Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134302e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3134302e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          bbR17sSh/PZ2E+smJoFhxhgGLfrIiMc1rg+/qr6XL60=
Subject key identifier:   5F:F6:76:B3:A9:67:EE:23:68:C7:D7:57:7C:4A:54:B7:5C:E4:E8:57
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       31472D7A32DE1DB033D7726DC981146EBE4A6F76
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134302e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 09 Oct 2024 13:08:58 +0000
ROA not before:           Wed 09 Oct 2024 13:03:58 +0000
ROA not after:            Wed 08 Oct 2025 13:08:58 +0000
asID:                     262973
IP address blocks:        179.108.140.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:47:2d:7a:32:de:1d:b0:33:d7:72:6d:c9:81:14:6e:be:4a:6f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  9 13:03:58 2024 GMT
            Not After : Oct  8 13:08:58 2025 GMT
        Subject: CN=5FF676B3A967EE2368C7D7577C4A54B75CE4E857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:e8:3a:71:f8:97:48:e6:28:4a:86:2a:41:
                    3a:b2:87:9f:e2:40:55:de:83:c5:0c:ee:bf:92:7f:
                    0e:21:18:a9:86:17:77:ea:2c:7f:61:0c:d1:31:fc:
                    09:30:76:79:2c:86:df:b6:34:dd:4f:04:37:dc:84:
                    81:24:36:03:4f:c3:36:5c:6c:74:95:8b:5e:9f:7b:
                    23:c7:0e:02:9d:ca:80:45:bc:b5:22:a9:87:c9:d7:
                    a6:b5:ea:02:d8:8e:b2:65:1c:52:77:6d:44:1d:36:
                    3a:a7:49:3e:65:62:52:df:18:2c:0a:1a:ad:b3:9c:
                    17:b1:53:31:32:d9:ff:7c:ab:9c:4a:d9:ef:01:63:
                    26:3e:83:a2:65:0b:30:3d:b9:3a:02:81:f9:8f:e3:
                    5a:45:ef:66:57:c9:b1:c3:ad:2e:04:30:d1:ba:66:
                    c5:b4:a0:18:20:3e:f6:54:59:90:f3:9c:37:38:69:
                    49:aa:eb:54:b5:1b:dd:ef:a7:60:e3:fa:8a:4f:e5:
                    44:db:21:8a:97:5a:b4:fb:a6:96:38:20:f6:b0:ca:
                    89:bf:4e:d1:05:a4:9d:8c:60:0a:9f:f6:64:58:a5:
                    da:40:60:f9:81:01:30:7a:f7:d0:ff:a3:f1:f3:48:
                    07:85:16:17:ec:75:4a:33:fc:8e:ea:50:ea:6f:87:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:76:B3:A9:67:EE:23:68:C7:D7:57:7C:4A:54:B7:5C:E4:E8:57
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134302e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:74:27:c3:f6:35:eb:e4:38:c9:a1:14:50:35:b6:61:79:
         a8:9d:68:0b:03:a8:d5:c9:1b:00:72:d8:31:ec:9d:51:cd:34:
         d1:0f:e8:77:45:9e:a1:ef:70:17:88:bd:fb:a3:b8:e1:b0:9d:
         f4:14:00:bc:e6:9c:55:f7:30:38:2e:12:94:fb:23:18:b4:9a:
         5d:fe:36:4a:d2:81:fe:70:39:6d:6f:fb:1f:f6:1a:e2:1e:f1:
         eb:6d:15:ad:f9:c8:70:81:55:da:08:7f:f0:b4:20:a5:dd:27:
         26:c1:e4:90:4a:18:1a:3a:c9:3c:7a:b9:6a:e1:d4:b6:8c:01:
         0f:f5:75:23:83:8f:0d:d9:53:3d:19:70:39:25:98:c4:d1:36:
         1d:3c:65:d2:a7:f7:42:64:95:b5:09:98:34:96:58:d9:05:45:
         dd:81:67:19:df:5c:58:55:48:c9:53:ca:f6:00:be:26:54:9a:
         c6:72:3b:57:4d:e1:46:ce:f4:98:03:7a:4a:bd:c3:16:7a:9a:
         a9:a6:06:f7:93:27:b2:45:44:28:e4:a8:b0:b6:46:1a:d4:b6:
         59:02:01:48:3b:be:25:f6:30:ca:c5:b3:7b:9f:e4:51:f5:f4:
         86:03:ec:ed:6f:39:9f:57:3f:b8:c1:03:e7:d3:17:30:34:ef:
         9b:84:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 00:03:59 2024 by rpki-client on console-ams.rpki-client.org