Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137382e302f32342d3234203d3e203631363035.roa
File:                     3137392e36332e3137382e302f32342d3234203d3e203631363035.roa (raw, json)
Hash identifier:          lCtN7CCowca+86Nt/4g2IhvFTPV/XNsro40MtJ9c9Bs=
Subject key identifier:   06:C4:76:5A:F0:9F:11:D9:68:3E:A5:19:20:B2:70:AD:DB:C2:84:EE
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       605CDD146B10DE71AF2D4B4A7CAFE6F18098DDEC
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137382e302f32342d3234203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:38 +0000
ROA not before:           Wed 23 Oct 2024 18:50:38 +0000
ROA not after:            Wed 22 Oct 2025 18:55:38 +0000
asID:                     61605
IP address blocks:        179.63.178.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5c:dd:14:6b:10:de:71:af:2d:4b:4a:7c:af:e6:f1:80:98:dd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:38 2024 GMT
            Not After : Oct 22 18:55:38 2025 GMT
        Subject: CN=06C4765AF09F11D9683EA51920B270ADDBC284EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:12:76:de:63:58:dc:e8:b4:5e:29:4d:bf:
                    3e:e1:76:2d:9c:59:5d:d1:e9:87:06:e7:d8:a0:b8:
                    36:93:57:e8:64:ea:d3:3e:d7:91:c4:c2:be:9d:a2:
                    47:74:d0:b0:62:30:8f:8d:bf:db:fd:d6:00:8c:08:
                    3b:a7:c7:f5:85:75:f4:ed:cf:35:bd:e1:f2:1a:bd:
                    a9:e7:39:06:72:d8:b4:99:00:dd:46:0e:b4:6d:b9:
                    19:cc:dc:d3:9a:35:ac:be:cd:a5:39:a9:30:9e:d8:
                    93:68:6b:5a:64:f3:97:c8:cb:d7:77:7a:ba:6b:aa:
                    66:f1:3f:77:13:7d:84:87:a8:32:e4:71:a8:d9:fc:
                    79:67:94:09:ef:3c:a5:8c:94:44:2a:d2:ed:1a:a0:
                    b3:27:22:ce:9c:34:3e:a3:e1:52:ee:d0:5d:7b:57:
                    0c:c7:74:62:8b:dd:34:02:18:97:ae:0e:79:43:98:
                    84:15:e8:9d:35:11:60:ab:c0:a5:9a:f9:82:5b:61:
                    b0:83:39:c1:aa:a0:a5:42:09:25:68:27:d8:f6:33:
                    6f:0c:d9:cb:f4:bc:e1:66:ab:28:e1:8a:54:e6:ca:
                    21:76:2d:fd:7b:4d:9b:37:a5:bb:cb:94:4c:00:70:
                    fb:0e:7d:24:6b:99:79:ff:ac:d1:11:17:a0:94:10:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:76:5A:F0:9F:11:D9:68:3E:A5:19:20:B2:70:AD:DB:C2:84:EE
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137382e302f32342d3234203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e1:65:53:e7:97:ea:be:61:f5:fe:2a:03:b2:70:70:1d:7b:
         bc:77:06:8b:d4:6e:c1:92:95:c3:0b:74:3c:1e:f5:2e:0b:73:
         ca:5b:42:84:1b:82:84:a1:7f:29:72:9a:48:90:52:15:13:c1:
         b1:f1:a9:4b:4e:87:4e:53:bd:86:e9:87:b0:b2:78:5d:ca:31:
         d1:85:70:96:ca:a7:6b:69:6c:0e:f8:2e:db:03:3c:96:63:81:
         65:ad:67:6f:02:70:bc:21:fa:35:f9:94:7f:e7:20:81:3d:ad:
         32:54:d3:30:d3:91:11:68:b6:ad:d0:bf:73:15:56:f3:b3:9f:
         bd:6b:ae:31:1a:94:70:06:10:28:b0:76:48:4d:57:33:5b:e0:
         16:f6:d6:f2:ab:7f:0e:ec:c7:e8:2b:6c:37:fe:99:ed:30:56:
         04:d5:d1:8c:5c:27:a6:46:85:95:60:eb:3f:54:83:fd:31:3a:
         dc:15:3c:56:ec:87:3d:00:f3:24:09:d7:29:ca:e7:70:03:27:
         45:e7:0d:ef:f9:24:c8:5f:c7:a1:04:67:f7:9d:7b:ae:db:99:
         f9:de:ef:40:2f:a5:d0:d3:2b:a5:ef:7e:0d:98:11:90:01:17:
         1d:bc:07:e3:9a:72:13:76:56:bc:35:9e:e0:91:a0:a2:eb:7a:
         b5:1f:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 01:38:48 2024 by rpki-client on console-ams.rpki-client.org