Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133342e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3133342e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          /z8MRZ+TITLb3FAkkv9W4bh3CkyJp1YTpAXjEyxk2TI=
Subject key identifier:   57:46:E3:95:17:CE:B9:4E:4E:3F:29:DD:3F:C7:B0:E4:A5:13:91:8B
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       69521CBAA883C15601BE1C6AC91A1151DB550328
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133342e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 09 Oct 2024 13:08:58 +0000
ROA not before:           Wed 09 Oct 2024 13:03:58 +0000
ROA not after:            Wed 08 Oct 2025 13:08:58 +0000
asID:                     262973
IP address blocks:        179.108.134.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:52:1c:ba:a8:83:c1:56:01:be:1c:6a:c9:1a:11:51:db:55:03:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  9 13:03:58 2024 GMT
            Not After : Oct  8 13:08:58 2025 GMT
        Subject: CN=5746E39517CEB94E4E3F29DD3FC7B0E4A513918B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:f2:c4:e7:cd:95:93:2b:e7:81:da:c4:f3:
                    3c:6d:34:fc:96:bb:95:0c:52:c7:99:ac:22:16:32:
                    dd:c8:9a:29:c3:af:9c:af:e7:0e:a0:77:74:15:83:
                    cf:f6:b7:de:7c:5a:d4:aa:1b:5b:a8:2d:1a:f9:63:
                    7e:e1:7b:a7:92:85:4d:7d:90:3e:e8:4d:3f:44:70:
                    17:d5:86:0b:f3:98:49:6c:d4:b9:3f:5d:0e:79:fc:
                    ed:14:de:23:2e:a2:e8:a8:17:58:2f:13:5b:a6:bd:
                    e0:fb:44:03:9a:d5:38:2d:16:19:36:14:02:27:5d:
                    cb:59:29:ac:18:55:98:cd:22:9c:74:3d:3b:6d:55:
                    97:6e:f6:e0:13:8b:f6:1a:06:f8:6d:dc:9e:6b:a7:
                    e3:3a:ab:86:74:5e:63:1f:16:fc:a7:9a:59:a8:c6:
                    36:2e:f8:47:33:91:15:d7:47:f0:f4:72:e7:ff:72:
                    fc:3d:04:1f:d1:46:56:c1:c8:3d:b8:27:ab:c2:1b:
                    9f:f7:c6:63:36:a1:5d:a7:9b:58:20:21:37:b5:e3:
                    ea:07:34:a8:a2:7b:96:b8:20:f5:50:59:22:8b:f9:
                    fb:95:3d:41:f7:48:36:7a:3a:f6:5d:11:40:cb:c2:
                    65:af:25:de:f2:b7:6a:9f:91:e0:a2:df:4c:64:77:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:46:E3:95:17:CE:B9:4E:4E:3F:29:DD:3F:C7:B0:E4:A5:13:91:8B
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133342e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:91:a7:fa:1f:bb:86:08:b6:7b:c8:20:8b:ce:56:d8:8a:
         6b:5e:2d:94:7a:fc:3a:97:68:11:40:03:27:01:81:dc:d1:40:
         e0:62:0b:e4:89:e2:15:04:91:81:16:51:b0:39:fb:ab:bc:c1:
         72:19:84:d5:68:19:6f:aa:9a:23:5e:c1:91:80:28:cf:c2:bc:
         be:c1:0c:a9:4b:81:7b:bc:37:1b:ca:77:a5:aa:ce:28:ec:0b:
         d2:34:df:9c:b9:bb:96:b5:27:f1:c8:b2:bf:2e:ee:e0:0b:65:
         7e:e4:d5:1a:e7:c8:72:a0:6b:2b:07:79:57:3d:ca:91:5f:cf:
         78:37:9a:43:89:63:64:d7:82:f3:39:ea:9e:ea:a4:a3:b2:c3:
         e0:0d:a1:53:de:f8:fa:51:9b:94:36:21:0c:fc:7a:c2:ac:c3:
         47:76:c7:fd:f3:4d:56:d3:82:af:a5:2a:e0:6e:e6:98:bc:cc:
         e0:cd:62:13:0e:8f:74:de:a7:43:91:ab:6c:d9:d4:43:d4:44:
         29:13:d6:ba:88:c7:70:75:5f:85:23:0c:4d:72:74:f2:41:56:
         2a:a2:c3:d4:a7:8b:06:f8:e2:ff:12:5d:52:c4:91:a4:47:25:
         32:68:fd:c2:2c:24:27:d3:99:db:05:f6:8e:8d:4c:39:a0:76:
         a3:e4:59:3d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaVIcuqiDwVYBvhxqyRoRUdtVAygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDEwMDkxMzAzNThaFw0yNTEwMDgxMzA4NThaMDMxMTAvBgNV
BAMTKDU3NDZFMzk1MTdDRUI5NEU0RTNGMjlERDNGQzdCMEU0QTUxMzkxOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4/LE582VkyvngdrE8zxtNPyW
u5UMUseZrCIWMt3IminDr5yv5w6gd3QVg8/2t958WtSqG1uoLRr5Y37he6eShU19
kD7oTT9EcBfVhgvzmEls1Lk/XQ55/O0U3iMuouioF1gvE1umveD7RAOa1TgtFhk2
FAInXctZKawYVZjNIpx0PTttVZdu9uATi/YaBvht3J5rp+M6q4Z0XmMfFvynmlmo
xjYu+EczkRXXR/D0cuf/cvw9BB/RRlbByD24J6vCG5/3xmM2oV2nm1ggITe14+oH
NKiie5a4IPVQWSKL+fuVPUH3SDZ6OvZdEUDLwmWvJd7yt2qfkeCi30xkd09NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUV0bjlRfOuU5OPyndP8ew5KUTkYswHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzMzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNshjANBgkqhkiG9w0BAQsFAAOCAQEAk12R
p/ofu4YItnvIIIvOVtiKa14tlHr8OpdoEUADJwGB3NFA4GIL5IniFQSRgRZRsDn7
q7zBchmE1WgZb6qaI17BkYAoz8K8vsEMqUuBe7w3G8p3parOKOwL0jTfnLm7lrUn
8ciyvy7u4AtlfuTVGufIcqBrKwd5Vz3KkV/PeDeaQ4ljZNeC8znqnuqko7LD4A2h
U974+lGblDYhDPx6wqzDR3bH/fNNVtOCr6Uq4G7mmLzM4M1iEw6PdN6nQ5GrbNnU
Q9REKRPWuojHcHVfhSMMTXJ08kFWKqLD1KeLBvji/xJdUsSRpEclMmj9wiwkJ9OZ
2wX2jo1MOaB2o+RZPQ==
-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org