Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134362e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3134362e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          X5/89pKIrGCxO45hqycGy0pbHljjWs4461KlDpgbDQI=
Subject key identifier:   8B:6C:08:B4:89:1A:1F:D6:40:12:5B:DA:01:C6:9A:89:2A:CD:48:33
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       4395ACF1A7611AD568913E5449C7591FF12E0F91
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134362e302f32332d3233203d3e20323632393733.roa
Signing time:             Sat 28 Sep 2024 12:48:33 +0000
ROA not before:           Sat 28 Sep 2024 12:43:33 +0000
ROA not after:            Sat 27 Sep 2025 12:48:33 +0000
asID:                     262973
IP address blocks:        179.108.146.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:95:ac:f1:a7:61:1a:d5:68:91:3e:54:49:c7:59:1f:f1:2e:0f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 28 12:43:33 2024 GMT
            Not After : Sep 27 12:48:33 2025 GMT
        Subject: CN=8B6C08B4891A1FD640125BDA01C69A892ACD4833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:79:17:f1:cf:78:90:52:fc:f9:47:89:30:
                    63:4b:39:8b:1f:cb:6f:d7:82:2a:f0:d8:c8:18:06:
                    c4:90:0e:e9:35:e1:1a:ec:e4:4a:0c:94:a4:16:cf:
                    37:88:fd:4f:4f:73:a6:82:21:56:cb:5a:2c:71:ef:
                    7d:51:db:eb:2e:38:0b:03:76:79:29:b6:e5:dd:8a:
                    ff:3b:d7:4c:13:5c:65:47:bb:5f:af:7a:c9:20:af:
                    c0:14:e9:c0:e9:7f:6a:88:41:04:ce:c9:e9:bf:97:
                    ce:fd:54:f5:90:b8:40:b4:fd:79:df:4f:0a:49:e4:
                    06:0c:dc:2f:ec:59:bb:9d:e8:a1:b9:8b:39:c5:9d:
                    7a:88:c9:5c:f7:c5:d6:98:5a:45:1b:61:2e:39:f2:
                    c5:37:1a:a0:eb:19:5a:3f:a8:91:ac:75:3c:51:28:
                    fb:14:6a:cf:00:24:33:13:e3:b9:86:ab:97:f3:4a:
                    8f:da:60:da:9e:be:41:bf:4a:06:c9:85:f9:1e:bc:
                    0f:2b:ba:d9:d0:74:52:60:9a:cf:9d:19:83:93:a6:
                    3c:e5:c1:8c:86:cc:ad:03:a2:d9:24:46:c8:dc:1b:
                    ab:59:4e:19:2c:f9:ea:7e:d1:5f:21:2b:a2:2b:bb:
                    b2:7a:01:d8:7c:f6:1a:0a:40:34:6e:7a:b9:1b:9f:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6C:08:B4:89:1A:1F:D6:40:12:5B:DA:01:C6:9A:89:2A:CD:48:33
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134362e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:7b:e6:ac:d6:94:85:4c:4a:2c:43:c8:68:14:b4:85:8d:ce:
         af:0f:b0:d7:8d:7e:4b:20:68:60:8f:68:71:a0:0e:d9:29:5a:
         57:4c:67:64:1b:cd:74:de:79:0d:e4:fc:86:84:af:e9:f5:95:
         38:d8:d6:4a:66:0c:49:0c:49:d3:c0:be:99:be:f4:88:59:98:
         56:0b:0a:c6:cc:79:a9:95:19:2e:3c:d8:1a:56:36:b6:0f:b1:
         e0:91:1d:d4:65:cd:b0:0a:7c:a8:1c:3e:22:ac:c9:f1:67:6b:
         04:34:6e:0a:8f:b5:4b:89:f8:8c:f8:85:8d:26:9c:7f:80:24:
         f2:0e:77:9c:39:3b:c5:a7:ef:41:70:3c:41:b5:49:9f:09:b7:
         96:56:01:bf:66:8a:ee:ef:4b:6e:cc:c1:5c:0b:f8:1c:9c:4d:
         15:46:47:c4:67:c4:a8:82:0a:38:35:97:b7:37:bf:76:29:3e:
         ec:c2:45:af:04:3f:bc:a3:31:43:97:d0:eb:9e:9f:88:73:fc:
         c6:98:82:1b:cb:cd:ca:af:38:09:0c:42:7b:ec:e9:7b:11:1a:
         bd:df:57:72:83:a1:57:55:0b:7e:95:86:2f:73:00:2f:23:c4:
         34:70:bc:93:50:bb:49:30:62:bf:01:42:22:67:93:ff:a1:64:
         92:69:c4:a5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ5Ws8adhGtVokT5UScdZH/EuD5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDA5MjgxMjQzMzNaFw0yNTA5MjcxMjQ4MzNaMDMxMTAvBgNV
BAMTKDhCNkMwOEI0ODkxQTFGRDY0MDEyNUJEQTAxQzY5QTg5MkFDRDQ4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVH3kX8c94kFL8+UeJMGNLOYsf
y2/Xgirw2MgYBsSQDuk14Rrs5EoMlKQWzzeI/U9Pc6aCIVbLWixx731R2+suOAsD
dnkptuXdiv8710wTXGVHu1+veskgr8AU6cDpf2qIQQTOyem/l879VPWQuEC0/Xnf
TwpJ5AYM3C/sWbud6KG5iznFnXqIyVz3xdaYWkUbYS458sU3GqDrGVo/qJGsdTxR
KPsUas8AJDMT47mGq5fzSo/aYNqevkG/SgbJhfkevA8rutnQdFJgms+dGYOTpjzl
wYyGzK0DotkkRsjcG6tZThks+ep+0V8hK6Iru7J6Adh89hoKQDRuerkbn6a5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUi2wItIkaH9ZAElvaAcaaiSrNSDMwHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzQzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNskjANBgkqhkiG9w0BAQsFAAOCAQEAlXvm
rNaUhUxKLEPIaBS0hY3Orw+w141+SyBoYI9ocaAO2SlaV0xnZBvNdN55DeT8hoSv
6fWVONjWSmYMSQxJ08C+mb70iFmYVgsKxsx5qZUZLjzYGlY2tg+x4JEd1GXNsAp8
qBw+IqzJ8WdrBDRuCo+1S4n4jPiFjSacf4Ak8g53nDk7xafvQXA8QbVJnwm3llYB
v2aK7u9LbszBXAv4HJxNFUZHxGfEqIIKODWXtze/dik+7MJFrwQ/vKMxQ5fQ656f
iHP8xpiCG8vNyq84CQxCe+zpexEavd9XcoOhV1ULfpWGL3MALyPENHC8k1C7STBi
vwFCImeT/6FkkmnEpQ==
-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org