Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32342d3234203d3e20323731313136.roa
File:                     3137392e34382e37362e302f32342d3234203d3e20323731313136.roa (raw, json)
Hash identifier:          g/KY2JidBtgILUL5o3301Iu8mMwMmHEWNZ7GKp5f1jI=
Subject key identifier:   4D:48:93:4B:95:54:E5:61:7F:99:FA:EC:F3:41:D5:9E:78:5B:83:47
Certificate issuer:       /CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Certificate serial:       44F1ACD98D00A38E36B43697C79DD7150446F02E
Authority key identifier: BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32342d3234203d3e20323731313136.roa
Signing time:             Tue 21 May 2024 17:12:53 +0000
ROA not before:           Tue 21 May 2024 17:07:53 +0000
ROA not after:            Tue 20 May 2025 17:12:53 +0000
asID:                     271116
IP address blocks:        179.48.76.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f1:ac:d9:8d:00:a3:8e:36:b4:36:97:c7:9d:d7:15:04:46:f0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
        Validity
            Not Before: May 21 17:07:53 2024 GMT
            Not After : May 20 17:12:53 2025 GMT
        Subject: CN=4D48934B9554E5617F99FAECF341D59E785B8347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:65:bd:33:84:43:a6:45:48:ad:79:ed:d4:
                    40:c1:2a:a0:55:7a:72:a2:01:4b:81:07:31:3d:0e:
                    7d:35:bb:be:c3:6d:db:02:45:f3:7c:7a:8d:10:46:
                    db:d9:03:46:a8:3b:43:05:c7:a6:d2:d1:d7:88:df:
                    2e:e2:db:7f:b2:35:c1:97:cd:58:03:8c:7d:37:dd:
                    a7:f3:43:91:14:d1:90:fc:20:9c:d4:c6:a0:2e:45:
                    69:af:3f:d5:89:eb:f0:6a:93:c7:12:d1:ac:69:c9:
                    fc:8d:99:05:4d:7a:94:7c:7b:db:be:21:47:c1:c7:
                    e6:f1:ec:cb:8c:13:c1:8d:99:76:65:77:64:42:d6:
                    45:69:e9:35:42:e8:83:9d:b9:f3:d6:8a:77:35:46:
                    d1:96:df:5a:d8:7b:c8:6c:cb:0c:93:04:64:b0:35:
                    e2:34:ab:c8:2d:66:23:a9:6d:69:7f:6e:78:0f:f7:
                    83:b9:e2:0b:f4:ab:d5:c9:6a:d2:3a:47:c9:a0:72:
                    51:e4:9b:a6:ae:ff:00:58:aa:25:48:a0:0f:96:83:
                    d8:0a:e8:fc:b0:44:31:e1:58:e9:4e:0f:38:d1:fc:
                    a0:b1:3d:e6:f3:06:ea:20:de:b8:e6:24:a6:5a:07:
                    5c:26:c6:91:b9:9b:6a:24:b7:8d:22:4d:28:ec:3b:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:93:4B:95:54:E5:61:7F:99:FA:EC:F3:41:D5:9E:78:5B:83:47
            X509v3 Authority Key Identifier:
                keyid:BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/BFA24157A827C97984C7CAFBEA2076F6E728252D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32342d3234203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:40:0f:5f:06:2b:b3:cd:c8:38:06:b3:a0:82:1e:08:3a:e6:
         5c:fe:ea:5e:16:31:b7:0e:c4:54:e6:04:52:58:08:d7:4c:a8:
         5f:24:71:50:9a:e6:56:16:eb:9d:6d:27:86:56:d2:ca:52:1b:
         44:81:10:02:0c:85:0d:ce:6c:d4:3a:ea:53:43:6e:51:a7:f0:
         89:68:52:8d:18:91:88:c8:f6:d0:94:8f:ef:d1:79:6b:50:43:
         dc:f1:b6:50:8e:f3:47:11:a2:9b:80:69:6d:3c:ba:49:96:4e:
         c4:6f:af:f5:72:f7:db:9b:87:c6:e9:91:9b:2d:93:1a:3f:80:
         80:3a:15:67:b0:e5:44:32:7a:f5:94:ef:cf:33:09:3e:42:46:
         df:2b:8d:00:39:c9:e8:27:b6:b4:5a:06:d8:cd:bb:aa:18:ef:
         d7:83:70:e0:51:2d:5a:29:9d:17:70:84:80:69:ed:b3:b9:f9:
         c7:db:14:8e:a0:d9:8d:65:51:3a:f8:8d:f3:29:3f:4c:6e:28:
         ec:56:6e:87:56:04:e5:5f:00:86:b7:0a:21:20:58:01:c8:12:
         53:8a:53:5c:3e:9a:56:95:b1:b2:56:ce:67:ad:cc:09:32:73:
         8f:bd:04:ea:f6:69:10:3b:9d:cd:be:1a:4f:5e:bd:02:b8:a6:
         30:14:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 18:20:14 2024 by rpki-client on console-ams.rpki-client.org