Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39342e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e39342e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          R8fcnjRoxtbG4xJcq7uI5wtQvURzJ6uwGRpg/GP4ssE=
Subject key identifier:   BF:40:B7:A3:08:89:D2:35:3B:FF:87:B9:F2:06:F0:09:F0:F8:6C:DC
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       4A9B2D42861AB13FF9E4E403BA58CC36A8875D0B
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39342e302f32332d3233203d3e20323633343133.roa
Signing time:             Thu 04 Apr 2024 10:21:41 +0000
ROA not before:           Thu 04 Apr 2024 10:16:41 +0000
ROA not after:            Thu 03 Apr 2025 10:21:41 +0000
asID:                     263413
IP address blocks:        179.97.94.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9b:2d:42:86:1a:b1:3f:f9:e4:e4:03:ba:58:cc:36:a8:87:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Apr  4 10:16:41 2024 GMT
            Not After : Apr  3 10:21:41 2025 GMT
        Subject: CN=BF40B7A30889D2353BFF87B9F206F009F0F86CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:77:2a:c8:a1:77:64:19:e1:3e:9b:69:a5:
                    eb:5b:f4:96:48:23:e9:b4:f3:74:50:f5:c7:55:e6:
                    29:e5:8c:27:d5:0c:40:1b:b3:ab:4c:b4:9b:c1:8c:
                    11:04:33:2c:85:00:40:ed:f2:af:dd:3a:7e:24:69:
                    30:ba:15:df:81:9a:51:dd:5f:a5:be:e1:f6:bd:c1:
                    15:87:6b:c1:c5:7f:0b:d4:bf:0c:20:77:50:df:d6:
                    eb:cc:c6:b4:eb:b5:7f:46:f7:e4:9e:93:55:bd:d1:
                    69:be:05:bc:93:58:4b:35:d7:34:7d:7c:3d:30:29:
                    65:78:90:7c:c2:28:f8:1f:dd:0f:3e:2b:43:27:20:
                    54:21:5a:73:4e:99:11:ea:bf:dc:f4:52:2d:ad:c9:
                    80:06:b5:b1:e6:07:57:ed:6d:65:68:9c:a4:67:c1:
                    0d:4d:29:10:6e:ae:2a:ad:8e:5f:05:28:b3:c5:34:
                    cd:53:dc:3b:cc:96:63:99:7e:13:51:08:2c:99:14:
                    d3:40:45:35:9a:60:e0:0c:9d:df:95:a8:ea:8f:0b:
                    5c:36:d5:b4:e7:da:f4:d9:38:04:fd:ac:28:00:f4:
                    ac:c8:52:fb:8d:b5:93:e9:61:b5:77:80:c7:0a:40:
                    32:02:9b:43:56:44:71:c7:fa:7c:32:b0:f1:ad:f7:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:B7:A3:08:89:D2:35:3B:FF:87:B9:F2:06:F0:09:F0:F8:6C:DC
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39342e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:28:4f:55:91:df:93:17:6c:a8:2f:3c:d5:e0:ed:74:66:
         48:49:d0:d9:b9:d6:a5:d5:29:e2:e9:d8:8d:bc:70:0c:15:dd:
         67:f6:ec:4e:06:3f:af:9f:af:86:8f:a9:fe:58:71:fd:55:cb:
         ef:39:92:d6:4e:be:75:b5:be:44:ae:13:69:93:93:ce:4d:73:
         5b:e1:0a:20:43:0b:bc:60:45:1e:73:90:2a:4b:fa:67:7f:50:
         a3:dc:21:82:1b:e2:ec:41:7f:a8:d6:b9:66:5e:f2:31:93:d9:
         30:98:7c:e7:3a:f4:bb:41:a8:9b:ed:c1:c5:3a:c7:d3:05:56:
         1b:23:3d:ad:2b:7d:0c:fd:fd:4a:17:20:85:97:bb:bf:f6:c5:
         8f:65:8c:9a:2d:67:be:38:10:e1:29:e1:09:a0:b1:09:e9:5b:
         25:0c:ce:8f:dc:ea:a3:9c:88:80:31:2d:b0:00:81:f5:fa:58:
         7d:7e:f4:ba:1a:94:c8:af:10:4d:92:54:75:5a:13:31:b8:27:
         57:63:fb:f0:8b:2b:39:71:c7:0c:b9:71:94:48:7d:d4:a1:9b:
         7f:00:7b:ee:bd:f3:44:7c:21:2c:be:59:57:85:f0:eb:87:cb:
         d9:01:66:94:f8:2b:3e:3a:3e:0e:32:aa:56:6f:a0:7e:4e:b1:
         0d:5d:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 20:56:09 2024 by rpki-client on console-fra.rpki-client.org