Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135342e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3135342e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          PosvSJ9EFInsLunXkuP0zD1vZBBBq6Fgy8X/p72F/3Y=
Subject key identifier:   38:C2:B3:1D:1C:89:85:A0:ED:DE:FD:EC:CE:DA:75:56:A0:13:44:EA
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       4933DF57A3DF2C0EE892E5F3D4376107E969856D
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135342e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 02 Oct 2024 10:47:27 +0000
ROA not before:           Wed 02 Oct 2024 10:42:27 +0000
ROA not after:            Wed 01 Oct 2025 10:47:27 +0000
asID:                     262973
IP address blocks:        179.108.154.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:33:df:57:a3:df:2c:0e:e8:92:e5:f3:d4:37:61:07:e9:69:85:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  2 10:42:27 2024 GMT
            Not After : Oct  1 10:47:27 2025 GMT
        Subject: CN=38C2B31D1C8985A0EDDEFDECCEDA7556A01344EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:08:db:35:0f:85:c2:05:bb:b3:3e:7b:1a:
                    bd:5e:a1:c2:81:a8:75:41:72:0e:ae:af:65:07:a1:
                    a9:0f:54:79:8e:c9:05:49:93:99:ba:ab:e1:11:a0:
                    ac:ff:f7:eb:02:fe:57:0d:6b:e7:cf:e6:e2:72:1a:
                    bf:9b:b8:e2:97:c1:7d:e4:b9:3e:19:a9:35:6e:2b:
                    6c:bd:e2:bf:bd:62:44:1a:92:51:cb:2f:26:74:4c:
                    69:64:ee:1f:f1:fd:97:c7:e0:0e:19:e4:d0:b9:7a:
                    9c:0c:3b:68:dc:89:dc:02:45:c4:95:ca:ed:94:aa:
                    2f:1c:46:75:83:14:44:55:cd:90:b4:f0:09:a3:60:
                    42:4a:d6:a7:7c:8d:10:36:4e:83:db:59:e4:0a:e5:
                    4c:10:72:3a:ee:f8:2d:d4:1e:21:3b:26:3a:6d:82:
                    a3:49:57:84:d6:73:6e:00:18:75:20:06:19:4f:9e:
                    d0:a3:9f:3b:34:ff:d7:3f:b2:a1:e8:40:6e:15:f7:
                    35:4e:d3:6f:45:1e:a0:b6:51:38:75:c2:61:f4:ba:
                    2b:84:9a:9f:1d:55:7e:6d:d4:38:9e:b7:59:98:a9:
                    75:41:2a:22:7b:50:5f:eb:64:c9:06:68:de:cd:00:
                    99:8e:13:ce:05:ba:e4:aa:2e:54:a3:e7:a0:8b:98:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C2:B3:1D:1C:89:85:A0:ED:DE:FD:EC:CE:DA:75:56:A0:13:44:EA
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135342e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:f1:28:76:12:62:2a:d2:c6:2a:f0:6f:95:84:55:fb:6e:c4:
         81:db:b3:18:b3:36:55:52:01:76:ff:43:bc:e5:a7:4b:d7:04:
         07:fb:c6:9e:33:9b:33:f5:cc:c0:a2:83:0b:ed:e3:88:b1:03:
         3b:54:d2:55:d0:9b:ad:9f:8e:46:be:4f:de:86:e0:dc:a1:7a:
         a8:d8:34:f0:37:31:55:ce:f7:c7:f6:90:99:a5:5e:97:50:be:
         2b:b8:a9:78:ff:73:58:7a:cf:70:56:0f:26:08:9b:d4:d1:d7:
         58:60:36:19:50:d1:78:7b:9e:1e:9a:2b:23:70:ff:fb:70:4e:
         2a:b8:3c:a6:f0:1a:2c:e3:c9:ef:45:27:46:74:46:31:17:4f:
         30:88:6c:d1:39:ec:1b:d8:05:27:dd:95:ec:55:7b:76:fd:d5:
         43:31:9b:37:23:8b:2b:40:29:3d:04:5a:cb:fd:d8:d3:0d:cc:
         34:2a:b8:f2:05:1e:90:88:50:5e:60:65:87:98:e0:fa:31:bd:
         68:34:78:5e:b9:3a:8c:cd:b0:76:9b:91:23:ae:1c:eb:1c:cb:
         19:5b:7a:fb:78:e2:0c:9e:94:5c:00:a9:68:33:6c:65:02:ee:
         6b:0d:a7:fa:21:c2:c8:8d:3f:ca:88:73:72:72:c2:af:8a:81:
         ae:9b:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org