Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa
File:                     3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          nxu1pmaRBlGYeUH5/wU3kshGG9cR/OM4/OKU7SnWEG0=
Subject key identifier:   AE:1B:0C:C5:7A:81:46:62:EC:CE:DE:CE:A7:85:B1:3D:95:18:FB:FE
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       7423241203D2BE0AC1B82685B8028EBB6897A48B
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:50 +0000
ROA not before:           Mon 15 Jul 2024 15:13:50 +0000
ROA not after:            Mon 14 Jul 2025 15:18:50 +0000
asID:                     262988
IP address blocks:        179.125.72.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:23:24:12:03:d2:be:0a:c1:b8:26:85:b8:02:8e:bb:68:97:a4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:50 2024 GMT
            Not After : Jul 14 15:18:50 2025 GMT
        Subject: CN=AE1B0CC57A814662ECCEDECEA785B13D9518FBFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:05:19:75:cf:f0:94:82:b4:60:26:2e:dc:
                    c4:8c:25:bb:9b:12:5b:99:77:b9:01:ab:73:4d:28:
                    04:e8:42:03:e8:7a:e3:e5:04:1b:2f:cc:93:df:61:
                    53:97:fd:c2:eb:ad:47:ce:d0:48:e1:7d:3f:2c:5f:
                    ed:e7:82:66:bb:b8:78:6b:d9:02:04:f7:69:55:34:
                    dd:5f:5a:4a:05:cc:04:4c:96:b1:29:70:36:fb:a6:
                    0e:f8:4e:df:81:cf:1b:79:c7:12:21:48:e9:94:58:
                    5c:14:a5:e8:9f:d3:0f:ea:8b:4d:0e:63:af:c3:de:
                    3a:f0:5d:4b:ae:61:ac:b6:10:67:df:71:05:78:b4:
                    68:5a:b1:bc:06:01:20:5c:77:4c:21:64:f0:59:9e:
                    5c:d7:3c:53:6b:92:48:95:b6:cc:d7:9c:ac:a1:b1:
                    ea:7d:14:ce:8c:20:d8:3e:a4:c6:60:4e:5c:0d:52:
                    ec:34:b6:e3:f9:7a:d0:bd:fb:2a:d8:c9:b5:4e:c4:
                    ab:73:a4:d1:00:d1:2f:8f:5a:77:75:ef:7d:2b:20:
                    d1:dc:42:7a:94:6b:c7:16:d3:37:5c:4a:f0:4c:34:
                    67:d9:69:ad:b4:c1:fa:4d:32:53:f0:a3:fa:0e:c1:
                    d4:06:c2:b3:be:c2:a8:19:00:41:dc:91:54:5d:5c:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1B:0C:C5:7A:81:46:62:EC:CE:DE:CE:A7:85:B1:3D:95:18:FB:FE
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e37322e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:27:8b:0e:a5:47:26:3d:52:3e:e9:e2:97:5f:8f:d5:55:e8:
         6c:f2:5c:04:4a:35:b1:c1:e3:27:f7:2a:c9:0c:20:c8:24:00:
         47:78:56:ab:5d:87:06:5b:6d:02:33:c5:f8:5d:c9:75:e9:e0:
         14:09:68:c8:ac:5e:ae:81:b0:27:68:91:0f:1d:ad:48:d7:08:
         12:c2:13:ff:17:b0:44:0f:42:f2:6d:6f:2d:e5:e4:47:e8:c1:
         b6:45:b9:40:0d:51:a9:0b:97:83:93:96:89:cf:38:12:de:7f:
         c6:cb:10:d4:02:1c:7f:e0:7f:8c:f3:d2:94:11:ac:89:40:66:
         f7:03:a4:f4:5f:76:bd:e9:26:89:03:21:0a:07:a2:b7:0d:6a:
         72:8c:0d:2e:8b:5d:57:1b:a1:dc:b8:45:88:c1:eb:0b:32:1b:
         33:bc:ab:9c:13:ef:27:61:b2:2e:20:b6:de:af:66:89:6a:d2:
         0a:39:b9:df:e3:b9:da:dc:72:81:9e:ed:40:a6:28:4a:11:78:
         7a:71:69:ce:b4:c6:00:98:68:54:b2:18:18:45:22:a7:f3:3d:
         cb:98:42:2e:f0:f6:64:95:0c:f3:d0:1a:78:d2:bb:e0:bb:5f:
         16:e0:c0:61:70:98:a4:23:fe:d3:7e:be:19:26:ca:42:39:ce:
         4d:3e:a8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:37:42 2024 by rpki-client on console-fra.rpki-client.org