Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135382e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3135382e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          zrWiavL+cYTg21Ugfd2M6KGVI/9tu0lH/K4sCTh3rno=
Subject key identifier:   9A:E4:FC:B0:02:B3:B5:BB:A6:F8:EF:5F:84:9E:18:1F:A9:07:65:FA
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       7CE11D5B3276B6FECAA98775F3BB6E495265B1CC
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135382e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 02 Oct 2024 10:47:27 +0000
ROA not before:           Wed 02 Oct 2024 10:42:27 +0000
ROA not after:            Wed 01 Oct 2025 10:47:27 +0000
asID:                     262973
IP address blocks:        179.108.158.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e1:1d:5b:32:76:b6:fe:ca:a9:87:75:f3:bb:6e:49:52:65:b1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  2 10:42:27 2024 GMT
            Not After : Oct  1 10:47:27 2025 GMT
        Subject: CN=9AE4FCB002B3B5BBA6F8EF5F849E181FA90765FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:5d:f2:c5:51:cd:1f:a5:f2:8f:fa:38:8d:
                    9d:fd:2c:7c:33:92:91:0f:83:d8:49:f6:4b:9b:a5:
                    2a:7b:1a:b2:d1:eb:72:7b:6e:db:78:de:81:8c:94:
                    47:a8:ad:ae:99:65:b4:e4:c3:4e:5e:e7:fa:53:e3:
                    bb:e6:86:d5:9c:2e:b6:45:56:ce:13:2d:06:af:7d:
                    9b:63:b6:14:89:5e:f4:10:66:25:b4:d3:d3:43:46:
                    64:3f:50:bf:4d:3a:3b:eb:f7:85:d8:7a:42:b8:73:
                    48:44:a2:0c:67:e4:3e:8f:3a:98:31:c7:c5:2e:e3:
                    2f:c4:a5:d0:71:96:93:e0:f1:12:3b:5b:5b:30:ff:
                    cc:29:49:93:51:ef:65:3c:e5:cb:5d:8e:2d:e5:e7:
                    9c:71:76:b0:d8:26:6e:35:93:e8:51:82:5c:2e:81:
                    ca:b5:df:ad:f9:6e:c0:b1:91:00:8d:c0:ff:48:a3:
                    91:e7:e5:71:52:5f:e6:a7:81:1d:10:cb:1d:35:2b:
                    58:d8:6c:90:01:7c:bd:d5:50:85:09:13:d1:fa:f0:
                    1d:78:dc:a9:b2:60:79:5b:09:c0:48:be:7f:fe:a7:
                    04:f5:d1:b0:c5:01:83:85:ba:73:14:f0:8b:2c:a8:
                    ae:62:3d:83:29:3b:cb:81:14:08:9b:d1:b1:e3:db:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E4:FC:B0:02:B3:B5:BB:A6:F8:EF:5F:84:9E:18:1F:A9:07:65:FA
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135382e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:e2:5c:ee:4b:37:4b:90:09:91:71:8a:3f:02:17:eb:8e:
         44:0d:e8:51:c0:bf:25:0a:73:46:c0:77:f0:a4:7b:62:47:e1:
         32:32:4c:e0:1a:5f:d9:e4:92:e1:28:f9:55:34:ed:5f:e1:a3:
         80:11:93:23:ea:63:09:ce:1c:4f:3b:b8:cf:70:e4:10:9e:21:
         6e:da:9f:fd:16:52:94:83:1a:39:44:b7:6a:80:bf:27:d2:e9:
         2b:02:dc:f4:7c:d5:4b:67:8e:40:4b:3d:a6:90:37:c1:e6:cf:
         29:83:28:46:b5:6e:0f:ee:42:a7:df:63:8b:12:7a:b8:79:3c:
         00:6c:df:d4:68:4a:15:2e:4f:91:1c:db:69:97:8e:8e:37:31:
         0f:e0:f6:80:f2:7c:ec:c3:6d:c2:28:40:92:93:b8:49:8e:f7:
         35:9c:ee:37:2c:e2:53:4a:99:99:d7:a3:93:d5:b7:7b:32:02:
         37:01:ce:f4:53:ef:bd:ed:60:84:e4:3a:47:31:e8:fa:c8:17:
         0c:89:f6:e1:a0:0a:4e:0c:2c:a7:3f:12:09:5a:8d:19:ea:c9:
         62:44:99:0c:26:5d:1a:25:97:d3:42:db:71:c0:89:ab:a2:0a:
         ec:bc:ef:2e:75:56:ee:79:d5:01:23:fa:12:ca:d4:45:df:2e:
         15:b3:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org