Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137362e302f32322d3232203d3e20323731313735.roa
File:                     3137392e35312e3137362e302f32322d3232203d3e20323731313735.roa (raw, json)
Hash identifier:          /qDvFQi9L+oA8aTIFB3eCZ72XfKjcki+q7+Jz/FNuzI=
Subject key identifier:   44:7B:CD:C9:FC:AB:F1:AE:2E:AA:44:B6:66:67:9C:ED:75:CC:14:0E
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       1EC37022A185E2CF31B63190ED4CE1480F510782
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137362e302f32322d3232203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:52:19 +0000
ROA not before:           Wed 24 Apr 2024 18:47:19 +0000
ROA not after:            Wed 23 Apr 2025 18:52:19 +0000
asID:                     271175
IP address blocks:        179.51.176.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:70:22:a1:85:e2:cf:31:b6:31:90:ed:4c:e1:48:0f:51:07:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:47:19 2024 GMT
            Not After : Apr 23 18:52:19 2025 GMT
        Subject: CN=447BCDC9FCABF1AE2EAA44B666679CED75CC140E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:64:c1:76:ae:8f:6f:5b:fb:d9:4e:cb:c9:
                    06:bc:10:1c:d8:65:55:9b:13:77:20:f7:b9:8e:3f:
                    7a:28:e5:2f:03:a9:1a:e3:95:ca:c8:3d:5f:53:2f:
                    9d:ef:9e:b3:8b:f5:53:0f:e4:18:27:20:78:fa:ae:
                    29:4e:f8:67:9e:4e:9a:13:f1:d7:ea:38:74:15:49:
                    ce:69:3f:e3:1b:5c:4b:21:2f:a2:d9:1b:a2:34:89:
                    49:3d:3d:90:1a:27:80:64:82:04:12:f9:80:9a:db:
                    19:ed:70:68:8d:ee:f0:bb:aa:5b:f2:33:d9:25:c7:
                    f1:5e:27:19:69:52:09:13:cf:d0:b9:d4:f3:c8:d8:
                    05:14:a5:07:1d:7a:54:5a:0c:80:dc:34:d7:49:a7:
                    f7:47:f2:84:3d:ac:7c:2f:01:9f:f3:7d:8e:40:51:
                    e7:16:75:b4:a6:ee:ba:67:0c:df:b1:e3:bf:95:ad:
                    2d:3d:fb:f4:61:28:d0:53:6e:18:06:20:7b:29:38:
                    10:39:71:b8:3c:83:4c:cb:ce:11:1d:c2:95:1e:9a:
                    20:91:cc:b3:bc:3b:5e:e0:9e:aa:57:e7:48:67:70:
                    92:44:87:97:23:1f:fa:5a:60:86:fd:e1:4b:8c:e5:
                    9f:a8:62:60:95:5c:d5:45:1e:32:f5:3e:96:e7:94:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:CD:C9:FC:AB:F1:AE:2E:AA:44:B6:66:67:9C:ED:75:CC:14:0E
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137362e302f32322d3232203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:14:d0:34:5e:45:40:ab:3a:2d:d5:e6:59:a9:81:b3:6b:
         3e:9b:1c:cd:99:26:e1:5b:85:03:7a:da:40:b3:9c:21:cf:e2:
