Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa
File:                     3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa (raw, json)
Hash identifier:          YxUydh4nSWfLmW13BmiJNtiZwFcmAspqz1LDzWXJ98s=
Subject key identifier:   1E:E6:DB:22:F2:D9:63:B2:10:EE:C6:21:48:1B:A7:11:A2:6D:33:39
Certificate issuer:       /CN=88924B7890A5341810CD86D1137AE868EC14EDA9
Certificate serial:       4B175764C659812C995172A216A76D38BE0F627F
Authority key identifier: 88:92:4B:78:90:A5:34:18:10:CD:86:D1:13:7A:E8:68:EC:14:ED:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88924B7890A5341810CD86D1137AE868EC14EDA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa
Signing time:             Thu 19 Sep 2024 18:24:39 +0000
ROA not before:           Thu 19 Sep 2024 18:19:39 +0000
ROA not after:            Thu 18 Sep 2025 18:24:39 +0000
asID:                     271169
IP address blocks:        179.48.196.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:57:64:c6:59:81:2c:99:51:72:a2:16:a7:6d:38:be:0f:62:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88924B7890A5341810CD86D1137AE868EC14EDA9
        Validity
            Not Before: Sep 19 18:19:39 2024 GMT
            Not After : Sep 18 18:24:39 2025 GMT
        Subject: CN=1EE6DB22F2D963B210EEC621481BA711A26D3339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:44:73:03:5c:53:b8:37:2e:8f:34:90:79:
                    0c:f2:42:66:0d:04:3a:aa:85:55:65:9b:a4:3f:d1:
                    05:8b:f4:ca:45:ca:7d:aa:b3:e5:14:11:cf:f7:49:
                    7d:b9:2a:46:d0:75:04:75:59:c6:ba:27:d8:fb:47:
                    c6:9b:4f:cb:44:f7:b6:47:c1:f8:cf:f6:f5:d9:72:
                    60:21:ff:4f:bf:13:7d:05:73:8f:9e:e1:dc:ad:74:
                    78:b5:41:e4:0e:84:d0:0f:63:0a:29:3a:e5:79:84:
                    fe:60:4e:ab:de:d6:98:86:9a:97:20:2b:da:25:90:
                    aa:af:1d:b2:2e:6c:6b:3d:19:4b:b5:f0:0a:b6:7e:
                    f6:99:85:ae:20:82:23:13:95:b5:42:c7:78:00:84:
                    13:42:b2:e7:7f:23:9b:f0:4f:ed:78:d9:7a:91:fe:
                    5f:45:d5:17:3c:58:c1:49:3b:39:f3:5a:f2:01:fc:
                    0b:3f:46:04:f9:f9:23:96:71:1d:63:b6:99:a6:80:
                    4f:b9:5d:ca:9c:23:08:98:e9:47:04:60:f9:c0:ae:
                    fb:8e:82:03:a7:bd:cf:5b:cb:e7:d7:66:ef:47:a1:
                    4c:5b:da:35:83:96:0c:6f:a3:1d:b8:05:06:3e:32:
                    c8:1b:73:51:8b:eb:e8:a4:64:d9:82:79:0e:ec:e5:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E6:DB:22:F2:D9:63:B2:10:EE:C6:21:48:1B:A7:11:A2:6D:33:39
            X509v3 Authority Key Identifier:
                keyid:88:92:4B:78:90:A5:34:18:10:CD:86:D1:13:7A:E8:68:EC:14:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/88924B7890A5341810CD86D1137AE868EC14EDA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88924B7890A5341810CD86D1137AE868EC14EDA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:45:57:6a:92:7f:41:ed:48:a8:3c:f0:f2:f7:7b:c8:73:29:
         2f:66:81:bc:bc:2c:72:db:9d:c9:6c:c6:10:0f:9c:25:d7:43:
         09:ab:a7:62:f8:b1:c6:0b:3b:42:f9:d0:f7:7a:4e:44:5d:f5:
         5b:7d:22:8e:e6:15:f4:0b:b7:91:0f:1d:ac:f1:e7:26:ec:5c:
         f2:bc:e7:ab:da:1d:be:38:0a:74:9a:02:04:41:6d:be:12:e8:
         fc:4c:5e:1b:ce:26:52:42:2b:9e:6c:d1:dd:15:7e:f4:94:10:
         10:21:b1:5b:60:7d:69:db:8f:40:5f:be:14:96:f3:46:93:d4:
         06:3b:f1:94:cc:3e:b7:a4:37:ae:3d:fd:0b:a4:f0:53:e9:20:
         76:d4:01:24:fd:b8:ff:20:ae:7e:d0:d8:97:a5:bf:c2:dc:30:
         2f:4f:5c:4e:49:09:e8:d2:cd:c5:ce:fe:4e:4c:22:79:88:ec:
         72:02:76:99:c2:0c:52:40:da:f9:09:e0:1e:d9:39:e3:dc:d1:
         e4:c2:83:be:37:e4:75:e4:d5:42:74:09:77:e0:a1:7c:d1:8d:
         b5:23:36:89:62:ff:a7:f9:5d:e4:a9:4a:ad:68:cc:32:98:51:
         d2:7f:8a:f1:5a:43:a7:6f:50:38:66:f0:0a:9f:9e:12:d2:d8:
         be:e9:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:05:20 2024 by rpki-client on console-fra.rpki-client.org