Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133382e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3133382e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          vOPZochVIiNXO2WzEyUCWp92zDSLph7rNs65x2mDO9I=
Subject key identifier:   5E:0D:FD:FB:61:12:57:19:81:F0:94:A3:DB:AB:A6:AC:31:76:06:A7
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       490FB2426C83D4F489D358AE90D4D1D1C38EA9A6
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133382e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 09 Oct 2024 13:08:58 +0000
ROA not before:           Wed 09 Oct 2024 13:03:58 +0000
ROA not after:            Wed 08 Oct 2025 13:08:58 +0000
asID:                     262973
IP address blocks:        179.108.138.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0f:b2:42:6c:83:d4:f4:89:d3:58:ae:90:d4:d1:d1:c3:8e:a9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  9 13:03:58 2024 GMT
            Not After : Oct  8 13:08:58 2025 GMT
        Subject: CN=5E0DFDFB6112571981F094A3DBABA6AC317606A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:91:1e:cb:ce:ff:c6:30:7c:e3:c4:86:2f:
                    53:79:b5:88:df:e6:20:bd:da:60:ad:c0:98:74:85:
                    0c:65:16:2b:49:c7:23:1a:2e:99:e1:39:21:70:9c:
                    22:67:4e:17:31:0f:82:c2:5f:2b:51:cf:49:9f:6d:
                    ad:97:3d:15:40:8c:83:c9:56:eb:0c:e9:84:7c:53:
                    bf:a8:88:c2:f9:18:d7:db:c0:fa:f0:9b:1d:9d:98:
                    31:db:19:ea:e9:32:95:aa:0e:38:8c:40:ba:9b:35:
                    ce:4a:2a:de:5f:30:8a:6e:fc:2a:5f:bb:73:6e:9b:
                    62:6a:83:a6:e3:d5:74:10:68:b2:8b:2b:be:ea:c8:
                    a5:97:cd:d0:e8:99:c5:88:1b:35:31:cf:63:e6:bb:
                    52:1f:16:64:12:58:6d:29:45:7e:7e:48:38:df:20:
                    86:c2:f3:9f:70:36:6b:49:cf:0e:3a:5b:2e:06:8d:
                    3b:06:7d:a8:83:0b:08:6c:b6:f3:17:0f:ae:af:6e:
                    f5:a7:83:c7:bc:55:45:e8:de:07:71:68:8b:e0:e4:
                    aa:a7:50:b5:ab:a4:4e:27:a4:3b:5c:dc:6a:19:91:
                    fd:13:33:74:1c:d0:8c:f9:2c:3d:f9:5f:ee:3c:b7:
                    a6:1d:59:79:a4:d2:ab:55:d5:4c:86:6e:0e:2d:8e:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:FD:FB:61:12:57:19:81:F0:94:A3:DB:AB:A6:AC:31:76:06:A7
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133382e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:bb:8a:f3:20:80:f4:d5:8c:06:82:b6:b2:fd:d3:a2:1e:c6:
         47:ad:15:84:d8:cd:49:4e:13:6a:6a:cf:c7:06:d8:60:c1:6c:
         10:a3:59:13:1f:2b:a1:a8:78:c5:7c:a6:d7:14:75:8c:ca:c5:
         49:05:bd:ed:e8:ac:fc:4d:90:80:8b:ff:0c:83:a0:75:5c:88:
         0c:83:49:53:40:2d:37:7d:3f:ea:b2:83:88:df:ff:18:46:ab:
         ff:d8:9c:7c:50:5c:3a:2a:d3:f0:b2:62:ed:2a:84:66:c4:67:
         e7:56:b5:c6:a3:99:fe:82:2b:78:3e:0e:b9:71:09:7f:88:0d:
         61:96:5f:d2:24:8c:58:0b:7b:7b:c3:1f:07:e4:65:94:20:ec:
         ce:37:3a:aa:64:bb:38:d0:cf:ca:7d:57:6a:45:07:b6:c8:04:
         f4:94:84:c5:e4:0d:74:7f:96:e0:81:95:03:75:5f:0d:a2:ab:
         8c:77:dd:79:f3:1f:81:73:2a:86:b8:de:8d:6a:17:c3:92:7b:
         7d:8c:f3:63:72:f6:0d:a3:26:4d:48:2a:58:5d:f8:21:42:46:
         c3:8d:58:a1:d1:d8:f8:a6:6d:fb:4b:2c:99:5a:77:77:96:03:
         67:3a:db:18:3d:6e:26:c4:9f:58:9e:8a:07:3d:6f:a8:79:6f:
         2e:1a:c0:f8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSQ+yQmyD1PSJ01iukNTR0cOOqaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDEwMDkxMzAzNThaFw0yNTEwMDgxMzA4NThaMDMxMTAvBgNV
BAMTKDVFMERGREZCNjExMjU3MTk4MUYwOTRBM0RCQUJBNkFDMzE3NjA2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWZEey87/xjB848SGL1N5tYjf
5iC92mCtwJh0hQxlFitJxyMaLpnhOSFwnCJnThcxD4LCXytRz0mfba2XPRVAjIPJ
VusM6YR8U7+oiML5GNfbwPrwmx2dmDHbGerpMpWqDjiMQLqbNc5KKt5fMIpu/Cpf
u3Num2Jqg6bj1XQQaLKLK77qyKWXzdDomcWIGzUxz2Pmu1IfFmQSWG0pRX5+SDjf
IIbC859wNmtJzw46Wy4GjTsGfaiDCwhstvMXD66vbvWng8e8VUXo3gdxaIvg5Kqn
ULWrpE4npDtc3GoZkf0TM3Qc0Iz5LD35X+48t6YdWXmk0qtV1UyGbg4tjlRfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXg39+2ESVxmB8JSj26umrDF2BqcwHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNsijANBgkqhkiG9w0BAQsFAAOCAQEAbbuK
8yCA9NWMBoK2sv3Toh7GR60VhNjNSU4TamrPxwbYYMFsEKNZEx8roah4xXym1xR1
jMrFSQW97eis/E2QgIv/DIOgdVyIDINJU0AtN30/6rKDiN//GEar/9icfFBcOirT
8LJi7SqEZsRn51a1xqOZ/oIreD4OuXEJf4gNYZZf0iSMWAt7e8MfB+RllCDszjc6
qmS7ONDPyn1XakUHtsgE9JSExeQNdH+W4IGVA3VfDaKrjHfdefMfgXMqhrjejWoX
w5J7fYzzY3L2DaMmTUgqWF34IUJGw41YodHY+KZt+0ssmVp3d5YDZzrbGD1uJsSf
WJ6KBz1vqHlvLhrA+A==
-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org