Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137392e39372e3139322e302f31392d3234203d3e203238333539.roa
File:                     3137392e39372e3139322e302f31392d3234203d3e203238333539.roa (raw, json)
Hash identifier:          YRBVBORJgUDIk88SMCG/QSG7QCwFCS/lVduQOJTQM40=
Subject key identifier:   3B:2E:91:B8:01:5A:37:44:39:D9:42:FA:FC:F0:19:B2:42:41:A7:CD
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       51AAEDDA8BB2E8078730D90D948D6ED8CA838162
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137392e39372e3139322e302f31392d3234203d3e203238333539.roa
Signing time:             Fri 09 Aug 2024 17:20:13 +0000
ROA not before:           Fri 09 Aug 2024 17:15:13 +0000
ROA not after:            Fri 08 Aug 2025 17:20:13 +0000
asID:                     28359
IP address blocks:        179.97.192.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:aa:ed:da:8b:b2:e8:07:87:30:d9:0d:94:8d:6e:d8:ca:83:81:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:15:13 2024 GMT
            Not After : Aug  8 17:20:13 2025 GMT
        Subject: CN=3B2E91B8015A374439D942FAFCF019B24241A7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:42:0d:3e:39:1c:f1:56:1d:a5:50:8f:1b:
                    3d:a7:d4:92:db:82:a9:e8:59:60:fc:d9:37:e4:b7:
                    e9:bc:c8:cd:83:94:36:76:9a:47:6b:66:68:ca:c6:
                    94:8e:02:4a:2a:24:db:33:78:19:1c:cc:32:1c:01:
                    d2:9e:1e:1d:b0:26:f3:3b:87:e3:6b:6b:d8:22:ff:
                    48:57:27:0d:e1:1c:ee:fb:a0:33:bb:12:62:8d:a0:
                    aa:9e:fa:a5:49:65:56:2e:35:35:2b:10:d1:61:f7:
                    c9:bc:bd:ee:a0:9e:eb:a8:d7:fd:ee:10:95:6a:f6:
                    1d:1c:81:27:27:3f:a9:88:78:4d:e9:5a:ac:f0:5e:
                    78:f7:87:a1:89:67:83:1e:b7:1b:71:c6:67:bb:54:
                    f4:6b:0f:55:5b:88:f1:cd:b6:d2:b1:5a:e6:c0:bd:
                    8c:e5:66:4a:bf:4b:6f:1b:69:d8:f9:74:93:37:cb:
                    3b:86:e5:7c:1a:20:bc:20:8d:3e:28:d5:17:fe:fa:
                    86:de:e1:59:6e:d0:91:ae:7c:c4:a9:4d:d5:58:5d:
                    66:0b:40:b1:04:a6:41:d9:c3:3b:87:81:fe:b0:b7:
                    16:99:88:22:b9:94:93:f2:ae:e9:46:09:a0:5e:19:
                    25:b4:ea:61:c0:ff:97:16:16:d1:c3:21:d7:b5:bb:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2E:91:B8:01:5A:37:44:39:D9:42:FA:FC:F0:19:B2:42:41:A7:CD
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137392e39372e3139322e302f31392d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:3a:d2:bc:7c:33:13:f0:16:b0:9f:6a:8d:de:9e:51:f7:
         d6:40:69:a3:9d:05:a7:50:da:de:47:14:3b:da:63:e6:32:ad:
         5c:6a:02:14:22:09:6d:52:7d:0b:ab:89:b4:cf:18:cc:5a:2c:
         09:c4:87:a2:0c:7e:3d:38:fd:20:6c:d3:4b:19:b0:7d:8a:b3:
         ab:db:94:c3:35:24:a5:6e:3c:58:d4:4a:7d:2c:43:dc:41:0f:
         67:f2:e1:4f:bb:67:ed:dd:c0:80:67:de:ea:64:c9:ab:7a:6f:
         29:76:6d:22:be:b6:09:3b:f7:55:ce:02:12:fc:d7:0b:7c:18:
         e9:6c:72:6b:ca:ec:62:5f:95:47:a8:0e:fe:a2:f7:6e:96:df:
         b3:cb:7f:b1:77:3b:5f:90:07:54:e0:11:4e:6e:29:32:40:22:
         8d:f4:b9:ee:8e:ed:60:11:bd:1f:10:59:aa:e5:83:0f:b3:fb:
         59:44:57:ab:56:0b:c1:28:11:c9:49:0c:41:8f:02:ba:85:8d:
         f9:64:b3:f4:d1:12:21:b6:2c:bb:21:7b:0c:57:70:39:94:1d:
         d8:e5:d9:dc:3c:4a:65:78:05:ff:d4:9a:2e:dd:1f:a1:34:7d:
         e8:0b:ab:6f:54:cd:a8:30:f0:c2:ba:29:f1:30:06:cb:34:f9:
         55:44:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org