Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa
File:                     3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa (raw, json)
Hash identifier:          HIzIGNiy745jyJKzGEgUIQRO6HNBHTa9IYpGwcTS8Cs=
Subject key identifier:   EC:7C:97:FD:63:76:45:57:B4:EE:9E:FB:94:40:7E:92:18:16:2A:8A
Certificate issuer:       /CN=B0A4009274DD53A80D3049538FAEE1B9428B7C80
Certificate serial:       48B4A9B3DDE2B7D8AE6DC9E3C2F3AE4E4CF76FEF
Authority key identifier: B0:A4:00:92:74:DD:53:A8:0D:30:49:53:8F:AE:E1:B9:42:8B:7C:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A4009274DD53A80D3049538FAEE1B9428B7C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa
Signing time:             Wed 30 Oct 2024 19:18:21 +0000
ROA not before:           Wed 30 Oct 2024 19:13:21 +0000
ROA not after:            Wed 29 Oct 2025 19:18:21 +0000
asID:                     271149
IP address blocks:        179.42.112.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b4:a9:b3:dd:e2:b7:d8:ae:6d:c9:e3:c2:f3:ae:4e:4c:f7:6f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4009274DD53A80D3049538FAEE1B9428B7C80
        Validity
            Not Before: Oct 30 19:13:21 2024 GMT
            Not After : Oct 29 19:18:21 2025 GMT
        Subject: CN=EC7C97FD63764557B4EE9EFB94407E9218162A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:1e:05:29:fd:2c:a3:27:3e:37:83:63:e9:
                    cb:2f:63:69:b4:2c:c1:b2:56:87:0e:65:00:93:90:
                    46:a8:9f:8a:3a:93:ca:5f:5f:45:c6:90:6b:d1:f6:
                    33:de:24:9f:62:bc:1f:51:e5:c8:b2:ac:3c:7c:d9:
                    2f:07:8e:9d:2d:02:2e:5e:0c:8b:3b:7e:86:ff:55:
                    0c:a7:17:72:3e:a9:3e:af:9b:b8:2e:4b:1a:92:ab:
                    ce:06:00:52:75:90:26:5b:fd:8e:8c:f9:70:dd:40:
                    70:dc:0b:a5:e5:90:73:2f:88:3f:78:c1:14:d0:be:
                    97:95:2e:62:cd:a1:1b:15:70:30:4a:4f:b6:33:12:
                    ab:d2:df:e0:35:12:c2:85:21:66:68:a9:da:15:65:
                    2f:5d:5e:17:ea:f5:bd:02:e3:39:87:80:32:35:cd:
                    57:3b:36:aa:15:55:41:16:b7:2e:4f:bb:7b:0e:42:
                    b6:2b:25:46:bf:21:9c:80:b1:e3:fe:56:91:e7:37:
                    25:c0:d0:23:5e:1e:73:54:a0:4c:60:99:6c:49:cd:
                    c4:0a:57:b1:2f:c4:db:a2:ba:31:3a:53:2f:31:0c:
                    fb:c4:75:71:18:bb:7c:59:13:a1:01:c9:22:0c:11:
                    1f:45:67:fc:58:67:75:f0:b9:81:61:44:eb:36:77:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7C:97:FD:63:76:45:57:B4:EE:9E:FB:94:40:7E:92:18:16:2A:8A
            X509v3 Authority Key Identifier:
                keyid:B0:A4:00:92:74:DD:53:A8:0D:30:49:53:8F:AE:E1:B9:42:8B:7C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/B0A4009274DD53A80D3049538FAEE1B9428B7C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A4009274DD53A80D3049538FAEE1B9428B7C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:ed:7c:97:07:ec:c4:25:5a:0f:d3:ff:22:ac:e6:3b:5c:
         d8:a0:74:04:14:28:a0:23:1a:e7:7a:35:52:4a:97:98:35:dd:
         8d:1d:57:d9:b3:f2:26:fb:f7:65:cb:6f:c0:7f:c8:59:71:88:
         c6:73:8a:03:9b:b5:b7:61:84:b0:90:f8:c2:2e:de:19:ed:55:
         11:fe:78:b9:07:0a:8a:c4:26:17:f6:26:0f:13:b2:2a:14:b5:
         81:0a:2f:1b:68:dc:71:47:cb:01:d7:4c:42:13:a8:95:f3:10:
         6c:8d:8c:af:70:9a:13:4f:59:68:2b:b2:f5:12:af:c0:42:37:
         2f:26:75:59:93:4d:7a:63:ef:d4:ea:8a:20:e9:5c:8b:15:bc:
         b2:8a:5a:50:68:26:2f:a3:9b:f5:0e:2d:f2:66:bb:63:da:b2:
         ae:d2:8e:3b:67:4c:d2:02:c2:30:66:cc:9e:e0:ce:4d:ec:47:
         60:a5:96:87:13:23:49:61:ab:1b:e8:32:8d:c8:ba:d4:01:c8:
         41:c5:a1:9e:4a:a6:a0:25:2b:a3:a2:4d:78:ca:ba:39:34:48:
         96:59:47:91:0f:eb:09:13:da:44:b6:26:91:4d:d7:bd:ab:b3:
         c9:86:97:a0:e6:6a:02:72:01:22:44:cb:49:60:d5:4f:47:93:
         f7:aa:16:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 12:42:50 2024 by rpki-client on console-ams.rpki-client.org