Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133362e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3133362e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          HzQ4DvR3zbY+BuTEb0Rk+342cSpNHwKuqWgVCEeaJ7Y=
Subject key identifier:   F7:63:42:F2:55:A5:72:23:34:0E:3A:FE:31:64:EE:4D:BB:0E:99:A9
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       41469A47DA20545A0CA1D89E57F621C8F862BE9B
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133362e302f32332d3233203d3e20323632393733.roa
Signing time:             Thu 03 Oct 2024 11:17:43 +0000
ROA not before:           Thu 03 Oct 2024 11:12:43 +0000
ROA not after:            Thu 02 Oct 2025 11:17:43 +0000
asID:                     262973
IP address blocks:        179.108.136.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:46:9a:47:da:20:54:5a:0c:a1:d8:9e:57:f6:21:c8:f8:62:be:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  3 11:12:43 2024 GMT
            Not After : Oct  2 11:17:43 2025 GMT
        Subject: CN=F76342F255A57223340E3AFE3164EE4DBB0E99A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:a2:83:54:f6:5d:c9:45:d1:98:cd:55:bd:
                    6a:3e:72:16:be:76:e5:a5:e5:19:f7:00:ab:da:66:
                    c7:31:ab:1c:0c:6c:3d:d1:5e:e2:6d:23:ce:c0:28:
                    3f:59:f5:3d:2f:5f:69:9c:0b:4a:7b:fd:53:9f:27:
                    b4:7d:46:41:61:d5:79:b9:44:0b:71:93:ad:bc:0e:
                    ac:70:72:c0:08:78:91:96:5d:c5:52:ee:bc:89:6b:
                    01:46:80:d8:5b:2f:ad:7c:f8:cf:df:ad:45:96:e1:
                    a5:a1:27:fa:53:26:28:41:f2:8f:8d:55:ba:38:14:
                    32:84:2c:43:f6:b1:7d:f2:e1:b3:79:58:ef:36:fb:
                    7f:bd:95:1b:2f:d6:50:35:76:1e:d8:6e:37:57:1d:
                    d6:0c:19:dd:22:e5:97:6d:90:cd:16:8c:dc:30:91:
                    ce:2c:c6:7e:c6:21:9f:16:7a:e1:35:94:74:d6:55:
                    f9:12:d2:91:11:30:90:9b:90:ef:ff:c5:ba:4d:b6:
                    47:01:8d:a8:6e:25:ec:13:ab:bc:b0:e1:4c:20:63:
                    5c:3b:dc:03:54:be:f4:a1:32:e9:56:a1:23:0d:10:
                    3b:24:43:49:1c:27:c1:76:97:cc:00:b4:c2:2d:b0:
                    31:5a:b5:d3:09:0c:53:6e:1b:13:42:75:b0:36:d7:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:63:42:F2:55:A5:72:23:34:0E:3A:FE:31:64:EE:4D:BB:0E:99:A9
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133362e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:e4:4a:22:28:b9:27:e6:5b:d2:8a:93:9f:48:85:4c:f8:
         c4:58:19:39:cd:d9:c5:c1:23:c4:45:37:e0:18:4c:ea:bf:19:
         5b:c1:10:4f:8d:a0:2d:e5:31:ca:97:9f:44:d7:30:f9:b4:ab:
         28:40:52:59:fd:2c:e8:e6:77:0c:00:26:75:34:ff:49:53:52:
         98:b0:a5:59:ee:f6:17:de:48:63:ee:a0:10:b1:11:c9:69:30:
         f1:1f:3d:cf:2c:3f:28:a9:ba:3a:0d:6b:7f:a2:32:6b:fa:51:
         ac:45:16:8a:19:1e:ea:dd:64:74:22:1d:27:08:1a:e0:e9:0b:
         61:41:8e:ea:01:c2:f4:fc:ad:b6:b4:93:a7:8d:f2:ae:f6:15:
         2a:7e:da:b1:31:e7:8a:9b:75:15:ec:99:c2:3d:37:8d:3c:b5:
         ee:8b:3e:07:f5:e4:3b:00:94:25:c2:79:92:8b:29:59:a7:9e:
         4f:1f:ef:2f:c8:80:c3:e2:a1:f6:8d:17:6f:d6:f7:05:27:a5:
         82:76:e1:09:4b:b4:ef:7f:31:4c:a7:69:91:3c:59:04:f9:40:
         9d:e8:f2:c2:4e:e0:52:64:01:30:df:5d:de:36:b4:7a:ac:f2:
         56:ab:9a:24:df:3f:7c:83:c6:0e:ed:92:ba:07:9e:c4:a4:7e:
         c3:d3:55:e5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQUaaR9ogVFoModieV/YhyPhivpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDEwMDMxMTEyNDNaFw0yNTEwMDIxMTE3NDNaMDMxMTAvBgNV
BAMTKEY3NjM0MkYyNTVBNTcyMjMzNDBFM0FGRTMxNjRFRTREQkIwRTk5QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lqKDVPZdyUXRmM1VvWo+cha+
duWl5Rn3AKvaZscxqxwMbD3RXuJtI87AKD9Z9T0vX2mcC0p7/VOfJ7R9RkFh1Xm5
RAtxk628DqxwcsAIeJGWXcVS7ryJawFGgNhbL618+M/frUWW4aWhJ/pTJihB8o+N
Vbo4FDKELEP2sX3y4bN5WO82+3+9lRsv1lA1dh7YbjdXHdYMGd0i5ZdtkM0WjNww
kc4sxn7GIZ8WeuE1lHTWVfkS0pERMJCbkO//xbpNtkcBjahuJewTq7yw4UwgY1w7
3ANUvvShMulWoSMNEDskQ0kcJ8F2l8wAtMItsDFatdMJDFNuGxNCdbA218IBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU92NC8lWlciM0Djr+MWTuTbsOmakwHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNsiDANBgkqhkiG9w0BAQsFAAOCAQEAX3zk
SiIouSfmW9KKk59IhUz4xFgZOc3ZxcEjxEU34BhM6r8ZW8EQT42gLeUxypefRNcw
+bSrKEBSWf0s6OZ3DAAmdTT/SVNSmLClWe72F95IY+6gELERyWkw8R89zyw/KKm6
Og1rf6Iya/pRrEUWihke6t1kdCIdJwga4OkLYUGO6gHC9PyttrSTp43yrvYVKn7a
sTHnipt1FeyZwj03jTy17os+B/XkOwCUJcJ5kospWaeeTx/vL8iAw+Kh9o0Xb9b3
BSelgnbhCUu0738xTKdpkTxZBPlAnejywk7gUmQBMN9d3ja0eqzyVquaJN8/fIPG
Du2SugeexKR+w9NV5Q==
-----END CERTIFICATE-----
Generated at Sun Nov 3 00:03:59 2024 by rpki-client on console-ams.rpki-client.org