0nzAgEESvkDVKRPXe0PrdPmz1Q1rb9warnuGvaFaAAf7B8eLnwbwOaMLxk6
IVA2Q54H8TRisGc=
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org