Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
File:                     3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa (raw, json)
Hash identifier:          x2lHtY2dXDp4pO1b5Bu4FyLOsInl1xblFBsGJjusFl4=
Subject key identifier:   0D:45:38:B0:90:6A:FD:29:54:0C:CD:9A:CB:B2:2B:5D:96:E0:60:17
Certificate issuer:       /CN=7F2A99A171605802A009376BC3AD8E1CA8B57C2C
Certificate serial:       7BD4AEC09BD6748B88B140DB8EE755BF346D7D58
Authority key identifier: 7F:2A:99:A1:71:60:58:02:A0:09:37:6B:C3:AD:8E:1C:A8:B5:7C:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
Signing time:             Thu 04 Apr 2024 03:03:06 +0000
ROA not before:           Thu 04 Apr 2024 02:58:06 +0000
ROA not after:            Thu 03 Apr 2025 03:03:06 +0000
asID:                     271192
IP address blocks:        179.42.152.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d4:ae:c0:9b:d6:74:8b:88:b1:40:db:8e:e7:55:bf:34:6d:7d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2A99A171605802A009376BC3AD8E1CA8B57C2C
        Validity
            Not Before: Apr  4 02:58:06 2024 GMT
            Not After : Apr  3 03:03:06 2025 GMT
        Subject: CN=0D4538B0906AFD29540CCD9ACBB22B5D96E06017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3d:89:a7:03:f7:37:6d:68:f3:d3:ba:77:7d:
                    2d:d7:92:e8:6e:bf:76:c6:46:fd:3a:fc:3d:84:1b:
                    12:eb:c1:37:e5:2e:42:55:fd:c4:6c:2d:1c:37:e4:
                    3e:d9:d7:e0:cd:93:be:93:b9:11:12:9b:f0:31:f0:
                    05:b0:00:4a:16:d3:aa:a9:df:1e:a8:25:9c:74:b1:
                    c3:17:69:a6:88:be:be:ff:d7:96:df:bb:19:7f:fd:
                    4a:29:9d:98:b6:ea:83:b4:65:32:de:1f:a8:e4:dd:
                    e8:f1:60:40:12:c7:3b:d8:f1:b5:39:e1:c3:51:ad:
                    f9:a0:28:36:18:e9:95:4c:f3:08:7a:0f:0e:07:98:
                    ff:e4:f2:60:ad:d0:de:bc:f7:93:e5:43:7a:44:7a:
                    2f:df:06:0d:ca:ec:a7:63:d6:cc:d2:e0:c0:72:42:
                    63:4f:ce:5b:29:81:32:41:f7:b3:b0:bd:11:ae:39:
                    64:8c:19:6e:f7:97:77:7b:00:e9:c2:3f:1d:32:2a:
                    6f:8f:dd:51:e2:2b:78:df:e2:ee:55:b8:7e:eb:d2:
                    f3:fa:47:65:95:96:ae:16:da:c0:b3:3e:52:52:50:
                    2b:03:8f:67:45:d8:c5:29:2b:a2:11:92:36:a2:48:
                    f6:38:0e:c0:cf:90:2a:61:26:1a:99:bf:a9:1f:bf:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:45:38:B0:90:6A:FD:29:54:0C:CD:9A:CB:B2:2B:5D:96:E0:60:17
            X509v3 Authority Key Identifier:
                keyid:7F:2A:99:A1:71:60:58:02:A0:09:37:6B:C3:AD:8E:1C:A8:B5:7C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:9a:1c:f2:e8:01:cd:c5:63:7d:5d:d7:93:7e:d0:92:18:b1:
         1d:4c:00:68:d3:12:6c:05:ca:f1:17:1c:45:64:f5:74:14:47:
         3a:d4:b9:17:2e:33:75:22:49:96:03:cf:d7:8b:b1:97:ff:46:
         e6:de:b2:93:a2:5d:43:99:7c:61:38:90:97:0e:2e:a1:34:81:
         d5:6c:57:14:ce:01:69:30:ea:f4:47:ba:27:1b:80:cc:38:63:
         ba:ae:b6:5b:24:a2:a2:04:d5:62:43:27:89:53:83:4f:dd:2b:
         75:62:a4:58:4d:da:7b:24:f6:92:57:ec:e6:75:e0:bf:2b:d6:
         2c:ee:5d:a7:9b:45:c9:2d:c2:9e:95:db:74:ba:38:3a:56:c9:
         b7:20:2c:9e:6d:63:01:c9:73:42:51:01:41:ba:bd:bc:ec:ed:
         80:9d:c6:4a:a0:2d:38:c0:b5:53:ab:88:3b:35:ab:bd:75:54:
         0d:84:36:cb:19:e7:6a:12:7b:98:f3:14:ab:25:54:7a:f1:06:
         98:8e:c8:ac:0d:fd:4e:e9:66:f8:e9:98:84:46:3c:f4:3e:60:
         4d:05:36:81:d9:47:09:6e:1b:a0:d0:04:c8:5b:89:14:d1:b7:
         82:8d:ee:0e:b0:e4:19:56:e4:94:9c:21:67:2b:39:05:98:3f:
         82:14:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 02:21:58 2024 by rpki-client on console-ams.rpki-client.org