Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
File:                     3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (raw, json)
Hash identifier:          0Opppea2u3qeeKfqRnRcGYI0OrVRhKm5jtYqhen7x6I=
Subject key identifier:   27:4E:CE:CF:83:A6:05:75:20:00:19:79:38:37:5E:A4:7C:52:7B:FC
Certificate issuer:       /CN=E009CBEA2F489817D984A8C8B522736BD150142D
Certificate serial:       6F4850BA50E905B0010D2865A30EB10A2ADE45DB
Authority key identifier: E0:09:CB:EA:2F:48:98:17:D9:84:A8:C8:B5:22:73:6B:D1:50:14:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E009CBEA2F489817D984A8C8B522736BD150142D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
Signing time:             Fri 17 May 2024 20:36:37 +0000
ROA not before:           Fri 17 May 2024 20:31:37 +0000
ROA not after:            Fri 16 May 2025 20:36:37 +0000
asID:                     271047
IP address blocks:        179.48.96.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:48:50:ba:50:e9:05:b0:01:0d:28:65:a3:0e:b1:0a:2a:de:45:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E009CBEA2F489817D984A8C8B522736BD150142D
        Validity
            Not Before: May 17 20:31:37 2024 GMT
            Not After : May 16 20:36:37 2025 GMT
        Subject: CN=274ECECF83A605752000197938375EA47C527BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9e:ef:94:bb:63:c8:ba:98:dd:22:1d:77:27:
                    0e:a8:38:16:43:1c:e1:0c:01:47:07:54:14:1d:ee:
                    17:e6:31:03:48:6d:87:c4:c6:1f:6e:65:a0:90:47:
                    40:a9:eb:02:93:89:15:f8:5a:92:23:d4:8b:15:e9:
                    b1:9e:4d:e9:8f:00:78:fa:40:e3:1f:dd:8a:3e:b6:
                    e2:ca:9d:88:62:4a:b3:df:56:a2:e2:29:98:72:8c:
                    f9:cf:fc:2a:a3:74:78:94:79:17:9a:ad:a5:9d:b3:
                    51:e8:69:f3:b3:e9:40:9c:4b:0c:a7:e1:a7:88:0b:
                    4d:f3:f3:3c:52:4b:41:f3:dc:0c:c4:7b:10:9a:43:
                    f4:4e:b8:a9:0e:1d:09:de:42:db:3b:e0:6d:c9:09:
                    5c:ee:30:7e:b3:93:5e:4c:05:15:b9:e4:49:d4:fe:
                    94:9d:ec:31:f8:85:50:c4:e6:c7:f4:9e:0e:02:37:
                    90:0e:8e:4f:22:83:15:c0:49:4f:16:2c:66:0a:97:
                    81:a6:d8:60:bd:12:77:fe:76:cb:cb:db:0a:8e:58:
                    d9:93:b3:1d:1c:09:6f:05:9d:8a:06:f3:2e:85:63:
                    c0:91:9c:58:9c:33:bf:c8:b5:28:7f:b5:09:f3:03:
                    d5:ac:0d:d5:da:2f:e3:00:cb:4c:5e:93:8c:02:be:
                    91:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:CE:CF:83:A6:05:75:20:00:19:79:38:37:5E:A4:7C:52:7B:FC
            X509v3 Authority Key Identifier:
                keyid:E0:09:CB:EA:2F:48:98:17:D9:84:A8:C8:B5:22:73:6B:D1:50:14:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/E009CBEA2F489817D984A8C8B522736BD150142D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E009CBEA2F489817D984A8C8B522736BD150142D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:d9:c3:cf:34:b1:50:05:1c:f6:1f:63:e9:6f:41:b1:ce:
         eb:0e:f9:99:56:5d:25:f8:02:fc:a5:54:0f:f3:ac:5c:90:05:
         e4:5a:86:56:82:f1:a1:2e:6c:ee:39:79:a2:6c:2a:c1:b5:7e:
         a4:b0:33:0b:4a:53:13:86:94:f6:6c:41:d8:ae:fa:85:f4:30:
         5e:cf:5f:a9:72:19:d8:8b:3e:73:ed:49:56:7f:b0:1c:2e:2d:
         e0:a3:07:2f:b1:45:45:90:20:ff:82:6b:9c:64:75:dd:98:1b:
         69:8c:81:17:fc:8f:e3:8e:bc:8f:7e:c4:6f:cc:af:d8:87:1d:
         4c:14:07:9f:ed:a1:a7:bc:06:ee:1c:8e:b0:05:13:e8:ac:37:
         de:cf:1d:f2:38:59:fa:22:42:70:ff:9a:d1:9c:1c:42:2f:1a:
         30:dc:5d:cc:53:69:0a:60:42:4e:61:f3:de:ea:8d:52:cd:5c:
         4c:1b:19:e5:6f:67:ae:a3:a2:e0:c3:c8:1a:41:43:e5:a2:ea:
         a0:ad:91:2c:72:07:26:ef:cb:64:53:8a:dd:44:4a:df:14:a0:
         71:3d:b8:49:e3:ae:c4:a6:ac:d9:24:7a:57:0a:c2:89:69:24:
         08:03:f3:2d:ed:a1:c7:1b:5c:f0:56:38:cb:29:87:cd:a6:42:
         11:39:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 15:46:52 2024 by rpki-client on console-ams.rpki-client.org