Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3132382e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          6I58txetypl2Kdif4TbKq4k9BEpGj9lzdZ1HNDYlg4E=
Subject key identifier:   03:49:A7:29:A0:71:B1:B8:9C:D3:C5:79:C4:93:62:0F:98:9E:37:32
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       585F9EDE3DE06B6A790F2B1EF7633B3EAB57F1BD
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 02 Oct 2024 10:47:27 +0000
ROA not before:           Wed 02 Oct 2024 10:42:27 +0000
ROA not after:            Wed 01 Oct 2025 10:47:27 +0000
asID:                     262973
IP address blocks:        179.108.128.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:9e:de:3d:e0:6b:6a:79:0f:2b:1e:f7:63:3b:3e:ab:57:f1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  2 10:42:27 2024 GMT
            Not After : Oct  1 10:47:27 2025 GMT
        Subject: CN=0349A729A071B1B89CD3C579C493620F989E3732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:db:c9:a5:31:6b:42:7d:80:87:de:be:4f:
                    36:5f:34:be:bc:b0:60:54:7b:95:5f:c5:d0:1c:21:
                    65:4b:ae:6d:e3:31:13:db:a3:f2:03:b5:88:63:78:
                    c4:dd:82:6d:24:cd:32:3b:8b:5a:dc:90:e2:f0:9b:
                    8e:cf:d5:ec:dd:31:38:0d:db:05:50:70:1b:fa:24:
                    08:3d:a4:e3:3a:94:23:33:68:5e:f4:9c:40:fe:98:
                    2d:0b:1d:ee:51:a2:c7:b6:4c:52:2b:9c:64:01:5c:
                    cd:02:14:f5:f9:82:8a:6c:5d:8f:81:04:6b:2f:a9:
                    85:40:16:93:a9:3d:fe:12:38:ae:a5:3e:6c:72:e8:
                    93:d8:37:f0:31:15:a2:73:3d:98:25:21:19:ad:50:
                    86:df:75:7a:c1:36:29:4a:32:ee:6d:0d:9d:8e:85:
                    5b:1e:84:e8:16:c5:e8:62:ca:8b:60:53:e4:40:75:
                    5a:b4:ed:9a:fc:80:fd:6f:1b:37:ed:ae:fa:0d:b0:
                    ad:b6:f7:fc:f3:4b:fc:34:b3:9b:85:e0:b8:6b:13:
                    f0:b1:08:4c:4d:cd:08:1b:63:a0:15:c6:8c:50:00:
                    74:98:9a:6c:f5:d4:6d:9d:1c:45:60:04:be:a3:1e:
                    24:9e:62:e4:2e:f5:ad:2c:f8:99:37:3d:38:d0:37:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:49:A7:29:A0:71:B1:B8:9C:D3:C5:79:C4:93:62:0F:98:9E:37:32
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:69:03:ac:ed:f8:74:a4:98:43:2b:bf:d2:85:69:d9:25:
         52:a2:43:57:f6:aa:f0:f6:d3:2c:f5:fb:c1:2c:f1:0b:e7:f3:
         a5:49:38:97:7d:6d:f3:e8:5e:4a:11:da:13:72:1f:40:19:33:
         50:8c:9c:1f:10:8e:ae:77:c7:1e:ef:df:4b:3a:0e:e9:9e:48:
         6f:a0:d2:aa:94:51:16:d0:31:4e:68:53:c5:d5:ca:4e:2f:21:
         13:e9:99:62:5f:e4:11:d5:f0:6a:95:19:7f:8c:30:27:93:03:
         63:ec:29:49:ff:5b:6e:46:44:c3:ff:1a:f6:e0:ce:24:0c:8d:
         40:97:c5:ab:8e:c2:bb:f2:7e:b2:2b:5c:a9:6b:52:6e:4a:e8:
         8d:1f:90:a0:bd:63:d7:99:e1:f1:de:7a:dc:20:fd:84:3e:5b:
         2c:27:ce:17:e4:3b:ab:a7:9f:5b:3c:c8:8d:7c:62:dc:f1:5e:
         37:35:38:ba:dd:71:a4:73:7f:e0:ef:5a:6e:74:59:41:27:6f:
         e2:43:48:90:f8:c7:b3:9e:cf:01:0c:6f:d4:8c:c4:e7:fd:22:
         06:90:e5:b3:b3:a1:16:d5:55:b3:8c:57:6a:f3:16:28:32:ca:
         f6:1d:05:8f:15:88:8a:2a:4c:33:ae:d3:02:48:77:a0:08:bc:
         1e:7c:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org