Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e36322e302f32342d3234203d3e20323638303138.roa
File:                     3137372e33392e36322e302f32342d3234203d3e20323638303138.roa (raw, json)
Hash identifier:          EpGr0tysZt7SZxefjPvj+AQXT2ItgO0cwXy6vi43sTU=
Subject key identifier:   9A:3B:5B:EB:B6:AB:2A:84:9C:21:35:B8:DA:B6:96:74:E5:8F:9A:01
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       343182896AF56E5E8DB8699F1CE2A298CB7671A8
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e36322e302f32342d3234203d3e20323638303138.roa
Signing time:             Thu 05 Oct 2023 17:51:49 +0000
ROA not before:           Thu 05 Oct 2023 17:46:49 +0000
ROA not after:            Thu 03 Oct 2024 17:51:49 +0000
asID:                     268018
IP address blocks:        177.39.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:31:82:89:6a:f5:6e:5e:8d:b8:69:9f:1c:e2:a2:98:cb:76:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:49 2023 GMT
            Not After : Oct  3 17:51:49 2024 GMT
        Subject: CN=9A3B5BEBB6AB2A849C2135B8DAB69674E58F9A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:83:fb:12:3c:1e:ca:0c:da:d5:69:c6:05:
                    d0:50:3f:22:db:a6:e5:ba:04:c9:40:43:a9:ef:58:
                    a1:71:5f:a5:29:16:22:fa:35:14:6c:09:35:5f:e1:
                    ee:ce:47:90:c6:62:96:28:a2:1c:0c:a7:5d:00:1c:
                    97:b2:e5:cb:4e:c9:91:4f:5b:cf:f6:c4:63:d2:13:
                    e8:13:44:96:d4:09:78:4b:ee:65:69:4f:d6:c0:19:
                    e7:04:5c:f5:36:7e:23:46:ba:19:e7:57:4b:42:8a:
                    7e:49:99:46:50:30:7f:f5:41:4b:07:de:cc:c4:9b:
                    25:cc:51:47:f7:0c:0e:4d:05:f7:79:89:08:87:14:
                    fe:f5:52:66:5f:dc:a1:96:2e:61:2e:e6:21:40:69:
                    7c:1a:cd:c0:3d:ad:4b:fd:6b:11:5a:98:69:08:a1:
                    c5:cf:fa:34:47:92:98:55:94:9b:84:a6:83:c6:c0:
                    dc:5d:33:b2:72:2b:77:64:b6:70:c2:e6:cf:22:41:
                    2e:1d:ae:a8:78:07:99:4d:5b:57:bf:12:82:61:7a:
                    ec:2a:03:5b:73:7e:f5:4a:99:f5:fc:aa:1f:81:a7:
                    ff:38:82:44:74:e9:89:2f:c9:fd:90:28:8a:44:bc:
                    2c:21:fc:aa:02:90:bc:6c:da:78:b1:0e:80:e0:81:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3B:5B:EB:B6:AB:2A:84:9C:21:35:B8:DA:B6:96:74:E5:8F:9A:01
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e36322e302f32342d3234203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:4b:ca:2d:65:84:77:89:a9:a1:a8:59:c1:2e:21:a1:18:9c:
         de:72:5b:f3:6f:8f:8a:f0:76:e9:2a:c6:40:aa:9f:57:65:45:
         b0:d6:5b:82:c3:48:80:de:14:7e:32:a2:9e:04:f8:1e:96:b6:
         b9:04:57:bb:31:38:3c:df:a5:0e:27:33:6e:e0:49:49:4c:73:
         d3:0a:be:dd:8c:a1:ba:ff:2e:a9:7c:c9:50:4d:14:2a:1c:40:
         05:9c:2e:00:5d:cf:7d:13:7e:90:cb:5d:e1:ad:e1:2f:a8:4e:
         c9:d0:1d:09:f0:e0:75:41:9e:fc:5f:de:5f:ca:ee:2b:82:1b:
         06:02:25:55:ca:13:cc:e2:88:39:24:77:03:80:ff:00:d8:ae:
         b5:35:57:7b:9c:94:df:43:4b:9f:3d:9f:f9:d1:83:a8:63:43:
         4e:e5:dc:9c:d7:1f:71:f1:f0:c0:ba:a4:ec:7f:dc:ce:f4:64:
         65:27:97:57:7c:21:52:13:c3:e1:d7:6c:fc:48:b3:8c:e0:d9:
         b9:ca:f3:58:7b:62:8f:28:65:41:c0:d4:17:e9:14:18:0e:49:
         2e:cc:21:95:23:0f:55:0b:fd:23:8d:0d:5f:64:3a:04:69:36:
         e3:a3:15:0d:ba:18:2b:8b:77:76:17:b4:d9:f2:b5:ae:95:76:
         1c:6e:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org