Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          YZpD5xjB/TSmDzJr07QA8EsO0GE/ty6O+ZnIIUGJ2YY=
Subject key identifier:   78:A0:82:CA:7C:C5:A4:A6:8E:F1:FE:0B:10:77:AF:55:09:AF:C0:27
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       2302F120B26DD227EA06654E9AF804158BC5C3D0
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa
Signing time:             Sat 28 Sep 2024 12:48:33 +0000
ROA not before:           Sat 28 Sep 2024 12:43:33 +0000
ROA not after:            Sat 27 Sep 2025 12:48:33 +0000
asID:                     262973
IP address blocks:        179.108.152.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:02:f1:20:b2:6d:d2:27:ea:06:65:4e:9a:f8:04:15:8b:c5:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 28 12:43:33 2024 GMT
            Not After : Sep 27 12:48:33 2025 GMT
        Subject: CN=78A082CA7CC5A4A68EF1FE0B1077AF5509AFC027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:cd:de:5a:59:06:6d:59:27:67:49:9c:4b:
                    51:e9:d5:61:fb:99:5b:b7:75:5a:33:f3:75:e7:d7:
                    27:06:e8:f6:03:ec:cd:e2:e0:ee:61:c4:a3:17:ad:
                    4a:55:e5:50:5a:6a:94:a8:1d:67:6e:8f:bd:f4:69:
                    f6:c8:54:c8:92:ae:af:d8:20:72:d5:3c:3c:47:ce:
                    a7:68:a6:40:19:64:04:79:17:c2:ed:b2:d1:67:e7:
                    a6:bf:db:08:82:5d:77:ff:1d:03:e0:b9:8a:2a:1f:
                    68:88:38:49:70:aa:a2:e4:9f:f1:6f:40:8a:08:c2:
                    3b:e7:2b:df:39:a3:ca:ba:5c:e4:c6:d0:bf:f0:0f:
                    6d:20:5a:2b:d4:1e:4b:70:7f:9d:86:88:4d:66:23:
                    21:20:9c:2b:ac:3e:f3:11:30:e8:d2:6a:31:15:14:
                    5b:0f:70:9b:20:d3:f1:d4:50:a3:21:06:e2:dd:46:
                    bc:75:c1:a4:51:86:0f:84:ec:7a:83:d4:d5:35:de:
                    a7:7a:35:2d:e4:1f:4e:8a:6f:cc:18:81:2d:90:41:
                    24:11:76:8c:18:82:46:d1:6b:d9:36:be:e7:99:40:
                    51:7c:81:5e:3c:b0:14:02:be:cb:b0:cf:e8:e2:62:
                    85:fc:24:c3:bd:f2:0e:dc:c5:5e:0a:d1:54:83:07:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A0:82:CA:7C:C5:A4:A6:8E:F1:FE:0B:10:77:AF:55:09:AF:C0:27
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:8f:07:c2:23:bf:3b:8a:a3:aa:35:80:d9:6b:53:52:a3:
         a2:89:fd:27:d4:57:37:4b:84:47:0b:87:0d:df:bb:59:4e:76:
         32:41:0e:7c:3c:37:4a:0b:a9:30:ba:90:ca:de:bb:b3:cb:45:
         ba:e0:60:67:c5:00:e5:d7:ac:be:5d:ba:eb:76:ed:82:a6:1a:
         96:28:ca:00:2a:b8:cc:cb:c6:db:e1:21:14:44:01:6f:dc:05:
         2b:0b:c0:02:1e:ae:bc:23:7d:d9:6c:7c:59:50:48:a4:76:c3:
         65:0f:bd:6b:88:89:6e:df:b2:6f:c5:f8:4c:a8:dc:45:b4:81:
         a9:cf:1d:da:ab:ef:d3:69:a9:8a:93:62:79:e7:8f:66:97:06:
         38:cc:df:c0:16:dd:ae:63:55:82:5d:9b:7c:5a:8c:2f:2e:e3:
         23:92:64:ad:f4:3b:cb:4f:8c:e3:01:16:5c:59:b4:03:62:7e:
         b6:94:3a:36:39:24:80:b0:9a:db:42:0e:42:d5:f3:ff:c4:5d:
         0d:bc:10:a2:da:68:b5:d7:d6:77:4f:a7:b6:a7:eb:ab:44:fd:
         9c:84:03:9f:b3:2f:a9:7d:11:07:62:2e:3e:04:b7:95:aa:3f:
         6c:d2:e7:cd:d5:c1:fb:e5:61:6c:08:e0:64:f8:d9:d7:2e:5e:
         6e:65:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org