Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa
File:                     3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (raw, json)
Hash identifier:          1WhDWdhgDD1XmxTEduJ5YzySeFInBzLbpHjZSrXL/0k=
Subject key identifier:   CC:53:9F:88:41:D1:FF:02:EE:FF:70:9B:8F:85:A8:60:40:13:2B:C0
Certificate issuer:       /CN=3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6
Certificate serial:       5BF3214D82FA4DA6146A718D1ED28A883CF25D20
Authority key identifier: 35:35:B9:22:B6:C4:8D:AC:53:AC:B0:1C:9B:A5:6D:1A:9B:E2:8A:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa
Signing time:             Thu 04 Apr 2024 22:03:17 +0000
ROA not before:           Thu 04 Apr 2024 21:58:17 +0000
ROA not after:            Thu 03 Apr 2025 22:03:17 +0000
asID:                     263567
IP address blocks:        179.109.32.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f3:21:4d:82:fa:4d:a6:14:6a:71:8d:1e:d2:8a:88:3c:f2:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6
        Validity
            Not Before: Apr  4 21:58:17 2024 GMT
            Not After : Apr  3 22:03:17 2025 GMT
        Subject: CN=CC539F8841D1FF02EEFF709B8F85A86040132BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:d1:4d:79:48:bc:fd:ac:b9:ff:bb:8c:d4:
                    5c:ea:4e:01:8f:3b:65:08:9c:1a:76:07:a7:a0:a7:
                    fd:98:99:5e:35:05:8b:db:52:99:48:11:f8:43:03:
                    3a:ad:9d:7f:ea:30:34:16:3c:f1:6a:b2:f5:ac:9d:
                    ca:ff:1a:d6:f7:9d:e3:05:c9:40:04:bb:65:7b:ae:
                    9a:b7:2b:29:35:4c:26:63:09:77:25:37:52:cb:1f:
                    9f:69:de:27:7a:ad:ae:e7:3d:ae:58:0a:97:cc:e8:
                    2b:09:71:fc:ed:2c:8e:9c:cb:dd:de:f0:a1:8f:15:
                    3e:b7:07:50:ea:3d:0e:bf:5f:19:d8:9d:93:e7:9d:
                    b6:43:f1:9f:cc:4e:b3:2c:9f:23:03:e4:ff:31:bc:
                    5e:d9:e1:02:29:84:8e:48:b1:8c:7b:93:46:7e:a7:
                    d3:99:e5:97:d3:c1:fc:76:83:25:73:71:ce:86:47:
                    b3:b1:b7:3b:a8:39:64:db:66:09:c1:66:9f:90:9a:
                    be:59:a1:fc:16:53:9b:ff:88:36:ce:8e:35:93:6c:
                    14:cb:99:14:ee:a0:ed:31:08:a1:24:ae:df:b1:ba:
                    e2:aa:7a:f4:85:9a:a6:71:a6:55:3b:d5:60:2b:ec:
                    c2:88:e3:00:01:4d:9d:13:21:f3:29:54:27:88:cf:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:9F:88:41:D1:FF:02:EE:FF:70:9B:8F:85:A8:60:40:13:2B:C0
            X509v3 Authority Key Identifier:
                keyid:35:35:B9:22:B6:C4:8D:AC:53:AC:B0:1C:9B:A5:6D:1A:9B:E2:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3535B922B6C48DAC53ACB01C9BA56D1A9BE28AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/1/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:7c:c4:5c:88:48:ba:52:4c:c9:39:79:56:e6:8d:c6:a6:
         62:63:1c:cb:da:32:27:22:d3:01:32:61:a0:34:0c:b0:5d:9e:
         f4:52:fb:97:5f:ef:ec:0e:a5:ec:ad:a0:3c:0c:44:99:c3:5d:
         f7:32:c8:ec:c7:85:7e:5f:da:3d:9f:bc:42:52:98:98:3e:77:
         23:4c:13:50:8e:13:81:cf:06:fc:bd:a1:56:66:8e:d4:ad:28:
         e8:9e:1f:18:5f:f5:be:5e:8d:e1:e0:13:c8:32:34:9b:5c:6e:
         02:0a:c6:76:f4:23:f6:c0:00:bc:c8:44:55:d9:47:df:49:cb:
         93:da:36:9e:00:ef:98:6d:12:e3:92:42:ba:40:aa:21:3a:f7:
         f2:32:3d:ec:1b:ef:45:46:9c:ab:99:0a:89:99:52:7b:f4:4f:
         e3:1d:93:d7:79:d7:64:54:b0:0e:e5:75:1c:3a:33:8a:8d:32:
         ad:f1:da:6b:dd:5e:d0:b4:9e:98:87:1e:4f:80:86:eb:16:40:
         96:ae:8f:44:36:cd:d3:11:75:bf:26:c6:73:1e:dc:0d:cd:2f:
         bc:cc:5a:3f:47:9a:dd:f6:ed:3a:1c:13:99:e8:cd:5f:77:38:
         1d:26:4a:e5:b4:d8:61:da:55:34:d0:70:1d:fa:70:68:67:0c:
         05:70:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:39 2024 by rpki-client on console-ams.rpki-client.org