Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133302e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3133302e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          ogwdwV+OaQyCiLl1ojNsCizDWBZcACbAHMUpdQ+3noM=
Subject key identifier:   3A:8D:8F:8B:C2:D8:E0:D9:90:6F:DE:89:D3:2F:B4:AF:4B:38:62:AA
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       140E35C96700506D3CE1524CEAE02D5205DD2CCE
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133302e302f32332d3233203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:28 +0000
ROA not before:           Tue 24 Sep 2024 17:40:28 +0000
ROA not after:            Tue 23 Sep 2025 17:45:28 +0000
asID:                     262973
IP address blocks:        179.108.130.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0e:35:c9:67:00:50:6d:3c:e1:52:4c:ea:e0:2d:52:05:dd:2c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:28 2024 GMT
            Not After : Sep 23 17:45:28 2025 GMT
        Subject: CN=3A8D8F8BC2D8E0D9906FDE89D32FB4AF4B3862AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:77:3f:99:22:0c:80:89:7f:2f:69:fe:69:
                    60:d8:85:a6:14:90:8d:5c:de:41:d3:b4:62:56:ca:
                    d3:a9:98:0a:96:14:2a:99:e4:d4:bc:fe:44:46:e2:
                    28:72:07:8e:ea:06:f3:02:77:63:36:74:db:00:c5:
                    d9:e1:d2:ac:ac:df:0b:76:e4:f5:a6:6d:28:b3:b5:
                    60:c5:0a:da:1c:4e:90:52:e9:5b:1d:d1:88:7c:fc:
                    7a:53:b0:fd:af:6e:e6:2d:e6:13:63:60:3d:77:15:
                    a6:46:01:3a:8e:d3:8a:4e:0a:2f:84:14:a4:92:1e:
                    be:5e:8b:e6:a6:72:28:2e:d9:b4:a4:2e:2b:a5:f0:
                    4d:47:e1:9b:15:8b:00:30:d2:6e:6a:c6:a6:1f:ee:
                    4f:89:4c:45:40:45:b3:d1:d8:7c:e7:4c:01:f8:5b:
                    27:54:aa:92:f7:d8:4a:13:1b:c0:07:0b:30:ec:71:
                    64:40:89:7b:eb:9f:94:99:12:ad:84:0d:a7:2e:7b:
                    5b:eb:4c:aa:c5:51:fa:70:1b:81:3a:ca:12:23:7d:
                    87:40:3b:4e:b2:71:46:fb:0d:fc:16:f2:3c:b1:2f:
                    92:4a:cb:1d:7f:41:54:0d:ee:a4:c9:85:3f:1e:e3:
                    ce:79:ec:2b:9a:90:2c:6b:b7:33:fe:75:ac:78:61:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8D:8F:8B:C2:D8:E0:D9:90:6F:DE:89:D3:2F:B4:AF:4B:38:62:AA
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133302e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:b4:8a:3e:fd:33:e6:2d:10:8f:53:e8:80:da:80:7e:7f:
         fb:2e:f7:3b:3f:7d:73:b6:69:4d:c2:a1:38:73:8e:09:f0:34:
         f0:90:61:ee:34:1f:3d:af:90:5c:b9:aa:88:af:f7:f9:aa:d1:
         44:d3:ed:ad:91:91:5d:94:70:a9:1c:36:9f:a7:f3:c7:ff:81:
         15:4a:28:c2:1d:bd:33:6e:29:f9:ce:51:1b:ad:c9:5d:d2:20:
         f4:e9:76:78:8e:6d:2a:5e:8d:31:03:3c:db:6a:9f:4d:59:57:
         04:88:be:20:f6:c9:31:9f:87:b5:ca:06:68:76:72:dc:dd:62:
         fe:fd:e0:47:88:fe:3a:af:49:25:2b:78:a4:c6:23:58:6c:30:
         4d:56:36:7e:84:77:b0:07:5c:0a:be:71:99:49:9e:ab:a9:8f:
         5b:b8:4b:f4:98:04:41:fe:32:60:fb:ff:a3:36:c3:7d:c8:dc:
         82:22:6c:69:d9:6f:4f:a9:66:24:01:8f:e7:9a:42:13:ba:36:
         08:9f:49:00:45:c4:1a:ef:be:3f:8e:6f:0c:82:06:74:22:1f:
         af:f8:eb:e0:05:54:86:b5:fc:af:64:d5:7d:8b:5d:99:83:00:
         e3:a7:4e:25:a7:7d:1c:37:e0:4f:1f:1a:59:5d:2e:92:d0:7a:
         bf:93:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org