Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134382e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3134382e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          EdAGkCWNqyNf2AhmBDI/e6ksk+mKY954v9iKvUk46sE=
Subject key identifier:   21:A9:EE:4F:0C:32:2C:EE:B8:96:CF:7A:E6:54:73:8B:FC:CB:28:CC
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       2FE803D794B7094BA9484E58B1A06E46954237AA
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134382e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 09 Oct 2024 13:08:58 +0000
ROA not before:           Wed 09 Oct 2024 13:03:58 +0000
ROA not after:            Wed 08 Oct 2025 13:08:58 +0000
asID:                     262973
IP address blocks:        179.108.148.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e8:03:d7:94:b7:09:4b:a9:48:4e:58:b1:a0:6e:46:95:42:37:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  9 13:03:58 2024 GMT
            Not After : Oct  8 13:08:58 2025 GMT
        Subject: CN=21A9EE4F0C322CEEB896CF7AE654738BFCCB28CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:70:95:26:de:df:dc:eb:d0:c7:76:f9:cd:
                    00:f8:e1:9e:c7:bd:1b:fa:35:62:ef:b0:f7:d6:fc:
                    8d:60:18:9f:90:9d:f3:8d:5f:41:a5:51:54:f1:ea:
                    f1:22:97:6b:a3:48:2a:c5:64:47:73:3f:b1:67:38:
                    03:28:05:9b:03:7c:cb:9d:ac:1e:d8:e5:3e:b4:3e:
                    4e:bf:69:97:4f:da:90:ee:2d:ab:97:e9:e9:cf:27:
                    4b:fe:14:68:05:48:00:f4:4b:0c:d7:61:1b:cd:e5:
                    7c:5f:fa:a5:57:41:4f:d7:b0:b1:3f:1a:a8:30:69:
                    dc:e4:a1:00:d9:ce:f0:17:0a:71:9d:05:22:e2:de:
                    bc:86:09:c0:0f:54:92:40:14:e4:dd:c8:0d:9f:ee:
                    10:23:0f:ee:8e:fe:ef:18:4e:a7:e7:01:85:26:08:
                    d1:65:7b:ae:5b:18:db:d8:7a:8d:c9:38:3d:81:19:
                    ac:6b:d3:4f:c5:a1:05:8f:64:db:36:b0:e4:e9:b7:
                    d8:21:e6:be:92:8f:fe:ea:d8:05:6c:46:7a:61:b4:
                    2a:e0:f5:33:59:ec:f7:21:86:fe:7a:d4:cb:2d:aa:
                    a3:1a:ea:81:4f:0a:d5:fb:d5:fa:5e:29:f7:ca:df:
                    fb:2a:6e:34:49:c9:48:93:5e:99:33:a6:a4:97:e9:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:EE:4F:0C:32:2C:EE:B8:96:CF:7A:E6:54:73:8B:FC:CB:28:CC
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134382e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:98:28:94:ba:0e:35:85:aa:21:ca:98:6e:5a:bb:2c:0c:
         4a:9d:55:51:a1:f3:b4:a4:12:5f:ac:3e:00:fb:e5:00:54:b9:
         07:3c:fc:01:1e:c3:00:77:cd:d6:00:8e:27:72:66:00:a7:48:
         a4:5e:37:a1:6e:1e:57:8b:76:4f:79:17:34:3c:31:ab:e0:49:
         e2:97:0e:04:18:2c:83:89:49:bc:7b:b4:8f:c3:d8:d3:bb:c5:
         c7:a7:9d:ae:f9:48:e7:3b:fb:f8:83:0d:60:74:dd:2b:38:c5:
         26:68:7d:69:af:a7:6a:7f:2b:94:75:d2:c6:dc:07:68:1a:96:
         67:1f:1b:7d:20:b1:ee:9a:39:2e:3a:79:67:fa:cd:d2:66:1d:
         c8:54:02:91:23:36:41:ce:b0:5b:a7:12:67:10:46:d1:5f:f2:
         eb:d0:cb:f9:78:89:1c:a1:04:f9:36:09:7d:2a:39:ce:d7:76:
         1f:58:64:50:d5:9a:e2:f5:48:4b:ab:85:06:35:30:85:e9:59:
         ea:de:61:6c:5b:6a:a4:3d:8f:00:f4:fb:56:9b:2b:fd:a5:ba:
         2c:10:20:81:60:8c:b8:d1:39:22:85:39:ee:b4:ce:c5:6c:c5:
         96:3b:8c:0b:b8:16:de:8b:f0:cd:ca:3a:71:8c:34:a1:39:65:
         76:f6:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 00:03:59 2024 by rpki-client on console-ams.rpki-client.org