Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134302e302f32342d3234203d3e20323731363330.roa
File:                     3137392e36332e3134302e302f32342d3234203d3e20323731363330.roa (raw, json)
Hash identifier:          D0+dj7K/ESyk8+DZp7BilheIbPKN+psEY1xUPAesKeI=
Subject key identifier:   CB:B7:B5:69:B2:3A:4C:E2:39:6E:08:56:57:85:C3:24:07:99:A1:56
Certificate issuer:       /CN=15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396
Certificate serial:       66837D1F801B76FA5D500DA02D1DFE0364EC9E2A
Authority key identifier: 15:D3:B5:1C:2F:99:14:E8:CB:C1:A1:B5:35:3C:A6:D5:AA:9F:D3:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134302e302f32342d3234203d3e20323731363330.roa
Signing time:             Thu 31 Oct 2024 03:53:23 +0000
ROA not before:           Thu 31 Oct 2024 03:48:23 +0000
ROA not after:            Thu 30 Oct 2025 03:53:23 +0000
asID:                     271630
IP address blocks:        179.63.140.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:83:7d:1f:80:1b:76:fa:5d:50:0d:a0:2d:1d:fe:03:64:ec:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396
        Validity
            Not Before: Oct 31 03:48:23 2024 GMT
            Not After : Oct 30 03:53:23 2025 GMT
        Subject: CN=CBB7B569B23A4CE2396E08565785C3240799A156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:1a:95:dd:3f:b5:fa:2d:91:99:0a:4d:b9:
                    e0:ef:30:09:01:6d:23:fd:39:89:c3:2b:95:ad:e5:
                    3f:01:43:ff:5d:b7:b2:98:00:6a:8b:45:4b:19:2f:
                    46:04:c9:22:bf:25:e1:38:03:3e:e7:ae:0a:e1:f5:
                    23:08:08:2a:75:1b:fb:71:4f:26:18:af:5c:6a:d3:
                    61:ff:44:c4:78:8e:4e:38:5d:2e:ea:e5:61:7b:e9:
                    d2:4c:1b:fd:2d:71:53:8d:f6:a9:67:29:92:4c:83:
                    dc:22:af:b7:89:c4:48:a1:4b:10:6a:2a:21:87:9d:
                    90:2f:84:02:56:b4:bd:70:1b:5d:bb:7f:19:9c:61:
                    14:49:6d:28:94:9a:86:67:16:b7:3d:d1:cd:51:40:
                    56:26:48:f9:61:d9:a0:b7:56:6b:20:78:e9:b5:9c:
                    21:8c:9b:b5:7c:bd:b1:63:b6:f8:0d:b8:6d:98:2c:
                    0e:71:49:e1:89:27:0c:75:8e:78:43:d4:08:4d:95:
                    ad:e2:17:cf:26:34:c6:cd:fc:e8:c1:01:d5:89:f1:
                    40:ea:fa:e3:c2:22:a5:49:40:e5:97:e9:2c:ba:fc:
                    d2:0d:43:e3:04:cb:ab:02:e9:d6:9a:4b:25:51:f0:
                    a1:06:02:41:a2:14:f1:3f:5f:a2:8b:6a:b1:7e:20:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B7:B5:69:B2:3A:4C:E2:39:6E:08:56:57:85:C3:24:07:99:A1:56
            X509v3 Authority Key Identifier:
                keyid:15:D3:B5:1C:2F:99:14:E8:CB:C1:A1:B5:35:3C:A6:D5:AA:9F:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134302e302f32342d3234203d3e20323731363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:67:73:45:49:ca:c7:97:ec:78:43:2d:37:0f:80:6d:d4:
         14:96:9f:01:15:83:8e:45:eb:ce:c3:39:8c:ea:6d:4b:58:6d:
         4c:3c:19:75:fb:b7:3f:20:6d:6f:2a:d1:f1:ad:08:d3:e0:94:
         6b:c8:c7:fe:4b:ec:72:27:9b:1c:0f:c3:08:59:6f:e5:9d:9b:
         2b:33:8a:a0:c9:ce:da:bd:f3:33:e7:50:e6:7c:66:b0:40:78:
         34:21:50:6d:f4:da:d9:2b:05:98:81:54:d0:15:6c:b7:97:fa:
         47:e2:67:1b:db:83:2c:c6:64:61:20:78:1d:b7:f2:cd:e2:a3:
         6d:14:71:54:23:52:d4:c5:a7:39:65:8c:bb:ac:95:54:cf:ae:
         3f:48:d7:fb:30:4a:95:f1:b3:04:e0:83:89:51:0d:e0:dc:9a:
         76:b8:bd:ad:94:f5:59:8f:d9:33:97:7c:44:49:e7:4f:11:67:
         a7:e6:b9:24:94:ff:7a:f0:df:b0:19:74:40:38:ca:84:c4:1a:
         41:3e:9d:3a:c9:ff:3e:9a:dd:d5:03:20:d1:2a:0c:f3:80:ae:
         5f:bc:7c:26:d8:25:31:cb:2e:3a:23:a9:1e:89:81:23:2e:37:
         3e:65:e9:df:89:92:c4:59:a1:ef:f2:e3:61:8a:73:76:b2:4a:
         df:33:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org