Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36352e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e36352e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          aJRFiYFZuGM4fKR/TNwoS4F9cTERdBlj71P1N52edD8=
Subject key identifier:   76:36:28:DF:A5:2E:61:58:EF:96:90:F9:A4:E7:23:87:2C:2E:78:C5
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       7FFE43B87384352462D6D2AAA9CCCA8E185F34E9
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36352e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 17:38:39 +0000
ROA not before:           Mon 15 Jul 2024 17:33:39 +0000
ROA not after:            Mon 14 Jul 2025 17:38:39 +0000
asID:                     262988
IP address blocks:        179.125.65.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fe:43:b8:73:84:35:24:62:d6:d2:aa:a9:cc:ca:8e:18:5f:34:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 17:33:39 2024 GMT
            Not After : Jul 14 17:38:39 2025 GMT
        Subject: CN=763628DFA52E6158EF9690F9A4E723872C2E78C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:84:87:da:41:f7:2c:49:95:6c:02:85:6e:
                    ef:db:65:88:c3:13:bd:cf:69:2f:98:3f:38:19:cb:
                    94:62:f9:98:9f:ac:3d:12:10:da:98:5d:a5:3f:46:
                    23:e7:00:6a:27:94:35:0b:d8:29:13:a5:f4:21:16:
                    75:a2:23:5b:fb:89:3c:d2:2a:9a:39:fe:2f:41:6b:
                    38:e2:40:5b:2d:f8:d2:60:18:d1:bd:c9:58:cd:a7:
                    52:30:1d:14:1e:73:30:3f:ad:87:ed:d9:fc:bf:32:
                    71:7b:1e:3d:98:87:cf:6d:4b:b2:aa:6f:c4:46:5f:
                    d6:d9:2d:e1:6c:ac:68:8f:31:45:90:71:ac:71:11:
                    c0:f8:7e:af:19:c4:77:46:52:25:6a:0f:a8:6c:7a:
                    12:65:e8:13:f5:64:a4:a3:14:53:d7:ab:5d:c5:7b:
                    87:b1:4e:ab:a3:1e:bf:a5:04:1a:20:8b:3a:d7:e8:
                    6e:12:eb:b5:07:84:0e:8a:9f:b0:84:be:38:02:5f:
                    d1:5f:ab:cd:cd:b4:2e:53:07:c0:32:2b:54:5a:7a:
                    03:23:83:3a:8b:cb:23:d7:f0:d1:4f:b8:62:c1:16:
                    4a:39:1b:af:4b:b2:7b:ed:56:ff:3c:fc:66:05:a1:
                    93:46:d2:4d:93:2d:0c:6c:5d:4c:b8:6d:62:87:52:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:36:28:DF:A5:2E:61:58:EF:96:90:F9:A4:E7:23:87:2C:2E:78:C5
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36352e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:69:84:25:21:fa:ea:49:6d:f9:3d:a3:52:87:74:ee:a1:3d:
         1b:bc:d7:69:2f:03:68:a4:6f:b9:13:c9:87:cc:66:2c:43:77:
         51:84:a9:7b:42:a9:17:58:a5:8b:d3:4c:4a:a5:16:3d:a3:56:
         83:ea:d0:14:0d:f6:60:91:dd:7e:4c:60:92:3c:22:37:2f:bd:
         ef:d2:d9:89:17:f0:6e:4c:12:d1:76:4e:f3:e3:2f:a6:55:1c:
         99:45:d5:29:41:5d:bb:fe:a7:40:c3:84:00:ab:11:1a:02:cc:
         ec:95:4c:76:18:63:88:54:55:b7:18:eb:58:08:76:f2:e0:d2:
         71:dd:c4:11:d6:43:2f:02:12:7c:84:2d:6b:4f:c1:71:99:6e:
         6b:a0:3d:17:6c:4c:cd:e4:98:cf:a6:6d:73:04:c7:96:2b:3b:
         88:18:11:2e:1c:61:fe:02:ad:db:d3:26:96:cf:41:ea:89:69:
         49:cd:a0:17:05:0b:e3:8a:57:e6:74:36:5b:d8:b8:a4:15:e6:
         89:d2:61:78:c4:c9:65:04:ba:b7:24:46:a0:da:0f:88:46:7c:
         ef:30:3e:57:08:43:9f:fb:cc:03:8b:d9:a2:42:d4:42:5b:48:
         8b:60:74:4b:bb:49:90:03:7d:50:de:d3:c3:be:bf:a6:e9:3f:
         17:e8:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:58 2024 by rpki-client on console-ams.rpki-client.org