Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133322e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3133322e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          N0OAwucFpX9HH1PJ1N0pie0GbS2ZrAQFVrzjtSKLAnI=
Subject key identifier:   AF:F7:A8:6D:21:F7:E7:95:46:A4:45:08:87:E7:54:B8:02:A3:DE:A5
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       72532D0633367D977AF989167FBB47C0E427E76F
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133322e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 02 Oct 2024 10:47:27 +0000
ROA not before:           Wed 02 Oct 2024 10:42:27 +0000
ROA not after:            Wed 01 Oct 2025 10:47:27 +0000
asID:                     262973
IP address blocks:        179.108.132.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:53:2d:06:33:36:7d:97:7a:f9:89:16:7f:bb:47:c0:e4:27:e7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  2 10:42:27 2024 GMT
            Not After : Oct  1 10:47:27 2025 GMT
        Subject: CN=AFF7A86D21F7E79546A4450887E754B802A3DEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:50:57:07:2a:22:5c:60:99:11:53:24:a5:38:
                    c8:16:e2:6f:e8:9b:09:35:ee:d3:fb:67:22:af:e3:
                    ed:a2:7f:02:06:bc:8f:d9:a1:93:4d:0a:bf:dd:f0:
                    1d:fe:fc:61:76:48:dc:68:1d:0c:75:8b:ea:c3:92:
                    aa:c5:05:bb:49:2a:70:68:a4:0f:8a:d3:1f:38:dc:
                    60:90:7d:1d:7e:95:9b:35:4a:c5:4e:cf:be:d5:5e:
                    7c:c2:08:42:d3:f8:ff:12:09:e8:37:06:d0:77:6f:
                    5b:57:6c:86:56:4b:f3:58:38:9f:23:4f:e0:d9:ec:
                    b3:6b:8d:f9:0d:cf:7e:43:7f:df:5b:d7:a5:5b:41:
                    08:95:c6:db:03:2b:d4:63:03:d1:88:46:e3:94:87:
                    bd:ec:14:79:86:07:46:cd:64:bd:d0:de:33:68:46:
                    d2:50:4b:e1:34:b4:8a:64:1e:be:4d:de:44:2f:20:
                    d1:a7:71:eb:a3:40:1e:80:40:5f:4d:d4:00:a9:c0:
                    b1:d5:37:64:13:b0:49:ff:74:85:d8:f1:91:e5:09:
                    56:37:1c:cf:1d:33:7a:94:4a:75:cd:77:34:1d:bd:
                    09:03:e7:6f:44:e7:c3:51:af:72:96:c7:db:e5:2d:
                    bc:89:0b:6d:0b:02:b1:9d:4a:80:33:ca:36:5e:6a:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F7:A8:6D:21:F7:E7:95:46:A4:45:08:87:E7:54:B8:02:A3:DE:A5
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133322e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:21:2f:33:af:41:bc:17:b0:a5:d6:ea:ae:6c:c4:f5:43:76:
         12:56:0d:29:87:b0:a8:d8:85:70:07:e3:59:82:8c:e9:76:04:
         fb:47:95:e5:55:bd:87:a0:9a:6b:83:ce:3d:1c:bb:c1:ad:8e:
         c7:10:42:9a:de:4d:cc:37:a7:08:79:4f:27:e7:e6:71:1d:ee:
         99:69:a5:6a:50:46:3c:9e:24:a5:1f:f8:eb:37:e1:97:7c:03:
         e2:f5:3c:21:39:dd:5f:5f:7a:52:5a:74:5d:4a:ab:07:36:72:
         4e:99:3a:b0:f8:cf:75:0b:74:29:74:44:65:bd:a5:1f:2f:21:
         a5:29:88:83:e1:e3:1f:aa:a6:88:8d:2b:ff:b6:28:20:23:ef:
         1b:ac:90:55:e9:19:22:37:7c:cd:fb:0b:60:01:72:c6:a6:20:
         05:fd:30:17:be:b1:87:bb:5a:62:33:24:31:83:4f:33:a3:8b:
         4f:c5:ec:17:bd:c9:e2:69:6a:26:37:be:3d:29:44:5a:44:28:
         26:16:97:0e:8d:47:24:cb:fb:43:f0:d9:53:cc:af:44:07:b4:
         0d:5d:99:3d:37:11:7a:51:d9:11:8f:07:3d:c1:e8:21:cb:df:
         ea:20:af:d2:16:77:1d:d1:9a:e3:34:e5:bc:9f:8d:17:3e:0f:
         66:61:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org