Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f32322d3232203d3e20323632393838.roa
File:                     3137392e3132352e36342e302f32322d3232203d3e20323632393838.roa (raw, json)
Hash identifier:          B5PoalF9qjNbbuUBT+rtYJi5JyA5NFierkHY1luUh0g=
Subject key identifier:   95:DC:23:2A:0C:9D:B6:CA:34:8F:36:ED:30:A2:6D:5F:80:0B:46:BA
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       0DBF8784FE3202C918F766580812AD651F43335E
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f32322d3232203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 17:37:33 +0000
ROA not before:           Mon 15 Jul 2024 17:32:33 +0000
ROA not after:            Mon 14 Jul 2025 17:37:33 +0000
asID:                     262988
IP address blocks:        179.125.64.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bf:87:84:fe:32:02:c9:18:f7:66:58:08:12:ad:65:1f:43:33:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 17:32:33 2024 GMT
            Not After : Jul 14 17:37:33 2025 GMT
        Subject: CN=95DC232A0C9DB6CA348F36ED30A26D5F800B46BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:88:dd:b8:b0:7b:0b:5b:19:cd:7a:da:f5:
                    ea:51:13:50:df:ac:05:c8:48:ce:f8:2b:35:4f:f8:
                    35:cb:7c:12:64:76:37:d3:55:d1:bc:70:4d:23:41:
                    e3:79:73:c1:27:e1:84:e5:92:7f:52:2d:b7:36:7c:
                    ac:0f:98:07:e4:8a:27:d4:5c:56:6a:48:92:78:5c:
                    d6:4d:74:47:d5:6b:21:fe:3b:5a:85:f9:d9:be:a4:
                    b1:fc:a5:72:ea:10:46:96:7b:42:ff:1b:35:10:c6:
                    7d:fa:fc:1b:d8:48:ad:07:a9:c7:6f:7a:56:3b:9f:
                    8b:37:45:df:e6:5a:95:f9:04:f7:19:03:f1:41:0a:
                    c6:a7:bc:89:e0:dc:84:ed:ab:1e:33:f2:bd:9b:58:
                    28:55:55:ca:54:06:8d:5e:27:7d:94:99:d4:5b:c4:
                    7c:30:bc:59:d2:50:f5:5c:2d:85:33:b3:16:63:69:
                    32:d3:96:12:20:e2:27:e6:65:b4:92:3f:f6:5b:2a:
                    d9:f6:54:4a:64:80:99:8b:eb:00:4c:34:d9:ce:2b:
                    6c:d2:9b:11:5f:64:9a:2d:3f:08:f1:12:a7:a3:33:
                    36:30:16:c9:25:17:b4:62:2b:1c:a5:5e:31:f1:6c:
                    23:e6:f1:be:3b:d2:c3:b4:f0:de:8b:ae:3c:40:1c:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DC:23:2A:0C:9D:B6:CA:34:8F:36:ED:30:A2:6D:5F:80:0B:46:BA
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f32322d3232203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:4c:1d:ff:3f:4c:9b:93:d2:69:19:47:ce:06:a9:bc:25:a4:
         70:5f:28:ec:54:62:4f:84:71:b7:d3:ca:ff:79:8c:85:e1:53:
         a4:e6:1f:5a:d1:7d:68:75:3f:35:fe:5e:ba:31:00:b7:fa:ef:
         d4:6f:e0:50:77:18:76:24:e3:4c:a5:44:40:d1:39:a8:d1:da:
         1e:4e:39:ab:e7:db:04:fe:1a:f8:92:dd:e6:78:5f:f3:24:4d:
         e8:d9:83:7c:f9:67:84:4b:c4:10:0c:8e:15:9f:b6:a0:0e:76:
         25:20:0d:78:5b:99:f2:2f:aa:b7:5a:79:e8:a3:4a:4c:aa:2b:
         36:d3:57:83:11:bf:c3:98:43:10:6f:19:eb:01:54:ad:07:1c:
         8e:9d:d8:16:6e:dc:8b:72:94:ce:f7:c4:08:c9:b5:c3:ab:61:
         5e:6d:30:35:39:85:ac:5b:5d:29:0c:43:46:26:0c:af:40:65:
         c8:e6:4e:82:a5:ab:af:52:35:35:8d:d5:48:39:f5:08:17:d9:
         7d:6f:e3:44:5e:74:f1:11:6b:99:4c:6f:af:52:a1:83:d8:5d:
         39:14:c9:61:11:6f:71:10:3a:38:11:fb:8d:19:53:01:4e:93:
         6f:29:2d:a3:3c:a9:56:89:3e:26:5f:35:1f:86:ab:b5:84:be:
         eb:54:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:58 2024 by rpki-client on console-ams.rpki-client.org