Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135362e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3135362e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          GwR/Zc1ip9fesWzBM0JgKOnS5PzTeh9pj/sd8UJ+Q/w=
Subject key identifier:   61:60:8A:00:33:81:53:23:17:6E:4A:13:BE:5C:65:D2:7E:5C:0F:17
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       2741FDD941F0B072C420BD58C336143A016EEDA1
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135362e302f32332d3233203d3e20323632393733.roa
Signing time:             Sat 28 Sep 2024 12:48:33 +0000
ROA not before:           Sat 28 Sep 2024 12:43:33 +0000
ROA not after:            Sat 27 Sep 2025 12:48:33 +0000
asID:                     262973
IP address blocks:        179.108.156.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:41:fd:d9:41:f0:b0:72:c4:20:bd:58:c3:36:14:3a:01:6e:ed:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 28 12:43:33 2024 GMT
            Not After : Sep 27 12:48:33 2025 GMT
        Subject: CN=61608A0033815323176E4A13BE5C65D27E5C0F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:fe:c6:b7:76:23:bd:37:51:de:45:a7:89:
                    74:76:5e:ef:79:c6:5c:68:2f:d1:36:24:fe:eb:e9:
                    b6:5c:bf:0a:dc:b2:98:42:61:07:4f:b3:e8:a7:d6:
                    dc:a3:45:b6:b2:96:21:2b:4a:fa:7c:42:2d:de:e6:
                    d3:2c:f9:45:83:23:8d:30:43:c6:f7:c9:50:77:52:
                    e8:9b:ba:dc:43:08:e3:8f:f6:f8:81:f8:1e:b9:e3:
                    14:67:57:e3:8e:0b:da:4d:4f:32:bb:8d:9c:5d:9a:
                    8e:a2:04:d0:ee:99:4f:16:a7:39:67:02:1a:42:9a:
                    c3:6a:d9:ba:03:76:3b:c1:da:ff:b2:cf:97:f1:34:
                    12:d3:9e:8e:4e:d5:60:da:dc:3f:56:82:91:8a:46:
                    8f:ec:4a:61:92:27:39:30:dd:5f:a6:ba:16:17:37:
                    2f:a7:5c:e9:d4:8b:f4:69:99:a9:41:18:d5:2b:a2:
                    40:84:b4:64:2c:83:6d:77:26:8e:b4:15:03:14:8e:
                    5d:dc:df:1d:e2:ae:83:27:41:fd:2b:13:86:43:5a:
                    fc:ee:c6:1a:b4:04:5a:b9:c8:9a:dd:83:97:03:13:
                    23:80:cd:b1:16:20:d3:56:8f:12:1d:70:13:e1:0e:
                    f7:99:12:56:13:94:89:c7:d8:d5:b3:ba:bf:d4:3f:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:8A:00:33:81:53:23:17:6E:4A:13:BE:5C:65:D2:7E:5C:0F:17
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135362e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:44:84:7e:12:36:88:75:44:e8:82:a2:f6:92:43:6b:9b:6e:
         52:e9:81:cd:64:79:21:46:64:4b:5d:a4:7d:17:4d:cb:0e:9a:
         c4:d0:d7:41:8e:72:0d:f5:81:a1:bf:e8:c3:fb:dc:43:e1:7b:
         52:5e:b9:85:5d:bf:1b:c4:79:27:33:75:7f:4e:92:33:87:80:
         23:fc:fe:98:77:a8:4e:5d:4d:69:22:02:71:32:09:7b:0f:53:
         db:cd:67:cc:d9:2f:46:ff:5a:4a:3f:69:bd:b7:7e:7f:0d:cc:
         6b:67:ee:2a:fc:6e:5b:45:08:74:e5:f8:92:3d:7b:5f:57:e9:
         a6:4d:1a:ba:f9:14:40:e3:fa:16:0e:65:5c:d1:e0:92:4f:91:
         01:f2:35:cd:38:a9:0a:16:03:ce:2a:df:33:e8:fb:a9:3e:1c:
         1c:29:c8:b7:be:58:f6:21:8b:41:3b:59:af:a9:34:4b:f0:54:
         5b:bf:24:44:13:a8:8d:9e:84:9a:8d:e6:76:22:df:a6:42:b5:
         78:d8:4f:56:9d:c4:8d:ee:03:17:de:c2:4f:57:b0:e7:1b:fe:
         97:a4:b9:2a:92:6f:c9:4c:89:55:c9:c2:0b:5c:69:8d:fc:ea:
         14:68:36:02:23:3e:2d:20:f3:ba:b4:e8:63:12:31:9f:ce:98:
         5e:3b:e5:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ0H92UHwsHLEIL1YwzYUOgFu7aEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDA5MjgxMjQzMzNaFw0yNTA5MjcxMjQ4MzNaMDMxMTAvBgNV
BAMTKDYxNjA4QTAwMzM4MTUzMjMxNzZFNEExM0JFNUM2NUQyN0U1QzBGMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1/7Gt3YjvTdR3kWniXR2Xu95
xlxoL9E2JP7r6bZcvwrcsphCYQdPs+in1tyjRbayliErSvp8Qi3e5tMs+UWDI40w
Q8b3yVB3UuibutxDCOOP9viB+B654xRnV+OOC9pNTzK7jZxdmo6iBNDumU8Wpzln
AhpCmsNq2boDdjvB2v+yz5fxNBLTno5O1WDa3D9WgpGKRo/sSmGSJzkw3V+muhYX
Ny+nXOnUi/RpmalBGNUrokCEtGQsg213Jo60FQMUjl3c3x3iroMnQf0rE4ZDWvzu
xhq0BFq5yJrdg5cDEyOAzbEWINNWjxIdcBPhDveZElYTlInH2NWzur/UPy87AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUYWCKADOBUyMXbkoTvlxl0n5cDxcwHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNsnDANBgkqhkiG9w0BAQsFAAOCAQEArUSE
fhI2iHVE6IKi9pJDa5tuUumBzWR5IUZkS12kfRdNyw6axNDXQY5yDfWBob/ow/vc
Q+F7Ul65hV2/G8R5JzN1f06SM4eAI/z+mHeoTl1NaSICcTIJew9T281nzNkvRv9a
Sj9pvbd+fw3Ma2fuKvxuW0UIdOX4kj17X1fppk0auvkUQOP6Fg5lXNHgkk+RAfI1
zTipChYDzirfM+j7qT4cHCnIt75Y9iGLQTtZr6k0S/BUW78kRBOojZ6Emo3mdiLf
pkK1eNhPVp3Eje4DF97CT1ew5xv+l6S5KpJvyUyJVcnCC1xpjfzqFGg2AiM+LSDz
urToYxIxn86YXjvljQ==
-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org