Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137382e302f32332d3233203d3e203631363035.roa
File:                     3137392e36332e3137382e302f32332d3233203d3e203631363035.roa (raw, json)
Hash identifier:          Rmx53m9FzqRyyHHFIVwi2yYNTVfAwmszgnJ1T4/SDn0=
Subject key identifier:   15:BD:70:8E:D7:65:71:1B:CF:65:27:1B:0D:A2:92:BE:9C:9C:2F:32
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       21C84D801D059758DE65C9272A617B2BED5F3171
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137382e302f32332d3233203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:36 +0000
ROA not before:           Wed 23 Oct 2024 18:50:36 +0000
ROA not after:            Wed 22 Oct 2025 18:55:36 +0000
asID:                     61605
IP address blocks:        179.63.178.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c8:4d:80:1d:05:97:58:de:65:c9:27:2a:61:7b:2b:ed:5f:31:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:36 2024 GMT
            Not After : Oct 22 18:55:36 2025 GMT
        Subject: CN=15BD708ED765711BCF65271B0DA292BE9C9C2F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:b0:4d:5d:49:5d:17:39:68:88:fd:83:cf:
                    60:b2:6e:d9:8b:bc:a6:04:aa:88:b8:5c:c8:89:a1:
                    95:b5:61:c2:ce:f7:4b:c9:06:51:c2:f8:e6:0c:ee:
                    51:44:6c:c8:c6:8e:68:c6:13:c9:dd:74:d0:ed:87:
                    bc:2d:fa:a5:ab:34:40:c5:b2:2f:dc:c4:e0:d5:fc:
                    97:98:38:32:59:34:eb:66:94:a6:84:d1:8e:b0:9e:
                    0a:f4:86:5a:42:8f:a1:32:b8:4d:8c:d7:24:1e:d1:
                    50:32:fe:1b:cb:79:bb:7b:1f:86:19:e0:f3:dd:32:
                    70:a5:e9:68:38:9e:bb:8e:47:a5:9e:a5:20:ee:e8:
                    96:d5:f1:60:ad:c5:e3:dd:4a:5f:0f:d4:e1:d4:7f:
                    39:38:ba:33:46:18:ba:16:9a:17:5f:25:1c:f3:9c:
                    42:64:fa:87:d5:d7:6c:34:fe:02:84:8e:1e:05:6a:
                    41:68:dd:69:8f:be:46:19:0d:f0:e0:f4:09:42:43:
                    d5:26:35:bf:42:96:a2:2d:f5:fc:f7:3d:21:5d:3d:
                    d2:04:fe:2e:c8:7e:c5:52:69:32:b9:7a:0e:1c:23:
                    48:99:2f:1a:5b:ba:45:42:aa:42:ab:61:5e:83:b8:
                    eb:b8:43:53:7a:a4:65:e1:b3:2e:c0:11:99:a4:ab:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:70:8E:D7:65:71:1B:CF:65:27:1B:0D:A2:92:BE:9C:9C:2F:32
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137382e302f32332d3233203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:8e:be:64:45:be:4d:7e:8b:00:59:f7:e9:5c:a2:c8:d3:e3:
         58:c8:6f:7c:9c:70:fd:1b:f0:1e:80:35:69:6d:88:9d:c7:0c:
         77:26:4a:ae:5a:9e:c0:7e:b2:45:91:60:de:62:5a:7e:19:de:
         b0:17:00:0e:54:e8:c2:84:a4:38:61:70:2a:76:9d:d7:56:dd:
         0b:c7:67:5f:a5:73:1e:94:87:72:e4:03:fc:38:0f:7c:8d:61:
         36:73:8e:0c:09:a2:92:13:5d:61:59:85:5b:28:e5:09:76:eb:
         7d:8d:35:7b:54:30:05:20:67:e0:ab:72:7f:b8:28:7d:eb:57:
         0c:d6:74:f4:cf:dd:31:94:56:b7:fa:b4:b8:ea:6c:75:8a:91:
         a7:02:ca:c0:e3:72:37:f4:7c:f7:2d:4c:19:de:ec:e1:2c:9c:
         73:5c:39:d8:51:ea:9a:4b:b4:cf:48:48:d6:5b:cb:ef:da:d3:
         2f:d0:6c:39:66:0c:ba:5f:02:11:e6:b7:54:5f:b9:f3:2c:3f:
         49:54:57:a6:67:67:7c:5e:ea:73:b0:d7:12:bb:37:c1:0b:94:
         82:4f:f1:fd:0f:fb:31:c9:89:71:a9:5a:05:b1:52:15:ec:0e:
         5d:48:a4:3d:e3:ac:bb:b3:9d:28:c3:7c:b9:c1:3a:63:77:19:
         aa:c5:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 02:25:50 2024 by rpki-client on console-fra.rpki-client.org