Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e39342e302f32342d3234203d3e20323632393838.roa
File:                     3137392e3132352e39342e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          w/qTZfAWvSxrJdqtgkoht0gZdzsm0W8XBH4JG9drJBA=
Subject key identifier:   52:02:34:02:23:E8:07:4D:43:9D:2D:D9:8B:0A:82:5B:89:79:9B:63
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       75F076F085663EED17FD400489EA3EAD0A47857E
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e39342e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:52 +0000
ROA not before:           Mon 15 Jul 2024 15:13:52 +0000
ROA not after:            Mon 14 Jul 2025 15:18:52 +0000
asID:                     262988
IP address blocks:        179.125.94.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f0:76:f0:85:66:3e:ed:17:fd:40:04:89:ea:3e:ad:0a:47:85:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:52 2024 GMT
            Not After : Jul 14 15:18:52 2025 GMT
        Subject: CN=5202340223E8074D439D2DD98B0A825B89799B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:34:a6:8a:23:64:ca:10:a6:cc:8f:36:99:
                    27:f9:8f:cd:d8:fd:95:f2:e7:42:e2:d1:62:c7:3d:
                    ee:cb:3f:f0:3e:50:3f:ad:6d:1c:6a:f7:3a:49:a5:
                    79:1e:a6:62:f7:e4:6b:a9:3e:dd:43:97:ed:c9:c6:
                    5c:ef:f0:b6:85:03:61:8f:77:b7:1d:b2:70:44:c3:
                    c6:f7:c8:85:14:92:aa:5a:72:a6:40:a7:d2:3c:ea:
                    67:3c:d8:f0:db:e2:89:45:19:8e:8f:76:02:27:25:
                    e6:a1:c0:05:ed:ff:a6:9b:d6:62:62:b8:3d:93:80:
                    36:99:2b:f5:72:b7:c1:7b:2b:02:f1:c1:aa:fe:58:
                    33:e1:dc:cf:39:d7:6c:0a:17:e8:92:44:c1:fb:3c:
                    7b:39:54:38:ca:0d:2c:91:7d:05:1b:fd:55:f5:1d:
                    90:c4:e5:35:69:5e:04:0b:3d:4f:6b:ea:51:01:b7:
                    a3:5a:ff:32:85:78:40:fb:c1:98:0b:ce:80:1f:e1:
                    75:f8:3c:ce:da:e1:6c:97:44:c6:d2:7b:22:a3:13:
                    61:52:24:37:e4:29:9c:15:ae:c4:7c:8f:a8:9b:49:
                    7f:72:ab:88:de:be:fe:5e:19:f1:bc:90:51:90:57:
                    f4:06:0b:08:98:24:26:0b:6f:0c:df:de:61:c7:88:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:34:02:23:E8:07:4D:43:9D:2D:D9:8B:0A:82:5B:89:79:9B:63
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e39342e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:b5:73:98:37:ba:a0:81:2c:44:a5:74:18:0b:50:57:0d:
         d1:6a:0e:27:dd:7a:70:a9:f4:69:2a:c5:2c:cc:39:d5:03:61:
         7c:9b:b7:ba:26:3f:91:40:15:38:ff:93:33:62:d5:00:7b:8a:
         98:a8:ab:02:28:d1:df:d6:a9:48:ae:0e:fe:cf:98:a7:c0:ad:
         ee:c7:81:74:c4:9b:e2:83:b6:cc:4b:51:e5:33:30:52:ed:0e:
         a9:6a:28:03:f8:e3:21:1f:70:9c:50:90:c7:4e:44:69:50:8e:
         36:52:0b:da:0e:61:f3:f0:3b:01:81:9e:7f:4f:5f:91:ba:0b:
         5a:da:5c:27:51:c5:0f:e1:8c:d3:80:46:91:6d:31:9e:eb:03:
         8f:7d:3f:dd:a4:56:0b:3b:ed:be:51:0c:8b:8d:f0:cc:b0:f6:
         9c:26:b9:1a:46:b0:4d:a2:d5:ed:4c:86:7a:ce:4b:55:79:d8:
         d4:0e:21:26:72:f7:41:44:30:65:09:fe:32:54:53:bd:da:53:
         b8:71:ca:a1:43:aa:c4:3d:22:ef:22:d0:0d:d1:20:ba:e9:7d:
         86:92:86:a0:6e:cd:72:5a:94:40:8c:17:6e:48:b3:5a:3d:b5:
         c6:04:90:04:35:d4:34:a6:b5:30:2c:b2:4c:0d:5a:ee:d7:86:
         f0:37:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:58 2024 by rpki-client on console-ams.rpki-client.org