Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137382e302f32332d3233203d3e20323731313735.roa
File:                     3137392e35312e3137382e302f32332d3233203d3e20323731313735.roa (raw, json)
Hash identifier:          wVp75ONnjX+2qrUkHQIoaJGAa49IBfbNiBlV0/QUnkM=
Subject key identifier:   5C:DE:BF:A8:CB:78:A9:3C:F8:C3:84:26:4F:E6:9F:28:0A:CC:43:3C
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       24F35CF1B79CA7164CB0D12B32EF3E3843061BAD
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137382e302f32332d3233203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:52:52 +0000
ROA not before:           Wed 24 Apr 2024 18:47:52 +0000
ROA not after:            Wed 23 Apr 2025 18:52:52 +0000
asID:                     271175
IP address blocks:        179.51.178.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f3:5c:f1:b7:9c:a7:16:4c:b0:d1:2b:32:ef:3e:38:43:06:1b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:47:52 2024 GMT
            Not After : Apr 23 18:52:52 2025 GMT
        Subject: CN=5CDEBFA8CB78A93CF8C384264FE69F280ACC433C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:ed:a1:a4:37:ce:1c:18:80:17:db:09:66:
                    1e:70:1e:e6:8a:c9:54:0c:80:f1:92:b6:ad:54:98:
                    7e:a1:2f:f3:1c:c9:63:3c:a4:3a:62:5c:61:2f:2f:
                    e2:75:70:f7:3f:67:b6:2b:6b:0d:c4:13:ac:3a:2f:
                    6b:e7:8c:a0:74:90:76:0e:0f:08:84:73:5e:36:7c:
                    c9:7c:49:1c:f1:d8:ca:c9:d2:f6:4a:fb:94:35:a8:
                    63:3f:c2:90:e1:d7:61:55:63:0a:d6:55:0d:b1:52:
                    c0:7b:6c:91:87:0d:88:d2:8b:a5:03:42:e1:1d:56:
                    f0:65:94:49:b0:46:58:49:0a:4e:5a:f0:6d:3f:db:
                    dd:5e:93:a7:02:48:a8:3f:06:f7:41:af:c6:15:4a:
                    20:d1:2b:ac:48:f5:e7:b1:13:44:42:5f:50:93:27:
                    c0:89:d9:6f:fc:89:bb:36:63:99:5a:29:da:36:14:
                    82:b8:d5:55:6a:7e:72:03:58:55:77:4f:e2:16:a5:
                    4e:80:5b:7d:3a:9b:8c:0b:83:b8:f9:9c:6b:41:ae:
                    c8:2d:8c:6a:57:ea:cc:66:ff:6b:be:89:b3:45:f4:
                    c6:0c:12:99:cd:66:1c:d5:1d:74:c2:18:d4:cc:e5:
                    d0:44:4c:80:9b:41:ec:12:35:64:4c:b5:48:26:ee:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DE:BF:A8:CB:78:A9:3C:F8:C3:84:26:4F:E6:9F:28:0A:CC:43:3C
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137382e302f32332d3233203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:45:62:2a:80:0a:46:0a:18:17:7e:fa:da:62:dc:cc:96:16:
         e1:43:20:86:38:a7:13:8b:d4:86:ad:dd:a6:e1:c7:f5:bc:e8:
         53:4c:d5:b2:c0:17:77:66:fd:a4:7a:f0:c1:84:8a:d7:83:82:
         30:f8:aa:21:95:8f:56:a7:5c:dd:61:83:7f:ab:7b:35:7d:54:
         9f:d4:b4:58:26:1c:d2:7a:c5:84:53:df:1c:95:cc:1f:c7:3c:
         af:6c:92:fd:18:73:b9:c2:e8:c8:23:7d:93:40:65:32:29:6a:
         d8:51:14:19:e4:0b:5c:a7:4b:0a:83:f3:73:ab:3f:c6:56:1d:
         89:d4:a6:13:79:9e:7d:9d:5d:ca:0d:39:15:94:53:63:6f:ae:
         88:84:0f:5a:4b:86:8a:c4:73:10:ea:97:d9:4c:8c:95:d1:75:
         5f:92:04:b3:8d:75:79:15:fa:5f:24:3c:2e:d8:17:e4:c1:c6:
         a3:a7:98:40:29:62:19:13:a7:25:75:7e:0f:29:71:66:94:9f:
         47:7d:af:3c:df:86:85:99:c5:3a:19:04:f0:b2:40:64:77:60:
         f1:94:1e:70:59:f6:fa:46:78:35:82:82:ed:12:2c:d7:8d:e1:
         e1:b4:67:5a:4e:ff:8a:ad:3a:94:57:e2:a1:89:7e:28:71:1d:
         56:7f:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----