Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa
File:                     3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa (raw, json)
Hash identifier:          4n+x//lhvY2SKKaNQVYX4QvjA2yVGJsPuRodZVZygY8=
Subject key identifier:   26:21:39:0C:15:B9:0E:0A:F4:BB:4C:C6:E3:BC:4C:7E:AD:4E:90:97
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       59D27901C33E83209F1D2F03FCF358D5793362C4
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:51:42 +0000
ROA not before:           Wed 24 Apr 2024 18:46:42 +0000
ROA not after:            Wed 23 Apr 2025 18:51:42 +0000
asID:                     271175
IP address blocks:        179.51.179.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d2:79:01:c3:3e:83:20:9f:1d:2f:03:fc:f3:58:d5:79:33:62:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:46:42 2024 GMT
            Not After : Apr 23 18:51:42 2025 GMT
        Subject: CN=2621390C15B90E0AF4BB4CC6E3BC4C7EAD4E9097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:74:c6:65:4e:5e:c4:c1:1f:90:51:07:24:
                    c7:d1:01:e1:26:7d:a5:25:dc:e4:cf:89:39:a0:14:
                    98:7c:ac:71:4f:da:62:1a:42:91:f0:f1:2e:07:67:
                    34:45:ae:26:c1:30:b0:b5:db:5e:54:35:45:4e:e5:
                    7a:31:71:b3:bd:82:f1:d0:55:62:bb:c8:be:3f:89:
                    e1:28:79:84:93:0d:f2:cb:7a:92:83:89:2f:1a:d7:
                    45:4e:ec:1e:d6:8b:cb:28:24:d0:78:1f:63:c8:8b:
                    13:98:89:54:cd:6b:8e:3d:6f:87:a0:ee:50:6e:74:
                    00:3d:c1:99:ca:cb:db:5e:3a:c5:c3:e9:98:09:73:
                    58:c8:9d:d4:7f:67:3b:b8:50:66:51:fb:ac:ad:19:
                    45:f9:fb:5b:b4:de:c0:46:9a:1e:9c:8b:ef:15:54:
                    e6:e4:18:d1:b0:c2:87:b7:71:6d:25:ba:f1:60:39:
                    7e:a6:d9:be:2b:02:d7:89:e9:5c:9f:3f:81:57:08:
                    75:f6:ee:69:8a:de:6a:3c:3d:ce:51:56:85:50:e9:
                    26:e5:40:8e:d7:0a:20:29:3c:16:c0:a6:4e:f1:9e:
                    59:c8:54:1e:4d:79:6e:ce:7c:b6:94:90:aa:18:e5:
                    f2:0d:71:21:b0:37:28:ee:54:53:04:57:a6:82:e4:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:39:0C:15:B9:0E:0A:F4:BB:4C:C6:E3:BC:4C:7E:AD:4E:90:97
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:5a:44:b7:03:fe:7c:bc:b6:0d:d2:58:8a:84:12:bc:18:
         c5:21:97:2e:6c:0e:70:83:82:c9:3c:22:94:cc:12:b6:ae:fa:
         ea:a4:d5:27:25:d1:53:b0:e9:e2:f3:24:2b:8f:4a:48:14:2d:
         0c:57:f9:ad:c7:14:31:01:07:f0:f0:0c:55:d2:a6:da:e7:11:
         32:e9:68:db:f0:dc:d8:3c:a4:e0:a3:68:a6:77:6d:e8:60:e5:
         d7:93:67:f5:1c:3e:9b:d6:ea:f6:87:41:66:8d:41:81:0d:69:
         bd:49:ea:ab:a4:ce:1f:21:9f:30:8c:ab:79:65:b1:a8:2f:15:
         e7:7d:fa:cb:81:39:f9:11:f2:ad:d1:9c:8e:67:1e:2d:fe:54:
         df:16:07:e7:14:b9:78:5f:39:ce:d0:fd:69:c6:24:b6:a4:bc:
         27:5f:38:cc:67:e5:42:d4:ab:ae:18:7e:39:68:52:f6:92:4e:
         d8:90:0d:7d:36:a0:5c:8d:cc:84:ef:30:f4:0c:5a:3d:19:d2:
         9c:20:99:29:ce:71:41:8a:16:73:b1:3d:bb:37:da:17:a7:71:
         74:25:84:e7:7b:0b:22:1a:09:9b:20:e3:71:a8:d3:d8:f7:fa:
         fd:3a:0b:b2:f8:72:b3:cd:80:36:48:b0:50:61:68:a3:fb:60:
         64:09:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:15 2024 by rpki-client on console-ams.rpki-client.org