         2e:ca:ea:61:1b:15:b0:6a:de:d3:d7:8f:48:da:2e:07:c1:c2:
         cf:b2:01:b0:d0:a0:9d:ef:6c:93:a3:56:64:9c:30:1f:2a:29:
         2c:96:e6:fd:02:5b:85:3c:ad:17:ef:e1:8a:ad:2a:19:58:ae:
         f1:e1:ab:41:16:6f:dc:42:e5:16:1a:d2:73:0c:bb:00:cc:67:
         1c:12:a8:e9:fb:c0:c1:a5:c2:5e:7d:83:76:31:1e:6f:25:c4:
         08:22:fa:33:ae:66:65:11:d0:6a:d8:78:51:da:33:ac:cb:1b:
         b5:44:6e:c7:02:20:38:f5:21:25:4f:9c:d3:6e:b9:da:04:3b:
         a9:60:8f:d6:45:5b:aa:3a:ac:73:bf:2f:31:b0:fa:47:a0:bd:
         0f:02:d3:9a:b5:2b:38:05:23:18:6c:05:f4:16:40:67:56:7f:
         67:de:8c:ca:54:b0:74:01:f3:30:2f:fe:a6:0e:5e:52:bd:f4:
         eb:02:ac:81:07:da:3a:e5:8b:50:75:96:cd:59:8b:19:62:14:
         a1:ac:b4:04:96:b5:35:b4:ab:5e:16:34:7c:14:c0:b3:ae:ef:
         53:80:89:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHsNwIqGF4s8xtjGQ7UzhSA9RB4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MTY0Q0M1RjlCOTEwM0I3NDU4QzI5QzY4MzlFOTQz
QjUwRjY0RDAeFw0yNDA0MjQxODQ3MTlaFw0yNTA0MjMxODUyMTlaMDMxMTAvBgNV
BAMTKDQ0N0JDREM5RkNBQkYxQUUyRUFBNDRCNjY2Njc5Q0VENzVDQzE0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvGTBdq6Pb1v72U7LyQa8EBzY
ZVWbE3cg97mOP3oo5S8DqRrjlcrIPV9TL53vnrOL9VMP5BgnIHj6rilO+GeeTpoT
8dfqOHQVSc5pP+MbXEshL6LZG6I0iUk9PZAaJ4BkggQS+YCa2xntcGiN7vC7qlvy
M9klx/FeJxlpUgkTz9C51PPI2AUUpQcdelRaDIDcNNdJp/dH8oQ9rHwvAZ/zfY5A
UecWdbSm7rpnDN+x47+VrS09+/RhKNBTbhgGIHspOBA5cbg8g0zLzhEdwpUemiCR
zLO8O17gnqpX50hncJJEh5cjH/paYIb94UuM5Z+oYmCVXNVFHjL1PpbnlG+1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURHvNyfyr8a4uqkS2Zmec7XXMFA4wHwYDVR0j
BBgwFoAU5ZFkzF+bkQO3RYwpxoOelDtQ9k0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZ6cHhGbVRoYUw3UW5uVWo5cGhXRnZuQ3J1aEdGaHlGb1VMUW5VN1di
a20vMi9FNTkxNjRDQzVGOUI5MTAzQjc0NThDMjlDNjgzOUU5NDNCNTBGNjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1OTE2NENDNUY5QjkxMDNC
NzQ1OEMyOUM2ODM5RTk0M0I1MEY2NEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGenB4Rm1UaGFMN1FublVqOXBoV0Z2bkNydWhHRmh5Rm9VTFFuVTdXYmttLzIv
MzEzNzM5MmUzNTMxMmUzMTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzM7AwDQYJKoZIhvcNAQELBQADggEBACVqFNA0
XkVAqzot1eZZqYGzaz6bHM2ZJuFbhQN62kCznCHP4i7K6mEbFbBq3tPXj0jaLgfB
ws+yAbDQoJ3vbJOjVmScMB8qKSyW5v0CW4U8rRfv4YqtKhlYrvHhq0EWb9xC5RYa
0nMMuwDMZxwSqOn7wMGlwl59g3YxHm8lxAgi+jOuZmUR0GrYeFHaM6zLG7VEbscC
IDj1ISVPnNNuudoEO6lgj9ZFW6o6rHO/LzGw+kegvQ8C05q1KzgFIxhsBfQWQGdW
f2fejMpUsHQB8zAv/qYOXlK99OsCrIEH2jrli1B1ls1ZixliFKGstASWtTW0q14W
NHwUwLOu71OAid8=
-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:15 2024 by rpki-client on console-ams.rpki-client.org