Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
File:                     3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          oOtEZZKgoKs3HxD9i1/puIDy8uCrRGHANHSpt4SS+3s=
Subject key identifier:   24:21:AB:31:F9:0F:62:09:89:F0:A4:47:FC:42:13:F8:E9:97:49:AF
Certificate issuer:       /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial:       50B6D24970AA036CDDC5DCAB7E1EFFCD21F4F56F
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
Signing time:             Fri 03 May 2024 20:09:49 +0000
ROA not before:           Fri 03 May 2024 20:04:49 +0000
ROA not after:            Fri 02 May 2025 20:09:49 +0000
asID:                     28667
IP address blocks:        177.184.240.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b6:d2:49:70:aa:03:6c:dd:c5:dc:ab:7e:1e:ff:cd:21:f4:f5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
        Validity
            Not Before: May  3 20:04:49 2024 GMT
            Not After : May  2 20:09:49 2025 GMT
        Subject: CN=2421AB31F90F620989F0A447FC4213F8E99749AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:39:e1:45:51:e4:89:61:9c:56:b3:4d:a7:
                    59:a8:17:d0:b0:eb:45:c5:28:8d:0a:f4:48:7f:cb:
                    77:3e:8d:84:4d:e2:41:34:9e:2f:b5:e4:bb:f0:4c:
                    95:eb:a5:52:2a:b4:50:75:98:b7:68:9f:27:2b:31:
                    16:b2:04:d6:5c:5f:61:71:64:31:39:fc:ab:1c:9f:
                    ef:72:df:c5:09:08:7c:c0:de:72:4e:96:f7:26:42:
                    05:9d:49:5f:b8:5f:36:17:ed:b5:33:cd:07:5d:7c:
                    15:ad:d7:c7:68:83:44:da:c4:67:c3:99:bc:4e:5b:
                    2a:28:c3:e8:3c:90:27:54:7d:6d:fd:4a:2e:98:17:
                    8f:d5:3a:11:13:c0:fd:13:f2:80:1e:fa:d5:11:8d:
                    ec:7c:d8:90:3e:b9:81:7d:b7:e8:ac:fe:65:37:a6:
                    fe:83:99:9e:a2:52:74:51:a3:c3:56:c6:e9:c5:c9:
                    47:0c:79:29:88:98:b8:b4:04:0a:df:e9:bd:89:7a:
                    4a:3a:04:ed:ff:dc:f4:68:a3:f0:c9:3e:2f:77:9a:
                    fa:6f:b0:84:cc:6c:79:6f:04:07:e0:2f:7d:5b:72:
                    1a:e7:ad:78:4c:71:10:41:09:3b:c8:1b:b1:96:87:
                    2a:25:64:d1:62:c2:b2:55:2a:64:fe:10:b8:fc:2e:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:AB:31:F9:0F:62:09:89:F0:A4:47:FC:42:13:F8:E9:97:49:AF
            X509v3 Authority Key Identifier:
                keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:05:0d:aa:7d:3d:01:66:6d:e1:98:53:5b:71:f6:43:66:49:
         b2:d9:a5:1e:4d:ca:b3:c8:09:98:95:31:17:b1:6e:3a:e2:60:
         e0:b4:6e:b2:8f:ac:43:98:cd:93:6a:c8:30:ae:2a:0c:fa:b5:
         22:fc:0f:54:12:7f:a9:66:61:45:03:71:c2:1a:7e:bd:41:e2:
         84:78:41:af:fe:2a:f2:8a:4a:a0:3b:f6:a0:83:4d:53:36:0b:
         c8:3a:80:9d:5c:ae:86:19:e6:19:d5:cd:b8:e7:ce:06:80:75:
         dd:11:cc:a3:06:ef:4e:3f:6d:3f:c5:0b:de:7b:41:71:6a:42:
         b2:61:1d:d5:61:6d:c0:a7:ad:50:93:12:51:38:f8:95:69:e0:
         67:01:ec:e9:13:d7:e1:79:cb:9a:4a:e2:59:1d:b8:ac:cc:cc:
         e8:ac:bd:f4:df:8b:c8:4c:26:51:ec:30:a9:ff:4e:0f:66:4d:
         3f:67:3b:21:d2:42:b8:99:48:13:ee:40:63:e1:95:09:b6:12:
         00:63:84:d0:de:c7:f3:da:38:97:81:04:cf:5a:22:a2:e6:6c:
         45:de:c2:54:0e:6b:14:42:56:b2:9a:fe:5a:b6:d9:8a:79:17:
         c3:f2:f5:62:f5:d3:da:84:09:ae:84:74:86:60:5f:ba:98:e0:
         54:5b:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:55:50 2024 by rpki-client on console-fra.rpki-client.org