Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f31392d3139203d3e20323632393733.roa
File:                     3137392e3130382e3132382e302f31392d3139203d3e20323632393733.roa (raw, json)
Hash identifier:          SaER910dA3Dx3FFS+2P5Cx+/Bjzdp8/VcXLQ/mdXU8k=
Subject key identifier:   CB:5A:19:1E:94:02:E2:57:B5:F4:D7:4C:91:A7:E7:91:F2:50:FA:9D
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       0A3BB9D8969097906580283BEFA5911AD3DD7385
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f31392d3139203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:28 +0000
ROA not before:           Tue 24 Sep 2024 17:40:28 +0000
ROA not after:            Tue 23 Sep 2025 17:45:28 +0000
asID:                     262973
IP address blocks:        179.108.128.0/19 maxlen: 19

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3b:b9:d8:96:90:97:90:65:80:28:3b:ef:a5:91:1a:d3:dd:73:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:28 2024 GMT
            Not After : Sep 23 17:45:28 2025 GMT
        Subject: CN=CB5A191E9402E257B5F4D74C91A7E791F250FA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:84:c8:98:eb:a1:57:57:ff:5c:c1:a3:fb:
                    d1:c2:4c:2b:a6:6b:a9:df:c6:e9:5d:96:cd:77:ef:
                    7c:03:bd:28:40:61:e8:e6:f5:ba:5f:62:2d:3b:09:
                    70:dc:78:8d:95:5b:44:21:88:f6:72:f8:74:2e:a2:
                    37:da:75:34:02:b3:e5:cc:53:c9:48:7b:1b:0b:9c:
                    81:ec:e1:f9:82:d5:ac:a4:22:00:c5:e3:88:fd:ed:
                    d7:7a:4f:50:80:80:4d:10:df:8a:23:ad:95:e7:79:
                    76:f8:00:99:a3:4e:40:a6:7b:be:ff:ad:ae:07:cd:
                    49:ec:67:b2:83:33:d8:8b:4c:71:05:7f:b8:3f:1f:
                    72:24:9b:07:9a:e5:85:8b:ac:44:fc:e4:e7:45:84:
                    13:27:a3:44:ae:ff:4f:d7:79:34:9f:29:b5:c9:5e:
                    16:1c:62:9a:f6:03:9f:c0:a2:94:48:88:cc:8c:9b:
                    a5:fa:31:c9:c2:a3:ad:22:51:3e:77:96:f1:3a:4b:
                    d0:8c:cf:26:b6:4e:1e:0a:e2:73:1b:86:f9:98:7c:
                    f9:fb:76:50:91:49:21:2d:e5:4c:d1:09:e3:ce:f4:
                    2d:0e:e7:7f:8c:c8:6a:e5:c4:f9:73:2f:dc:c8:d0:
                    c4:b8:ab:51:33:b4:d4:1c:cf:42:15:06:2b:e7:2b:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5A:19:1E:94:02:E2:57:B5:F4:D7:4C:91:A7:E7:91:F2:50:FA:9D
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f31392d3139203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:02:e4:65:c2:85:3b:cb:2a:71:fb:82:1e:cb:5f:1b:f9:38:
         42:57:16:ea:2c:15:c2:0f:dd:cf:a8:b0:75:db:80:16:a9:9f:
         5c:7e:db:b7:e9:b2:86:25:77:06:c6:67:1c:f2:19:01:ad:68:
         8a:e2:26:4d:58:bf:22:33:68:76:5d:22:da:5b:bf:b8:e9:63:
         49:bf:6d:ae:ef:10:bd:d1:ef:e6:45:a1:e1:2e:36:62:75:6b:
         12:cd:d4:2f:f9:b4:25:d9:36:8b:ad:54:eb:8b:de:d4:bb:36:
         81:04:ce:ee:94:95:e7:35:32:ba:5d:41:6e:7e:9b:f8:f9:ef:
         8e:db:7e:bd:22:f5:25:4f:6a:46:72:db:d1:4a:01:2b:f8:28:
         3d:c2:41:ff:c8:dd:4f:09:21:4c:81:2f:db:ad:b7:eb:07:a6:
         f6:0c:c9:54:0d:f3:90:4a:e2:3c:77:0c:85:a1:08:9c:59:89:
         df:ff:d4:0a:a7:b0:c8:0b:f0:07:3a:43:2b:9c:43:86:8a:e6:
         5d:cc:87:bd:46:e9:b3:dd:53:02:ec:10:08:bb:0f:36:9d:62:
         65:47:dd:eb:6f:74:65:15:a3:5a:53:a7:db:9c:03:19:22:aa:
         83:42:4c:00:ae:29:8e:b7:a3:33:c5:89:28:92:6d:eb:49:22:
         6c:67:fb:93
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCju52JaQl5BlgCg776WRGtPdc4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDA5MjQxNzQwMjhaFw0yNTA5MjMxNzQ1MjhaMDMxMTAvBgNV
BAMTKENCNUExOTFFOTQwMkUyNTdCNUY0RDc0QzkxQTdFNzkxRjI1MEZBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWooTImOuhV1f/XMGj+9HCTCum
a6nfxuldls1373wDvShAYejm9bpfYi07CXDceI2VW0QhiPZy+HQuojfadTQCs+XM
U8lIexsLnIHs4fmC1aykIgDF44j97dd6T1CAgE0Q34ojrZXneXb4AJmjTkCme77/
ra4HzUnsZ7KDM9iLTHEFf7g/H3Ikmwea5YWLrET85OdFhBMno0Su/0/XeTSfKbXJ
XhYcYpr2A5/AopRIiMyMm6X6McnCo60iUT53lvE6S9CMzya2Th4K4nMbhvmYfPn7
dlCRSSEt5UzRCePO9C0O53+MyGrlxPlzL9zI0MS4q1EztNQcz0IVBivnK1e9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUy1oZHpQC4le19NdMkafnkfJQ+p0wHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzIzODJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBbNsgDANBgkqhkiG9w0BAQsFAAOCAQEAEgLk
ZcKFO8sqcfuCHstfG/k4QlcW6iwVwg/dz6iwdduAFqmfXH7bt+myhiV3BsZnHPIZ
Aa1oiuImTVi/IjNodl0i2lu/uOljSb9tru8QvdHv5kWh4S42YnVrEs3UL/m0Jdk2
i61U64ve1Ls2gQTO7pSV5zUyul1Bbn6b+Pnvjtt+vSL1JU9qRnLb0UoBK/goPcJB
/8jdTwkhTIEv26236wem9gzJVA3zkEriPHcMhaEInFmJ3//UCqewyAvwBzpDK5xD
hormXcyHvUbps91TAuwQCLsPNp1iZUfd6290ZRWjWlOn25wDGSKqg0JMAK4pjrej
M8WJKJJt60kibGf7kw==
-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org