Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          vVjTqS1c/dvUx1YSfCiljwfbYwfDKVjdftj2b4gKMtw=
Subject key identifier:   13:3A:53:E1:0C:3A:F2:B6:EA:B5:A4:EF:F2:83:46:59:8B:FC:19:DE
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       138D67EE53A5A8042131D1BE9D0089E977C53152
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:58 +0000
ROA not before:           Mon 15 Jul 2024 15:13:58 +0000
ROA not after:            Mon 14 Jul 2025 15:18:58 +0000
asID:                     262988
IP address blocks:        179.125.84.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8d:67:ee:53:a5:a8:04:21:31:d1:be:9d:00:89:e9:77:c5:31:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:58 2024 GMT
            Not After : Jul 14 15:18:58 2025 GMT
        Subject: CN=133A53E10C3AF2B6EAB5A4EFF28346598BFC19DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:8d:9a:ad:0e:1f:47:40:db:06:c4:d2:36:
                    09:01:81:e6:03:3e:15:cb:0e:7f:d4:0a:85:fa:88:
                    de:31:3e:12:41:23:b3:a1:5b:d5:77:8d:69:32:3f:
                    8e:94:7e:84:f0:d0:dd:07:fd:f8:44:d8:75:13:6e:
                    43:7e:c8:62:5b:3c:41:3f:ed:7c:5f:32:36:6f:8e:
                    a1:4c:e7:4a:ff:d1:10:10:51:85:b0:00:7e:48:b3:
                    86:74:42:37:08:17:74:2c:f3:13:33:b7:10:29:c2:
                    8c:8c:67:a6:55:3a:53:19:e5:c8:36:f0:56:00:b3:
                    f8:a2:c2:39:53:bf:d0:30:86:8c:5a:40:fe:0f:db:
                    83:40:79:9a:d2:df:98:04:f2:b3:42:7b:57:5e:ad:
                    e0:42:1c:f7:c0:bb:ea:9e:32:e1:bb:d3:3a:76:69:
                    b7:e7:7d:06:47:2b:5e:8a:72:4b:be:4a:b9:d8:4d:
                    1d:5f:d1:33:dc:22:a0:7c:f4:73:56:82:44:9c:68:
                    3b:28:b8:db:ed:7f:63:f4:7e:46:45:25:19:62:54:
                    3b:fa:93:e1:f7:5e:68:27:2a:93:13:5c:69:d7:6a:
                    55:05:1b:ed:62:2d:5c:08:20:ef:34:1a:ec:a1:06:
                    8f:fe:26:a2:c1:35:73:d6:9b:5a:f8:0f:6f:e3:31:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3A:53:E1:0C:3A:F2:B6:EA:B5:A4:EF:F2:83:46:59:8B:FC:19:DE
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e38342e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:dc:81:08:96:9b:6f:19:93:82:36:55:ff:d0:19:b6:a0:73:
         b1:8c:fb:37:14:25:5c:af:89:46:c7:1c:5a:a3:60:4e:da:f4:
         b5:0f:c5:df:32:e2:be:52:ff:ed:f7:20:4f:a4:c5:21:ee:f5:
         d9:03:98:d0:7f:2b:2b:76:ec:b2:36:e8:b8:67:2c:ef:eb:eb:
         32:71:67:4b:d5:15:aa:b9:3b:77:30:d2:a5:6e:35:15:c8:1d:
         3a:7c:89:88:fe:91:3f:50:5b:b9:a9:a8:3d:09:2b:b9:25:67:
         85:72:d8:23:3e:23:8a:6d:da:cb:47:f5:15:98:46:41:07:2f:
         6f:2f:9c:40:55:c1:82:dd:36:69:09:19:d9:0b:b0:a2:53:30:
         94:f9:75:66:e3:af:e9:80:61:51:ac:f3:b0:db:f6:b3:a9:63:
         78:a7:e3:16:9d:f3:5d:79:de:e4:ed:87:73:9b:f2:bb:79:b5:
         a3:9e:08:05:bd:fa:9f:51:4b:02:9d:c5:76:fb:1e:ae:84:f5:
         6b:99:86:be:bc:f8:95:e1:55:de:a7:45:28:ad:bb:d8:88:d7:
         0b:8a:ef:b4:6d:fe:34:2b:7a:eb:b6:81:c6:93:8b:d9:3c:57:
         63:f9:ee:23:48:c5:9c:a1:18:30:39:bd:91:da:94:fb:27:a9:
         1c:60:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:58 2024 by rpki-client on console-ams.rpki-client.org