Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3230382e302f32342d3234203d3e20323632383638.roa
File:                     3137372e32302e3230382e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier:          0E0Z23e3yzhuW1hcg8bLXIEObEljMWAbL9VmZ89Nc/I=
Subject key identifier:   37:FC:BE:92:70:9A:4B:05:30:4D:D2:CF:DD:07:03:11:12:0A:44:1F
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       4EA3952D76A1F59C0B6F7F1B6B760D44D14887D8
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3230382e302f32342d3234203d3e20323632383638.roa
Signing time:             Thu 24 Feb 2022 19:08:29 +0000
ROA not before:           Thu 24 Feb 2022 19:03:29 +0000
ROA not after:            Thu 23 Feb 2023 19:08:29 +0000
asID:                     262868
IP address blocks:        177.20.208.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a3:95:2d:76:a1:f5:9c:0b:6f:7f:1b:6b:76:0d:44:d1:48:87:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Feb 24 19:03:29 2022 GMT
            Not After : Feb 23 19:08:29 2023 GMT
        Subject: CN=37FCBE92709A4B05304DD2CFDD070311120A441F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:ab:8f:3b:43:30:96:61:d3:68:5f:32:47:
                    3d:61:52:bc:e2:1f:4d:c5:69:2c:0a:0a:32:81:9c:
                    b2:8b:4b:8c:79:37:86:f5:f4:b1:96:d4:38:cd:6b:
                    93:4c:20:46:1d:f9:93:39:87:cd:f7:fe:89:15:d9:
                    5f:6d:20:46:f9:c3:a7:2f:a6:a3:ff:67:8d:e0:63:
                    83:16:df:f6:99:20:a5:72:10:c5:48:be:56:b1:ed:
                    a6:48:ad:d8:59:82:a1:3f:90:f9:79:87:ff:c6:98:
                    87:7e:54:93:de:22:0c:cb:60:38:fa:78:bf:ba:ec:
                    0c:d1:b6:5a:1e:d7:5f:61:a1:18:64:81:e0:fd:3a:
                    c5:be:5c:a5:93:40:a4:96:31:30:af:a4:22:4b:31:
                    b8:7b:bf:c7:6b:65:41:9f:85:9d:40:28:a8:29:d9:
                    43:ff:a7:15:df:d2:45:21:21:95:61:18:f2:24:53:
                    4e:3b:90:99:2d:d6:18:8f:13:b9:8b:67:fc:d5:09:
                    36:1e:2b:f3:20:ef:9d:3e:0b:d6:e2:8f:1c:8c:3b:
                    67:61:d1:b1:81:70:24:65:b6:29:f2:bf:d5:13:b3:
                    51:10:b1:64:a2:3b:2f:b8:5a:4a:fa:ad:25:33:c5:
                    37:fc:ca:fc:6c:fc:fe:6f:dc:d7:c1:f2:af:a9:8f:
                    0d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FC:BE:92:70:9A:4B:05:30:4D:D2:CF:DD:07:03:11:12:0A:44:1F
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3230382e302f32342d3234203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:51:a8:62:8f:1b:34:3c:a3:32:32:e5:00:ea:86:a8:42:cd:
         91:bf:7f:53:ab:6a:50:ee:8f:a0:f4:30:9a:a2:c6:4e:46:a9:
         10:4b:31:3d:70:7d:c2:56:f2:0f:35:e5:cd:57:11:44:1d:39:
         7e:3e:2a:8b:2b:88:65:3a:50:cf:7c:44:d2:de:56:71:a3:0f:
         87:82:7a:01:ad:e5:9a:19:48:28:8f:1e:40:b4:eb:c7:b6:5a:
         30:9b:8d:45:93:70:b3:28:82:61:8e:d7:e1:a7:85:e7:23:05:
         49:23:99:bb:f9:f7:81:b1:3b:d8:ac:4f:75:0e:2b:7d:e2:30:
         8f:14:6c:2c:13:6c:77:04:10:f6:6b:99:6c:4a:00:88:9f:4b:
         74:ca:32:44:31:f5:5e:81:ca:32:49:f9:07:a0:9c:a6:db:f6:
         e4:d2:14:d2:30:57:d7:b5:ed:17:ad:d8:a8:d6:df:fe:02:35:
         1d:33:a2:bf:de:53:c8:eb:56:7c:95:c5:f6:c3:b9:16:73:1a:
         92:8d:8e:86:92:44:f0:6e:ed:a4:d2:a8:ed:5d:38:30:f3:a9:
         01:70:b2:8a:4c:00:a5:06:f5:c4:f7:1a:c3:63:5d:8d:a7:c3:
         e5:a4:39:d8:55:2e:38:45:c3:a6:63:03:ff:f6:3e:cd:2f:2d:
         64:25:67:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTqOVLXah9ZwLb38ba3YNRNFIh9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc0Mzc0M0EwQUI4MjhERDMyMURCMUM5NkI2QUI1NTkx
NkE4ODU5QTAeFw0yMjAyMjQxOTAzMjlaFw0yMzAyMjMxOTA4MjlaMDMxMTAvBgNV
BAMTKDM3RkNCRTkyNzA5QTRCMDUzMDRERDJDRkREMDcwMzExMTIwQTQ0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUKuPO0MwlmHTaF8yRz1hUrzi
H03FaSwKCjKBnLKLS4x5N4b19LGW1DjNa5NMIEYd+ZM5h833/okV2V9tIEb5w6cv
pqP/Z43gY4MW3/aZIKVyEMVIvlax7aZIrdhZgqE/kPl5h//GmId+VJPeIgzLYDj6
eL+67AzRtloe119hoRhkgeD9OsW+XKWTQKSWMTCvpCJLMbh7v8drZUGfhZ1AKKgp
2UP/pxXf0kUhIZVhGPIkU047kJkt1hiPE7mLZ/zVCTYeK/Mg750+C9bijxyMO2dh
0bGBcCRltinyv9UTs1EQsWSiOy+4Wkr6rSUzxTf8yvxs/P5v3NfB8q+pjw1ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUN/y+knCaSwUwTdLP3QcDERIKRB8wHwYDVR0j
BBgwFoAUB0N0Ogq4KN0yHbHJa2q1WRaohZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMC8wNzQzNzQzQTBBQjgyOEREMzIxREIxQzk2QjZBQjU1OTE2QTg4NTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3NDM3NDNBMEFCODI4REQz
MjFEQjFDOTZCNkFCNTU5MTZBODg1OUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzAv
MzEzNzM3MmUzMjMwMmUzMjMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxFNAwDQYJKoZIhvcNAQELBQADggEBAGxRqGKP
GzQ8ozIy5QDqhqhCzZG/f1OralDuj6D0MJqixk5GqRBLMT1wfcJW8g815c1XEUQd
OX4+KosriGU6UM98RNLeVnGjD4eCegGt5ZoZSCiPHkC068e2WjCbjUWTcLMogmGO
1+GnhecjBUkjmbv594GxO9isT3UOK33iMI8UbCwTbHcEEPZrmWxKAIifS3TKMkQx
9V6ByjJJ+QegnKbb9uTSFNIwV9e17Ret2KjW3/4CNR0zor/eU8jrVnyVxfbDuRZz
GpKNjoaSRPBu7aTSqO1dODDzqQFwsopMAKUG9cT3GsNjXY2nw+WkOdhVLjhFw6Zj
A//2Ps0vLWQlZ8s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:13 2023 by rpki-client on console-fra.rpki-client.org