Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa
File:                     3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa (raw, json)
Hash identifier:          RoEDUMDqCGyWOTwbHn8PCnIp3gWUCGjy9Yc0l/7aR1Y=
Subject key identifier:   61:FB:3F:68:5D:6A:81:56:F9:60:AE:8D:01:2B:16:7A:1D:A7:61:90
Certificate issuer:       /CN=AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE
Certificate serial:       6C0CF6AC6153798DC5478376A3F53FF8CA7C4400
Authority key identifier: AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa
Signing time:             Thu 21 Nov 2024 21:29:06 +0000
ROA not before:           Thu 21 Nov 2024 21:24:06 +0000
ROA not after:            Thu 20 Nov 2025 21:29:06 +0000
asID:                     271208
IP address blocks:        179.49.136.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0c:f6:ac:61:53:79:8d:c5:47:83:76:a3:f5:3f:f8:ca:7c:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE
        Validity
            Not Before: Nov 21 21:24:06 2024 GMT
            Not After : Nov 20 21:29:06 2025 GMT
        Subject: CN=61FB3F685D6A8156F960AE8D012B167A1DA76190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:b3:e3:21:f3:5b:39:4d:5b:56:18:81:35:
                    6e:ad:7f:ff:96:e5:51:ae:03:44:f0:b0:d4:f8:66:
                    75:77:eb:a7:2d:b6:6d:44:98:3c:1d:a0:bc:f8:8f:
                    8f:89:de:f6:8a:d0:e8:35:d9:52:c0:79:d6:bc:42:
                    a0:08:d7:55:e0:15:ed:33:e4:b6:da:e9:ec:e2:fe:
                    23:40:30:53:76:0e:78:16:92:52:21:5c:f6:a8:5b:
                    aa:15:23:9d:8d:a7:37:6b:c0:b6:45:5d:31:22:0b:
                    52:9e:ec:29:c0:84:82:f6:e2:3c:b2:40:7f:e2:6b:
                    18:34:56:52:4f:62:11:26:51:8c:30:e3:f2:12:eb:
                    09:f8:6e:5f:8f:03:1b:6f:10:2b:c8:68:a3:7c:7c:
                    3f:3b:28:ed:98:64:51:dd:4e:64:27:11:e4:cb:1f:
                    1f:18:be:59:35:49:38:71:33:08:6f:89:ef:82:fe:
                    75:7d:26:eb:ba:d7:bb:a2:4e:bf:14:61:3e:00:8a:
                    eb:74:95:1a:1c:04:9b:3c:6a:61:4f:c1:98:e0:a1:
                    63:6e:68:19:bf:9b:f4:a2:ce:42:d0:1a:4d:d1:07:
                    20:b2:84:9b:17:54:d0:7f:90:89:14:5b:9f:0b:a9:
                    cf:30:2d:64:c7:c9:64:1b:92:2e:07:78:93:12:79:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FB:3F:68:5D:6A:81:56:F9:60:AE:8D:01:2B:16:7A:1D:A7:61:90
            X509v3 Authority Key Identifier:
                keyid:AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:c3:55:d0:68:5c:7f:6f:94:4a:1c:d8:cc:6a:d8:b1:9c:
         6d:0f:dc:c5:48:8c:4c:dd:6b:f1:1e:97:55:4e:55:e9:21:a4:
         b3:cb:c8:da:e1:e3:ba:f6:70:f4:eb:55:11:ff:97:b9:fa:d2:
         83:6d:a5:89:af:16:d1:b1:59:6f:e3:25:a7:54:3c:01:a1:08:
         f0:dd:58:1b:be:d0:a9:c6:23:31:38:e8:c0:51:03:a9:a3:d3:
         9c:34:25:ed:08:4f:62:2f:2b:0d:b9:9a:69:03:b5:42:fb:88:
         f7:9c:b9:1a:64:14:55:8d:e9:59:bf:f4:80:c1:9f:c8:99:8c:
         97:da:d2:41:3f:b9:44:fc:06:82:2a:60:92:49:15:7c:ed:34:
         5e:2e:e0:e3:66:c3:13:b8:b1:dc:b5:5e:81:55:13:3d:1b:c2:
         5a:0f:f3:95:e7:8d:b6:eb:8c:b9:25:10:4a:b2:02:77:8c:e4:
         e1:50:da:60:66:ea:3e:f5:13:6e:4d:cd:5f:f3:80:2c:bd:6e:
         4a:d3:73:38:34:97:8f:ad:b9:43:aa:15:b6:07:95:f4:41:fc:
         ee:34:8b:ef:fe:42:fe:ce:9b:97:f2:63:83:d1:4a:2d:1e:c1:
         cb:21:b3:f5:3c:3d:28:be:27:d4:28:21:68:05:9d:c5:25:82:
         d7:f1:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----