Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139302e302f32342d3234203d3e20323730383538.roa
File:                     3137392e302e3139302e302f32342d3234203d3e20323730383538.roa (raw, json)
Hash identifier:          wET5E+u2SnyyIg1wPPQJf6gY8luhui5M9Ho+VpXITF4=
Subject key identifier:   BC:5D:98:CE:E6:BD:77:14:71:20:F0:23:93:37:45:23:10:DC:77:21
Certificate issuer:       /CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Certificate serial:       64D22DF3714BB026C4798CC837414F3FC58C0DBF
Authority key identifier: B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139302e302f32342d3234203d3e20323730383538.roa
Signing time:             Fri 15 Nov 2024 13:59:56 +0000
ROA not before:           Fri 15 Nov 2024 13:54:56 +0000
ROA not after:            Fri 14 Nov 2025 13:59:56 +0000
asID:                     270858
IP address blocks:        179.0.190.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d2:2d:f3:71:4b:b0:26:c4:79:8c:c8:37:41:4f:3f:c5:8c:0d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
        Validity
            Not Before: Nov 15 13:54:56 2024 GMT
            Not After : Nov 14 13:59:56 2025 GMT
        Subject: CN=BC5D98CEE6BD77147120F0239337452310DC7721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:11:34:f5:b5:4c:42:6b:48:02:d5:fe:a2:
                    ff:b1:78:ec:c4:f2:28:e6:27:11:cb:d3:39:1a:ce:
                    a8:e6:61:88:1f:6f:82:83:bc:36:4b:cd:f4:62:c1:
                    19:df:00:25:76:01:a2:d1:79:d4:e6:93:c1:a2:95:
                    4c:7c:60:e7:f5:ae:39:c3:7f:14:1f:c2:f9:a1:3a:
                    7c:62:45:b9:22:cc:41:46:2e:28:8b:a0:20:dd:b4:
                    b8:2c:db:69:cf:26:58:d2:1f:cd:f1:3d:49:14:8a:
                    7a:7a:2b:f3:e7:7e:57:3c:49:25:03:d1:ff:ed:5c:
                    34:7c:9f:22:c7:3a:4f:db:99:29:62:50:c6:f9:1b:
                    5d:6a:5f:9f:f2:58:c4:3d:cc:61:f8:cf:12:a3:c5:
                    8f:b6:79:e4:c2:e9:f4:55:61:d7:e7:26:c6:f0:ff:
                    11:6d:06:fe:f9:74:78:8c:62:dd:65:fb:98:16:ee:
                    82:d6:cd:f5:e9:ab:73:ae:b2:ad:ac:a9:d1:63:80:
                    9b:0c:23:35:bf:4f:a0:4a:5c:cc:96:91:7a:ab:b1:
                    c2:aa:9e:f3:08:e1:32:77:16:24:5c:88:c9:0d:8b:
                    5c:8a:e6:f0:d9:4d:91:a7:f1:f0:cd:41:53:fc:c3:
                    26:23:41:bb:ac:3b:63:6e:66:18:a1:f4:8b:ff:6e:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:98:CE:E6:BD:77:14:71:20:F0:23:93:37:45:23:10:DC:77:21
            X509v3 Authority Key Identifier:
                keyid:B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139302e302f32342d3234203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:4c:5d:dd:12:ce:25:d1:aa:40:8c:63:69:a2:4c:03:9b:
