Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137392e302f32342d3234203d3e203532353339.roa
File:                     3137392e3130362e3137392e302f32342d3234203d3e203532353339.roa (raw, json)
Hash identifier:          fQFIOBB8H55MyW9O9rmQWpFzmQ/2B4/O1jwSeIB+DjY=
Subject key identifier:   24:93:D6:17:5B:62:7B:D0:EC:52:18:D4:65:E1:81:AB:9B:02:5D:64
Certificate issuer:       /CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
Certificate serial:       4B2E40BD06924077C7E2D0578166A40BEBB2913D
Authority key identifier: B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137392e302f32342d3234203d3e203532353339.roa
Signing time:             Fri 02 Aug 2024 17:55:57 +0000
ROA not before:           Fri 02 Aug 2024 17:50:57 +0000
ROA not after:            Fri 01 Aug 2025 17:55:57 +0000
asID:                     52539
IP address blocks:        179.106.179.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2e:40:bd:06:92:40:77:c7:e2:d0:57:81:66:a4:0b:eb:b2:91:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
        Validity
            Not Before: Aug  2 17:50:57 2024 GMT
            Not After : Aug  1 17:55:57 2025 GMT
        Subject: CN=2493D6175B627BD0EC5218D465E181AB9B025D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:0c:02:fd:74:64:c9:57:53:b1:e2:69:56:
                    cc:9c:90:2b:5c:f3:c4:eb:88:e3:e1:48:34:b8:97:
                    cf:9c:54:75:e0:d2:37:a9:e3:3a:c3:53:bb:2b:05:
                    83:1c:05:41:c8:71:8d:83:0e:8e:1b:3c:84:6b:2b:
                    5b:cd:55:b9:8c:5f:49:30:49:90:49:d1:fc:56:6e:
                    39:f4:1e:52:eb:5c:13:68:12:73:04:d2:31:26:c0:
                    f4:33:dc:dc:0a:71:6c:f0:ec:28:3a:26:af:f8:34:
                    45:17:e7:93:fc:55:d1:83:b2:43:3c:81:50:94:21:
                    69:d9:91:ee:72:c9:8e:de:aa:c7:20:c1:d2:e6:4b:
                    e2:b3:b0:6a:37:a7:40:81:3a:33:6e:90:4d:9e:e7:
                    9e:d8:71:2e:46:27:49:f2:66:35:73:f5:2b:b0:47:
                    cc:90:db:11:d9:75:4f:18:d6:bb:bf:0d:b9:4d:e8:
                    6a:4d:ea:28:9e:b7:3a:c2:e8:2a:ac:4d:ba:b6:16:
                    97:4d:50:b2:1c:09:62:dc:eb:5b:b2:0c:00:1f:aa:
                    02:61:e8:48:f5:79:fd:87:0e:64:bd:89:88:58:17:
                    81:b9:d7:ab:a4:89:45:e0:28:df:a3:5b:a3:1f:b7:
                    6a:33:5d:6e:2c:23:6f:dc:43:3e:e8:ac:a7:61:65:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:D6:17:5B:62:7B:D0:EC:52:18:D4:65:E1:81:AB:9B:02:5D:64
            X509v3 Authority Key Identifier:
                keyid:B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137392e302f32342d3234203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:df:05:d7:5e:23:a0:29:9b:e0:0b:fc:50:c8:41:81:f0:fd:
         e7:29:67:cf:fc:81:19:6c:15:18:d3:b9:f5:c2:42:18:55:7a:
         c3:18:4a:67:5a:bd:c5:a7:9a:9d:3c:d7:3c:37:59:2f:48:a0:
         a2:3d:7b:90:04:af:fb:c3:9d:c5:c2:f8:32:fc:6e:8e:dc:69:
         86:e3:ae:b6:05:ac:2a:98:2e:6a:ce:ad:26:78:7f:5b:65:58:
         7c:aa:ca:69:7c:7d:65:97:ec:be:f5:43:16:5b:b2:e7:47:2b:
         0b:5b:e8:4c:ec:94:df:3e:49:56:e7:bc:73:75:0c:9a:9e:5e:
         3e:8b:00:cc:b0:d8:84:34:11:02:2f:06:9f:98:f1:f4:da:c3:
         90:60:e3:5f:1c:63:9d:8f:43:1e:18:ed:ce:27:57:8b:8b:9e:
         09:cc:1a:df:52:65:6c:50:47:df:50:2d:e0:05:b8:f7:07:10:
         4d:81:a7:cc:44:13:55:8a:0e:a9:ab:d2:c2:24:e7:1e:25:2a:
         8d:23:b8:a4:3a:58:a1:41:a4:8f:19:da:7c:fc:d5:5d:41:fe:
         0b:67:1e:c2:69:da:38:7b:bc:4c:6b:6a:7d:74:c3:33:c7:6c:
         99:78:6c:52:c0:a5:2d:11:17:52:da:28:a7:d4:f5:53:da:46:
         8b:ff:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 13:37:57 2024 by rpki-client on console-fra.rpki-client.org