Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/3137392e34392e3139322e302f32322d3332203d3e20323731323738.roa
File:                     3137392e34392e3139322e302f32322d3332203d3e20323731323738.roa (raw, json)
Hash identifier:          5F3p2sbSrAa1jr045trruRaVzBPqNFMYnsl+S4x6gx4=
Subject key identifier:   25:BC:CF:E3:27:1C:B7:87:D4:13:F2:32:06:85:DD:18:FD:5B:F8:4F
Certificate issuer:       /CN=8FC31F58BEB1E238931CFFC5A4F31D8652726366
Certificate serial:       58F76954849C8C7AB6790C6D7D21F49C0F5BFA98
Authority key identifier: 8F:C3:1F:58:BE:B1:E2:38:93:1C:FF:C5:A4:F3:1D:86:52:72:63:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FC31F58BEB1E238931CFFC5A4F31D8652726366.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/3137392e34392e3139322e302f32322d3332203d3e20323731323738.roa
Signing time:             Sun 11 Aug 2024 03:40:18 +0000
ROA not before:           Sun 11 Aug 2024 03:35:18 +0000
ROA not after:            Sun 10 Aug 2025 03:40:18 +0000
asID:                     271278
IP address blocks:        179.49.192.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f7:69:54:84:9c:8c:7a:b6:79:0c:6d:7d:21:f4:9c:0f:5b:fa:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC31F58BEB1E238931CFFC5A4F31D8652726366
        Validity
            Not Before: Aug 11 03:35:18 2024 GMT
            Not After : Aug 10 03:40:18 2025 GMT
        Subject: CN=25BCCFE3271CB787D413F2320685DD18FD5BF84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:76:16:4c:a3:53:bf:79:00:ef:0b:3d:0d:
                    4a:bb:b5:93:77:e1:f5:a2:47:8d:43:6b:fa:e2:a7:
                    2e:c6:8d:61:e1:17:54:a1:d7:61:a5:5e:5d:04:e3:
                    d3:45:a0:ad:a0:5e:d4:ad:dc:c1:82:1d:b6:62:e8:
                    5c:89:38:85:fa:34:9a:e4:90:08:68:8e:26:8e:31:
                    cc:dc:d7:7c:60:d2:4a:42:e9:43:5e:a8:5c:5a:8b:
                    b2:b5:fc:3a:0d:26:26:b8:44:8a:e0:27:e5:17:77:
                    fa:1b:45:4e:55:08:03:49:33:60:a5:b9:21:d9:0e:
                    04:9b:d4:6f:d5:9c:25:53:8a:13:a8:e8:6e:ef:be:
                    a1:4f:3c:53:8a:f0:2c:8e:62:67:22:4e:76:53:8a:
                    0b:3c:95:5b:4c:b6:78:2b:09:e2:bb:12:05:81:56:
                    e0:76:77:21:23:33:55:4f:93:6c:c3:db:fa:33:71:
                    bc:0f:78:32:a8:99:e7:eb:65:95:f8:7a:cf:8f:29:
                    e8:7b:22:87:0a:0c:74:13:6b:33:b6:02:5e:dd:8d:
                    d7:d0:ae:75:ad:8c:b3:e5:ea:46:fa:89:47:15:ef:
                    31:74:7a:65:a8:b2:f1:39:b1:ea:da:0f:f8:97:b4:
                    ec:21:f8:b5:11:d2:f8:80:60:1c:ec:5d:c2:9c:c0:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BC:CF:E3:27:1C:B7:87:D4:13:F2:32:06:85:DD:18:FD:5B:F8:4F
            X509v3 Authority Key Identifier:
                keyid:8F:C3:1F:58:BE:B1:E2:38:93:1C:FF:C5:A4:F3:1D:86:52:72:63:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/8FC31F58BEB1E238931CFFC5A4F31D8652726366.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FC31F58BEB1E238931CFFC5A4F31D8652726366.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/3137392e34392e3139322e302f32322d3332203d3e20323731323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:71:e3:8f:ce:25:fc:bb:f9:3c:16:4a:6d:24:95:44:14:25:
         52:a1:35:a3:db:e9:23:51:0c:4e:27:cf:c3:33:52:46:44:e5:
         62:04:d1:43:a6:1e:d2:5a:92:45:38:f8:0a:2b:50:7f:98:88:
         3f:0c:17:73:a2:7f:75:98:bf:5b:9e:e3:64:80:37:6b:6e:41:
         bb:e8:d7:82:bc:52:2f:24:f4:80:1b:5f:2c:68:9a:00:73:47:
         70:72:ac:5f:52:d2:cf:f3:ef:58:62:1e:32:c8:3c:e4:6c:a9:
         30:8e:94:79:02:9d:37:9a:40:fa:64:64:1b:58:16:67:92:e1:
         0a:38:8a:17:76:11:dd:77:bb:7a:24:e7:16:0f:47:5c:0d:b1:
         8b:bd:4d:80:10:fe:db:13:69:cf:1a:f4:33:1e:96:0a:9f:59:
         9c:b8:88:1f:0a:fe:cf:12:77:0e:a3:28:91:79:be:14:0e:a2:
         32:4c:ce:5a:02:35:7c:9d:48:e0:88:66:24:e0:3d:bb:f9:97:
         66:02:09:3c:79:82:94:7c:23:1d:5b:54:8f:dd:89:9d:b0:ea:
         08:f4:8e:ea:55:49:86:aa:e2:f1:16:61:11:69:e2:de:bc:1a:
         3c:61:60:51:86:2b:7d:a9:40:3b:49:f4:d8:20:f1:1f:8f:1f:
         d7:14:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:28:40 2024 by rpki-client on console-fra.rpki-client.org