Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36382e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e36382e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          LEtNeHDIHZVggezGbKAHAyycztNuyURPkkmkCN3aLLU=
Subject key identifier:   24:CF:C5:44:DB:47:2D:9D:69:AF:E3:DF:20:41:32:54:F7:61:3D:9C
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       281EB61B502E6D2067F8EC38C94DCFCBA53F49D9
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36382e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:42 +0000
ROA not before:           Mon 15 Jul 2024 15:13:42 +0000
ROA not after:            Mon 14 Jul 2025 15:18:42 +0000
asID:                     262988
IP address blocks:        179.125.68.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1e:b6:1b:50:2e:6d:20:67:f8:ec:38:c9:4d:cf:cb:a5:3f:49:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:42 2024 GMT
            Not After : Jul 14 15:18:42 2025 GMT
        Subject: CN=24CFC544DB472D9D69AFE3DF20413254F7613D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:3f:34:cc:49:9c:14:92:12:6f:cd:97:fd:
                    1a:e9:ba:bd:d6:07:4b:0b:89:f9:6e:0f:ef:49:c2:
                    2e:e6:37:ea:ad:3a:88:6b:d5:42:46:23:17:43:bb:
                    65:47:03:38:8f:62:16:bb:fb:69:73:5c:56:8c:e7:
                    1a:e2:f2:d8:b3:9f:90:2b:34:1f:33:22:d9:28:45:
                    61:80:85:97:4e:33:6e:46:dd:ef:2e:38:fc:d8:5a:
                    7e:d6:a5:d0:bc:ff:3a:c2:59:af:4b:a5:74:f1:71:
                    fb:39:90:d3:2f:55:09:e2:c3:c3:a8:82:e7:c4:f3:
                    be:c3:e3:7f:a6:6e:0f:0b:64:17:04:2d:e5:e7:d6:
                    8f:b4:b8:a8:23:7c:08:84:e4:fc:82:12:34:fd:c1:
                    86:21:b8:c5:be:63:a4:15:52:0b:58:e3:cd:ac:b7:
                    9c:75:db:a7:a4:fe:6f:8a:1b:6e:8c:79:6b:f5:0f:
                    95:c5:03:80:5a:2b:87:a2:e8:79:33:76:d9:3d:71:
                    cc:56:7e:e3:0f:75:4b:3c:43:05:3e:82:96:40:c9:
                    1b:1b:c4:4c:a7:77:6b:6a:0f:ac:40:3f:9b:fe:b1:
                    ae:a5:8f:e0:3a:6e:be:46:74:4c:21:ff:6b:41:7d:
                    bb:bf:79:95:9e:1c:9f:d3:d8:cb:0c:3a:2f:0a:54:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CF:C5:44:DB:47:2D:9D:69:AF:E3:DF:20:41:32:54:F7:61:3D:9C
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36382e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:20:29:66:c6:b5:2d:69:16:ca:c6:2a:d3:f0:36:ac:c8:
         8c:90:d6:3d:f5:ee:b3:7e:c1:90:1b:87:18:51:9a:06:94:15:
         74:d6:39:9a:cf:94:42:96:e7:e2:c1:a1:d0:45:d1:0b:69:f3:
         b1:ec:5c:ee:a3:e5:83:3a:c1:bd:7b:f9:e9:73:9a:3e:a0:e1:
         28:77:a4:3d:38:d9:f2:2b:bf:3e:91:e3:a9:7b:96:68:a1:57:
         e9:88:24:05:a3:42:0d:40:c3:a8:e5:96:85:88:84:c3:75:c9:
         6d:6b:33:01:59:05:5f:99:69:c4:27:4a:69:84:cd:6e:a1:3e:
         d8:49:0e:2b:0d:43:19:93:b1:06:d9:ab:d3:d1:b7:63:3f:7c:
         6d:d4:9b:35:42:e4:72:c6:e1:c4:12:f3:e1:1a:11:45:bb:8a:
         cc:1f:de:b6:88:3c:e5:d8:62:8c:a1:d1:c0:d2:04:b5:c4:df:
         83:7d:56:0e:77:72:39:95:ba:cd:d6:77:32:2f:3d:76:f7:a0:
         ba:9c:e1:08:58:cc:b9:59:8b:90:83:2a:50:ae:f6:a3:be:b6:
         60:b1:9f:cb:f3:e2:38:52:a0:68:14:7b:ee:89:de:34:d0:b1:
         d6:da:10:5a:36:72:f8:54:d6:64:3b:d5:78:bb:4e:7c:dd:a8:
         21:fd:20:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:37:42 2024 by rpki-client on console-fra.rpki-client.org