Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/3137392e36332e39362e302f32322d3332203d3e20323731353534.roa
File:                     3137392e36332e39362e302f32322d3332203d3e20323731353534.roa (raw, json)
Hash identifier:          2z5UbSfEFgeUc+HAG8veIJiWEEHVFR+DZEu3e5Wi3Z0=
Subject key identifier:   84:7A:6E:3C:53:32:F3:8F:F9:23:7E:63:A3:06:10:49:61:50:7E:73
Certificate issuer:       /CN=6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95
Certificate serial:       3DCB94B52A5AF139A7F1B369C833C2CB45433C37
Authority key identifier: 6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/3137392e36332e39362e302f32322d3332203d3e20323731353534.roa
Signing time:             Wed 03 Apr 2024 21:11:44 +0000
ROA not before:           Wed 03 Apr 2024 21:06:44 +0000
ROA not after:            Wed 02 Apr 2025 21:11:44 +0000
asID:                     271554
IP address blocks:        179.63.96.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cb:94:b5:2a:5a:f1:39:a7:f1:b3:69:c8:33:c2:cb:45:43:3c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95
        Validity
            Not Before: Apr  3 21:06:44 2024 GMT
            Not After : Apr  2 21:11:44 2025 GMT
        Subject: CN=847A6E3C5332F38FF9237E63A306104961507E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:fe:e7:89:90:02:29:e1:c5:05:5d:6c:27:
                    ea:58:d5:7f:21:bc:aa:a3:af:e5:47:3f:1b:3d:17:
                    6a:c7:2d:6f:54:62:ce:5f:23:57:24:a6:bc:b1:a8:
                    98:36:7a:9f:18:4c:3b:1b:8e:8a:49:bd:9e:8a:41:
                    b4:ab:97:d3:29:2b:05:2d:cc:fd:a2:98:2b:cf:0c:
                    ab:21:f8:54:1f:89:fd:a3:eb:38:6e:ff:54:85:fd:
                    26:9e:4f:d4:35:59:52:cd:ce:fc:93:c8:24:f0:d5:
                    13:99:be:a1:4e:24:98:f2:ee:f9:32:8c:d0:2e:95:
                    43:47:f9:08:cd:a1:04:46:3b:27:c1:22:d5:41:2f:
                    8c:f1:28:75:07:6b:b8:83:b0:f8:e9:6e:a4:d2:cf:
                    08:18:00:45:71:2b:0b:88:cc:56:cd:75:0a:e1:1a:
                    60:26:ff:d0:60:7a:53:77:ab:a7:3c:b6:15:76:b7:
                    52:b7:91:7b:c4:9f:ad:11:f2:5d:c8:76:66:32:58:
                    42:28:d6:ee:13:73:44:0e:5a:c0:3d:78:a7:0c:49:
                    b4:b8:ab:9d:17:1d:67:95:4b:74:67:71:00:4b:29:
                    14:53:af:07:b7:36:63:0f:80:6d:5e:26:56:b9:b1:
                    4f:a9:98:22:bd:07:1f:47:13:53:81:63:4c:e0:f9:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:6E:3C:53:32:F3:8F:F9:23:7E:63:A3:06:10:49:61:50:7E:73
            X509v3 Authority Key Identifier:
                keyid:6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/3137392e36332e39362e302f32322d3332203d3e20323731353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:fd:87:bf:39:cb:cb:f5:e9:3c:c1:e1:cb:9c:4e:49:17:8f:
         fa:b5:32:4e:49:e1:ea:ad:a7:b3:1f:f2:72:d2:e5:60:be:6c:
         a3:8c:f1:71:35:0c:06:2f:0a:f9:5f:a9:97:b9:ef:ae:e4:52:
         fb:57:30:59:6f:ca:51:7e:fa:8e:bc:3b:da:cd:41:13:86:a6:
         95:7f:a4:38:7b:e3:47:5f:5f:af:3b:72:1c:77:45:08:db:84:
         da:7b:fb:32:ae:ff:c8:55:b7:35:4a:e1:e2:6e:16:d3:eb:c2:
         ee:0d:99:9f:d5:cd:5b:3b:f5:59:b6:75:7b:a2:01:dc:2d:2f:
         19:24:dd:ea:74:7c:ae:e3:19:0c:2f:92:84:38:ad:1d:30:f8:
         65:d8:21:31:0e:84:e9:ab:06:1c:d5:cd:66:e6:d8:b8:d3:4a:
         52:7a:61:43:36:45:50:bd:be:4a:6b:15:cf:5c:da:30:25:86:
         8e:aa:f6:9f:95:3f:36:26:f5:eb:f2:f9:78:41:9b:76:7c:eb:
         06:1a:59:0e:01:2b:77:69:7a:68:96:77:53:87:47:1f:ab:b0:
         51:19:64:d7:89:b1:e0:32:39:2f:b0:e4:f9:44:6e:b5:2e:5b:
         ac:60:58:37:a5:c3:61:20:19:20:a6:5f:68:e7:bb:22:99:80:
         fd:b2:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 23:46:28 2024 by rpki-client on console-fra.rpki-client.org