Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/3137392e34332e32342e302f32322d3234203d3e20323730383438.roa
File:                     3137392e34332e32342e302f32322d3234203d3e20323730383438.roa (raw, json)
Hash identifier:          e892vWvjYJPTke/x4m5pLEmwkQTjXau0YK4KL+HGpPE=
Subject key identifier:   CE:8C:EC:9D:50:0A:62:EF:53:0A:AF:AE:BD:2E:70:0C:89:62:F3:D5
Certificate issuer:       /CN=BEC984CE218702B30AEF83CAEF626A9CB903EAE8
Certificate serial:       0D1F389DB79C6BBD8177BF65CC4CC5AA7FAAE4BB
Authority key identifier: BE:C9:84:CE:21:87:02:B3:0A:EF:83:CA:EF:62:6A:9C:B9:03:EA:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/3137392e34332e32342e302f32322d3234203d3e20323730383438.roa
Signing time:             Wed 03 Apr 2024 23:33:46 +0000
ROA not before:           Wed 03 Apr 2024 23:28:46 +0000
ROA not after:            Wed 02 Apr 2025 23:33:46 +0000
asID:                     270848
IP address blocks:        179.43.24.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1f:38:9d:b7:9c:6b:bd:81:77:bf:65:cc:4c:c5:aa:7f:aa:e4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC984CE218702B30AEF83CAEF626A9CB903EAE8
        Validity
            Not Before: Apr  3 23:28:46 2024 GMT
            Not After : Apr  2 23:33:46 2025 GMT
        Subject: CN=CE8CEC9D500A62EF530AAFAEBD2E700C8962F3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:94:1c:b2:c8:6e:16:1e:4c:85:e2:f6:f4:
                    5b:46:cc:e4:9b:75:92:2d:1d:cc:2f:eb:da:9e:33:
                    c4:9f:1d:6a:37:98:ab:db:c4:be:75:dd:99:25:05:
                    82:dd:e5:3b:37:0b:4a:59:de:eb:6a:56:b2:bd:f8:
                    0c:d6:56:3f:6c:77:e0:67:47:ee:e7:7c:d4:b5:9d:
                    c2:ce:70:7c:2a:b7:22:b7:2e:b0:08:a9:38:c7:c2:
                    f2:db:6c:b9:ea:03:e0:ad:9a:35:e9:d6:65:dc:0c:
                    a3:89:c2:d6:2b:fd:20:fb:d1:ee:dd:f6:db:4c:44:
                    72:b2:e1:a3:ab:56:3b:1f:3a:c1:58:4d:32:43:00:
                    79:46:a1:e6:ad:9b:45:18:f5:5f:eb:02:e2:81:b0:
                    62:84:78:93:1c:21:dc:24:0a:11:7c:45:10:f7:fe:
                    4d:4b:d8:9c:07:bb:76:61:7e:b5:8d:b6:5b:49:a3:
                    8a:cd:c6:06:eb:d7:ea:55:6f:53:89:cc:30:15:d4:
                    01:8b:b0:31:e5:76:90:11:23:ff:7d:ee:2d:76:b0:
                    c8:a0:e5:78:fd:b4:e1:1e:1a:ff:9d:71:d9:47:0b:
                    cc:1a:c5:92:90:77:a2:e4:f7:cf:8b:3a:f3:97:38:
                    dd:4c:73:ea:87:d2:9d:6b:b3:0f:9c:96:a3:76:fc:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8C:EC:9D:50:0A:62:EF:53:0A:AF:AE:BD:2E:70:0C:89:62:F3:D5
            X509v3 Authority Key Identifier:
                keyid:BE:C9:84:CE:21:87:02:B3:0A:EF:83:CA:EF:62:6A:9C:B9:03:EA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/3137392e34332e32342e302f32322d3234203d3e20323730383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:ad:48:40:f6:d7:7b:07:04:c8:34:1a:ca:3d:a8:b2:07:
         1e:2f:4e:fb:3a:08:42:11:22:34:87:64:3e:65:d2:6f:42:4b:
         3a:36:bd:55:e9:9b:9a:18:db:9e:e6:0d:b5:b8:0e:db:72:92:
         31:aa:00:73:b8:b9:d2:7f:b3:15:95:83:16:97:2a:1b:6d:dd:
         7e:8a:80:2c:c0:27:5e:0a:80:d4:4f:b1:2b:26:26:bc:20:b2:
         9e:e0:b9:87:f6:4d:85:ac:fb:2e:16:03:dd:90:74:72:e5:0d:
         12:f8:32:77:9a:75:eb:0c:82:92:f0:e6:8b:bc:7f:55:02:ee:
         7b:14:16:60:10:a1:10:f1:b1:ac:3c:2d:69:76:a7:0f:da:7a:
         3f:44:05:70:eb:ec:f3:d4:97:e5:b5:14:80:06:b4:50:b7:07:
         77:97:a6:42:6c:86:31:f6:45:2b:ff:ef:46:5f:95:87:0a:70:
         62:da:01:ac:aa:ea:eb:33:0e:fa:53:e6:19:c1:51:f5:44:90:
         e9:74:ad:ab:ad:bc:60:07:c5:fc:fb:9e:eb:58:53:39:bb:b2:
         13:26:1f:cc:f0:3b:34:e0:0a:28:a9:66:82:47:96:34:b5:41:
         55:73:78:08:6a:85:40:d4:66:e8:25:ea:49:e8:44:0f:87:f9:
         8e:79:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org