Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134322e302f32342d3234203d3e20323731363330.roa
File:                     3137392e36332e3134322e302f32342d3234203d3e20323731363330.roa (raw, json)
Hash identifier:          l4KKu4J+DxVln4ZZ6DQcQ8/9UxyafZklnHwZj4Lm96U=
Subject key identifier:   58:D9:5F:F4:23:D1:D5:53:8D:6D:A0:05:A8:30:7A:5A:1C:43:E7:8E
Certificate issuer:       /CN=15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396
Certificate serial:       3812AE35FE2CF1E52483A8D5DEE11B254FE423E0
Authority key identifier: 15:D3:B5:1C:2F:99:14:E8:CB:C1:A1:B5:35:3C:A6:D5:AA:9F:D3:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134322e302f32342d3234203d3e20323731363330.roa
Signing time:             Thu 31 Oct 2024 03:53:24 +0000
ROA not before:           Thu 31 Oct 2024 03:48:24 +0000
ROA not after:            Thu 30 Oct 2025 03:53:24 +0000
asID:                     271630
IP address blocks:        179.63.142.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:12:ae:35:fe:2c:f1:e5:24:83:a8:d5:de:e1:1b:25:4f:e4:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396
        Validity
            Not Before: Oct 31 03:48:24 2024 GMT
            Not After : Oct 30 03:53:24 2025 GMT
        Subject: CN=58D95FF423D1D5538D6DA005A8307A5A1C43E78E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3f:63:b6:c8:e8:86:62:31:b0:2f:ef:66:d0:
                    f2:98:34:1e:11:a3:ba:9f:d3:3f:70:44:f2:9b:8d:
                    63:04:b0:8b:25:29:97:71:a3:42:a7:35:8c:4c:61:
                    81:d9:e8:27:61:5a:c6:fc:fd:2b:d8:0f:e9:d8:cb:
                    ab:a3:64:40:73:49:bf:f1:25:6c:b9:64:a2:eb:ba:
                    be:99:d8:68:71:ee:1d:25:ae:9d:7f:30:be:31:7a:
                    be:c1:70:07:b2:d7:26:42:f2:1b:00:41:85:e2:b0:
                    d2:62:b6:a9:f9:dd:35:f3:c7:0b:c5:87:0a:1b:b3:
                    66:30:76:a6:b8:60:af:a0:b5:41:0d:a4:a1:9e:b8:
                    23:b2:20:0d:e0:b9:a3:b1:57:6d:59:85:78:eb:8c:
                    be:67:03:07:21:1c:b0:81:a9:9e:21:3f:7b:a4:16:
                    36:b8:43:15:f4:09:e9:f2:ae:83:ca:aa:79:44:da:
                    3a:96:69:af:0b:47:7f:60:59:a9:a9:ff:42:8b:ef:
                    6f:81:66:cd:69:c5:3d:b6:fa:e2:46:59:b7:b2:46:
                    cf:20:e1:d3:3b:86:a6:0f:b4:99:69:68:73:35:db:
                    46:df:c5:9a:44:d3:0b:5f:2a:5f:40:fc:d3:8d:8f:
                    2b:76:26:f0:01:02:a9:55:97:b3:a3:a0:39:e3:05:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:5F:F4:23:D1:D5:53:8D:6D:A0:05:A8:30:7A:5A:1C:43:E7:8E
            X509v3 Authority Key Identifier:
                keyid:15:D3:B5:1C:2F:99:14:E8:CB:C1:A1:B5:35:3C:A6:D5:AA:9F:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15D3B51C2F9914E8CBC1A1B5353CA6D5AA9FD396.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134322e302f32342d3234203d3e20323731363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:00:4e:69:96:50:20:b1:c7:12:ec:a2:44:1b:ba:43:86:39:
         67:dd:2c:31:f6:30:48:e2:4a:23:f9:94:b0:4d:f7:79:59:fb:
         bc:1a:5a:91:ea:37:a4:0b:db:6e:71:f8:36:15:03:56:97:2a:
         3a:1e:62:50:ff:6a:6a:78:63:85:de:0e:f4:55:fc:a7:ec:4e:
         95:d4:bb:ac:a2:19:8a:78:df:fe:a7:df:92:50:3c:3e:01:48:
         97:b5:f0:8f:89:ed:9b:d2:6b:a7:ec:d5:16:bb:78:6c:09:ed:
         0e:a4:48:6e:89:88:04:f3:b2:ed:e1:f4:c6:5f:d4:d5:a5:62:
         a6:84:9b:d3:c0:63:5d:54:79:fb:88:02:40:78:e5:79:e0:df:
         c2:fc:ce:38:2e:85:e5:39:ec:ea:15:ea:74:c7:66:3e:ae:e0:
         fe:85:af:e2:bc:54:3d:9d:91:3f:1a:2d:07:e0:7c:d9:e0:14:
         6a:a8:50:3c:a8:a1:fb:be:00:83:8a:84:2b:ab:33:ab:3f:71:
         e5:e7:0a:23:48:b6:f6:42:57:d3:48:a1:98:82:54:48:da:be:
         73:84:ad:84:1d:d0:37:e7:5a:61:51:c7:45:1b:d4:65:15:ee:
         3a:4b:76:4e:89:12:76:9d:5c:5e:fe:9f:39:14:75:28:60:3f:
         a2:01:fa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:37 2024 by rpki-client on console-fra.rpki-client.org