Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38302e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e38302e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          xBz/TJMDb5YjiCLxViQQpj5n32H+8Kz1z5/e4duLhws=
Subject key identifier:   B3:C4:2D:95:0D:42:88:08:8A:A7:A1:3D:BC:C4:FC:8A:C6:75:05:04
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       20C682D951B25E430223F0D66975BA894B5F3D3E
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38302e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:57 +0000
ROA not before:           Mon 15 Jul 2024 15:13:57 +0000
ROA not after:            Mon 14 Jul 2025 15:18:57 +0000
asID:                     262988
IP address blocks:        179.125.80.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c6:82:d9:51:b2:5e:43:02:23:f0:d6:69:75:ba:89:4b:5f:3d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:57 2024 GMT
            Not After : Jul 14 15:18:57 2025 GMT
        Subject: CN=B3C42D950D4288088AA7A13DBCC4FC8AC6750504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:3f:e6:19:76:c6:6a:1c:13:1c:89:60:21:
                    67:a9:89:0a:43:ab:28:ed:7a:08:86:ce:4a:2d:58:
                    b5:66:42:a9:e1:9a:d4:92:e9:ca:50:27:d2:a0:a8:
                    45:d3:3f:e8:3a:fd:c3:16:b7:67:3e:3f:5e:36:d4:
                    3c:79:fe:cf:57:d3:e2:d7:76:92:90:40:3d:4c:ab:
                    39:4f:ce:9d:7e:2b:99:47:41:91:41:13:1b:2a:db:
                    02:6a:28:08:1a:f2:5c:61:23:26:72:d9:87:a8:76:
                    ae:08:81:c7:99:20:12:f4:6a:e7:2f:12:f6:a0:63:
                    b4:fb:15:e5:e9:ab:3b:65:80:a6:0b:6c:1d:4c:1b:
                    f9:d0:80:9b:d3:b9:1e:e3:4c:da:52:34:55:d2:96:
                    e6:88:10:27:e9:fe:7b:6d:69:54:00:62:5e:ac:30:
                    55:dc:4a:1a:f6:14:d7:0d:20:c0:e4:78:98:40:78:
                    be:c7:3e:93:62:5a:bb:b0:6d:26:e4:6f:16:49:b9:
                    1f:28:d6:08:b7:8a:98:40:69:5c:0f:95:b0:66:8d:
                    35:7f:90:22:2f:fd:4c:85:ed:be:37:21:bb:4e:96:
                    dd:1b:7e:50:61:cc:24:a0:43:fa:f8:e9:7a:55:72:
                    31:b0:1c:47:b4:f6:c3:59:8c:90:9b:9c:02:e7:09:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:2D:95:0D:42:88:08:8A:A7:A1:3D:BC:C4:FC:8A:C6:75:05:04
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38302e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:90:4b:5c:67:4c:e0:6f:db:e2:2b:64:2c:8c:2e:fb:17:
         be:97:0d:ea:7f:98:05:89:32:2e:3a:d8:dc:78:a4:f0:53:4b:
         94:19:2a:a9:bc:1e:04:ca:a2:cb:4c:58:1c:e3:29:59:bf:f2:
         63:25:a0:03:46:4d:19:78:c7:73:d8:55:f7:6b:99:b6:01:c5:
         d5:19:71:c6:e5:ac:70:34:86:45:e1:e4:ec:cf:39:2c:b9:dd:
         39:58:6e:68:c7:8f:f0:d7:15:eb:44:aa:34:26:0f:0e:00:bf:
         7b:5f:14:d0:a3:9b:ce:28:ec:6d:b4:6a:32:53:64:37:c1:85:
         50:e5:e7:7c:72:24:71:79:59:8e:52:84:82:5a:a7:9e:39:f9:
         2a:07:f6:8a:80:b2:ac:2e:da:44:13:6f:ca:7e:db:d3:f5:1d:
         5d:84:8b:a4:24:cb:aa:47:1e:19:fd:27:3a:95:cd:ac:f1:1b:
         3a:12:ad:30:32:91:40:9c:3e:14:9c:6e:84:93:0b:e4:c9:0e:
         bf:98:9c:e9:f3:9d:65:3b:38:85:13:19:d0:ed:93:02:ba:f2:
         9d:37:29:43:5c:61:59:6b:e8:c9:00:3e:56:25:da:fe:36:4c:
         4b:d6:79:14:bb:0e:5c:c7:fa:65:03:61:bb:f9:27:d6:4a:74:
         e3:d9:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:58 2024 by rpki-client on console-ams.rpki-client.org