         00:d3:0d:56:f4:92:f7:6f:b5:3f:fe:9d:3c:c4:65:80:0d:63:
         ee:c1:24:c2:2e:b1:a0:d0:ec:b8:e4:94:86:78:e7:5a:f0:a8:
         70:62:07:7f:c7:1e:c2:3a:ce:52:11:bc:09:14:30:d1:86:ae:
         f1:51:a3:b0:af:04:f1:23:60:f8:53:4a:c3:d7:0b:75:03:33:
         72:73:da:ab:42:74:93:62:44:ba:f2:a5:94:60:8f:3e:02:c8:
         6e:22:01:7d:51:3d:be:01:b1:10:5b:5a:03:a8:49:cd:91:c7:
         fa:0c:3b:91:1d:b7:55:00:15:17:76:da:4f:9e:fd:16:6f:1c:
         50:b3:9e:64:35:38:7b:9a:f6:20:9c:ac:e6:1b:4d:ec:90:4c:
         5b:cd:65:f4:8f:02:44:c0:f0:4a:de:b2:fc:24:83:98:c0:c1:
         51:af:d1:16:c4:5c:d9:99:d3:a4:8e:0c:8d:14:14:ae:fa:22:
         c5:7a:2b:4e:2a:6d:4f:78:45:7f:06:88:08:6e:85:a9:57:24:
         d0:b1:f9:92:c3:df:2c:bb:07:a0:07:62:6c:93:f1:c9:ed:28:
         0d:b5:b1:56:4d:0b:3b:56:cb:89:41:88:4e:2e:a6:28:28:29:
         47:71:14:19
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZNIt83FLsCbEeYzIN0FPP8WMDb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUyQjNCMjk1QTUwRjUwNkMwQUZEOTFDRUZFQzJDODND
M0RBMDIwMTAeFw0yNDExMTUxMzU0NTZaFw0yNTExMTQxMzU5NTZaMDMxMTAvBgNV
BAMTKEJDNUQ5OENFRTZCRDc3MTQ3MTIwRjAyMzkzMzc0NTIzMTBEQzc3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTBE09bVMQmtIAtX+ov+xeOzE
8ijmJxHL0zkazqjmYYgfb4KDvDZLzfRiwRnfACV2AaLRedTmk8GilUx8YOf1rjnD
fxQfwvmhOnxiRbkizEFGLiiLoCDdtLgs22nPJljSH83xPUkUinp6K/Pnflc8SSUD
0f/tXDR8nyLHOk/bmSliUMb5G11qX5/yWMQ9zGH4zxKjxY+2eeTC6fRVYdfnJsbw
/xFtBv75dHiMYt1l+5gW7oLWzfXpq3Ousq2sqdFjgJsMIzW/T6BKXMyWkXqrscKq
nvMI4TJ3FiRciMkNi1yK5vDZTZGn8fDNQVP8wyYjQbusO2NuZhih9Iv/breTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvF2Yzua9dxRxIPAjkzdFIxDcdyEwHwYDVR0j
BBgwFoAUtSs7KVpQ9QbAr9kc7+wsg8PaAgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzR5S1Q3dEdrYkR5dzNxVHk0RXoyN292dURxdVd3VmpmTjVBWjh3VGY2
TmkvMC9CNTJCM0IyOTVBNTBGNTA2QzBBRkQ5MUNFRkVDMkM4M0MzREEwMjAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1MkIzQjI5NUE1MEY1MDZD
MEFGRDkxQ0VGRUMyQzgzQzNEQTAyMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0eUtUN3RHa2JEeXczcVR5NEV6MjdvdnVEcXVXd1ZqZk41QVo4d1RmNk5pLzAv
MzEzNzM5MmUzMDJlMzEzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAswC+MA0GCSqGSIb3DQEBCwUAA4IBAQAuD0xd3RLO
JdGqQIxjaaJMA5sA0w1W9JL3b7U//p08xGWADWPuwSTCLrGg0Oy45JSGeOda8Khw
Ygd/xx7COs5SEbwJFDDRhq7xUaOwrwTxI2D4U0rD1wt1AzNyc9qrQnSTYkS68qWU
YI8+AshuIgF9UT2+AbEQW1oDqEnNkcf6DDuRHbdVABUXdtpPnv0WbxxQs55kNTh7
mvYgnKzmG03skExbzWX0jwJEwPBK3rL8JIOYwMFRr9EWxFzZmdOkjgyNFBSu+iLF
eitOKm1PeEV/BogIboWpVyTQsfmSw98suwegB2Jsk/HJ7SgNtbFWTQs7VsuJQYhO
LqYoKClHcRQZ
-----END CERTIFICATE-----
Generated at Sat Nov 16 18:19:08 2024 by rpki-client on console-ams.rpki-client.org