Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
File:                     3137392e3130372e36342e302f32302d3332203d3e203532353433.roa (raw, json)
Hash identifier:          X3Xs9pCfwYY/HJweAOUu9VqIfoEVO1FEWun1kRKe9y8=
Subject key identifier:   65:70:EE:E9:6B:CB:46:EC:F7:F5:D9:0B:66:46:0C:43:9B:75:B3:92
Certificate issuer:       /CN=9E5DD73DCDA3455C25B6F74D6FB56833C956360D
Certificate serial:       30D345A615B76DDEB64F4CEA76B35086B106022E
Authority key identifier: 9E:5D:D7:3D:CD:A3:45:5C:25:B6:F7:4D:6F:B5:68:33:C9:56:36:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5DD73DCDA3455C25B6F74D6FB56833C956360D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
Signing time:             Fri 09 Aug 2024 19:01:45 +0000
ROA not before:           Fri 09 Aug 2024 18:56:45 +0000
ROA not after:            Fri 08 Aug 2025 19:01:45 +0000
asID:                     52543
IP address blocks:        179.107.64.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d3:45:a6:15:b7:6d:de:b6:4f:4c:ea:76:b3:50:86:b1:06:02:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5DD73DCDA3455C25B6F74D6FB56833C956360D
        Validity
            Not Before: Aug  9 18:56:45 2024 GMT
            Not After : Aug  8 19:01:45 2025 GMT
        Subject: CN=6570EEE96BCB46ECF7F5D90B66460C439B75B392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:72:47:4b:a0:25:c8:b9:3d:a6:8f:7a:47:
                    4e:4f:c6:02:eb:4b:a7:4c:39:9b:b2:e5:a3:ce:7f:
                    1b:47:11:89:18:de:f9:d2:4f:17:9c:10:08:57:8f:
                    26:f2:4f:6e:80:a1:f6:17:d7:4b:18:f0:0f:27:91:
                    63:14:bb:6d:05:1d:20:0f:88:59:52:a0:b2:f4:f8:
                    54:be:2e:40:2e:fe:ed:a4:50:a3:bc:f5:19:2c:bf:
                    25:41:68:95:d2:b6:e9:60:d7:56:c0:ea:89:f7:33:
                    3c:3b:47:fa:c7:82:87:51:93:b4:ab:37:8c:cf:e7:
                    9a:29:5c:fc:3d:49:d6:d5:7a:f5:1c:a8:1f:5c:b3:
                    6b:b9:f6:41:55:98:4d:ba:e4:df:26:e1:c3:f0:2d:
                    8b:92:a1:5f:8a:2c:9a:c9:13:e8:7d:51:30:e7:02:
                    7d:98:e3:8e:51:c1:82:2d:71:6c:87:1a:56:40:1c:
                    69:87:6d:a7:ef:4b:91:2d:57:a2:56:fc:28:21:59:
                    00:e4:ad:28:cf:16:d8:ce:40:df:12:41:92:17:e8:
                    b1:cf:c4:a3:d8:c4:57:b4:fa:d7:68:33:99:d8:df:
                    04:90:08:6c:ff:cb:e0:50:3d:ff:e8:d8:54:87:55:
                    e6:88:09:db:66:43:cb:c3:ac:68:53:72:ac:37:f4:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:EE:E9:6B:CB:46:EC:F7:F5:D9:0B:66:46:0C:43:9B:75:B3:92
            X509v3 Authority Key Identifier:
                keyid:9E:5D:D7:3D:CD:A3:45:5C:25:B6:F7:4D:6F:B5:68:33:C9:56:36:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/9E5DD73DCDA3455C25B6F74D6FB56833C956360D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5DD73DCDA3455C25B6F74D6FB56833C956360D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:0f:e5:e9:e0:bb:16:f9:d6:71:b6:fc:3e:08:b1:7a:41:
         28:ef:18:36:fb:13:fa:46:a7:a4:c6:86:cc:12:36:6b:2b:aa:
         62:af:f8:a1:3b:a9:87:e2:2c:fa:18:63:63:37:01:7f:84:ac:
         a3:2f:3e:49:0b:c9:a0:96:08:5a:2e:7c:33:ba:fe:b4:ff:57:
         28:62:f5:76:e5:fe:80:70:ee:3d:84:60:c7:64:55:f0:75:38:
         98:ea:89:32:aa:fc:41:72:28:fa:9b:73:87:17:5b:31:c7:09:
         3a:b0:8f:80:ad:91:36:cc:ee:ad:5a:e2:cf:eb:4d:05:8a:f7:
         b2:0d:ed:94:b8:74:d1:67:1e:38:8f:5c:09:f9:e7:3a:49:d8:
         74:81:7b:29:ec:9c:0c:74:ac:55:24:72:4e:bd:eb:2f:f8:f0:
         bb:e6:54:47:57:35:94:53:87:3d:b6:c4:13:d9:c6:06:0e:38:
         59:2d:d6:70:58:86:2a:62:c4:83:7d:73:9d:ce:9a:9f:9b:f0:
         fb:5f:c0:56:53:e8:d6:65:3f:c9:3d:49:59:0f:9f:52:5d:7f:
         0a:83:23:ee:58:5b:fc:57:c4:79:1a:00:ba:2e:7c:96:d3:21:
         c1:84:5d:ec:7b:4b:65:c6:ca:82:75:0c:fd:6d:45:ed:6e:43:
         8c:ea:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:12 2024 by rpki-client on console-fra.rpki-client.org