Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa
File:                     3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa (raw, json)
Hash identifier:          0Oy4JAd41nixHuFJoFCvZy/Am52OuaJ5E6I8uPAjo3s=
Subject key identifier:   5D:17:49:09:86:50:DD:05:3C:4A:6A:19:C0:CD:41:D3:85:1A:FF:37
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       6F2D692052BE1B5111DB899860372C149090D2B5
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:51:42 +0000
ROA not before:           Wed 24 Apr 2024 18:46:42 +0000
ROA not after:            Wed 23 Apr 2025 18:51:42 +0000
asID:                     271175
IP address blocks:        179.51.177.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2d:69:20:52:be:1b:51:11:db:89:98:60:37:2c:14:90:90:d2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:46:42 2024 GMT
            Not After : Apr 23 18:51:42 2025 GMT
        Subject: CN=5D1749098650DD053C4A6A19C0CD41D3851AFF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:64:5c:0f:af:7d:fa:ea:c9:b5:85:fa:e4:
                    d7:e2:65:bc:cb:f2:8e:ed:db:d9:61:9f:75:5a:71:
                    bc:58:04:a2:e1:39:4e:b9:dd:b4:a8:71:75:d0:25:
                    d6:e6:4f:3c:f2:91:78:0d:4c:f3:74:87:8a:7c:10:
                    56:be:35:79:b9:a6:fa:54:16:7d:f3:b7:d5:d6:34:
                    e4:06:38:7e:4d:8d:1b:ca:48:09:64:95:31:81:6d:
                    a7:ac:ef:50:fc:b1:64:8f:e1:b6:a1:e2:36:24:46:
                    af:2a:c0:a5:e0:5f:74:08:bf:9f:0b:69:d2:3c:9c:
                    03:24:73:1a:7b:2b:a5:a6:16:ca:56:39:c8:ab:ed:
                    92:fd:4f:a6:50:1d:a2:a6:53:c8:9b:24:e6:c4:e6:
                    7c:08:03:97:ed:80:c2:4f:13:a4:90:67:32:6a:c6:
                    33:26:ef:89:ac:2a:53:b9:a5:50:84:a2:81:11:3c:
                    11:a3:e8:0b:37:dc:78:b0:88:f2:37:2d:b9:c0:ff:
                    31:eb:13:a7:c3:42:36:cc:2e:aa:96:b0:e2:15:4d:
                    63:5a:06:6a:66:7f:20:82:9c:56:b6:16:11:1a:0e:
                    4c:7d:19:4c:ff:a7:23:b7:3e:30:22:3d:0f:ba:f5:
                    fd:ef:b3:f2:f6:f9:a6:09:79:08:5e:cc:31:3f:18:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:17:49:09:86:50:DD:05:3C:4A:6A:19:C0:CD:41:D3:85:1A:FF:37
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b2:36:99:f1:cb:cb:63:55:22:1e:08:5f:47:bf:c8:e4:54:
         a2:7f:b6:d4:10:f4:8d:d9:5c:55:45:ea:25:e1:ed:8d:76:5a:
         5c:73:42:ce:17:a8:a5:60:e2:08:56:98:f1:77:51:a7:83:76:
         d1:f7:ed:f8:80:96:62:2b:c7:fb:b7:cb:47:0a:4f:52:d7:f9:
         62:ad:8d:8b:c0:2b:78:ee:b8:0e:14:48:30:46:24:06:5c:fa:
         93:c2:68:56:5c:83:21:eb:b7:0f:64:a6:33:86:98:2f:3c:ec:
         6c:4d:e4:f9:f7:a6:0f:33:2f:f0:01:31:dc:a6:a9:4c:0a:d8:
         29:f0:61:eb:3d:ad:5f:f9:7f:f1:86:7e:fd:3a:fe:83:be:a9:
         bf:d8:a7:6f:e7:25:b7:bf:ee:0a:a0:0c:71:6b:4c:78:81:03:
         57:79:eb:8d:ac:6d:18:27:fa:b3:1b:bc:25:00:b3:ad:e9:eb:
         51:d9:b9:3c:45:44:04:67:ee:0a:71:29:68:bb:7c:ef:07:50:
         ca:b6:c7:f0:a5:91:e7:bb:36:6d:66:6f:73:88:e5:14:c7:0b:
         6a:5a:ba:18:ff:33:52:a2:8e:89:89:14:98:dd:f0:a1:7c:09:
         12:df:79:6f:b1:03:35:87:20:53:bf:e2:2d:9b:a8:f5:a1:39:
         d4:4f:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org