Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/3137372e33372e34342e302f32322d3234203d3e20323730353035.roa
File:                     3137372e33372e34342e302f32322d3234203d3e20323730353035.roa (raw, json)
Hash identifier:          5Y7WiXou+VQpJcCPMYbPgPWmMJFuP3jty2Nd6Aas4/o=
Subject key identifier:   DA:FC:83:60:22:8E:EE:79:0C:19:38:E5:40:E9:5B:56:3F:04:56:3F
Certificate issuer:       /CN=B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA
Certificate serial:       629B7C8B4E70169AF770C6DE0F5C86EDE5F4AA58
Authority key identifier: B7:24:8B:6C:22:18:35:8C:A6:6F:4C:00:C8:B3:D6:EE:32:D6:7B:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/3137372e33372e34342e302f32322d3234203d3e20323730353035.roa
Signing time:             Fri 22 Mar 2024 23:45:27 +0000
ROA not before:           Fri 22 Mar 2024 23:40:27 +0000
ROA not after:            Fri 21 Mar 2025 23:45:27 +0000
asID:                     270505
IP address blocks:        177.37.44.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9b:7c:8b:4e:70:16:9a:f7:70:c6:de:0f:5c:86:ed:e5:f4:aa:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA
        Validity
            Not Before: Mar 22 23:40:27 2024 GMT
            Not After : Mar 21 23:45:27 2025 GMT
        Subject: CN=DAFC8360228EEE790C1938E540E95B563F04563F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:ec:74:cb:5c:16:f6:51:1a:7f:4c:ff:15:
                    51:74:ef:ea:c2:78:ea:20:f5:ed:28:2e:9a:6a:35:
                    b4:4b:2e:45:56:89:f7:b9:05:b9:b3:d4:16:bc:38:
                    f3:e4:7e:74:80:5d:76:b2:95:d6:42:b2:d3:19:c5:
                    31:e2:f4:5e:36:6c:82:37:ce:31:af:1c:4e:82:20:
                    f5:58:dc:84:2a:7e:7f:7c:ee:3c:a6:3f:ba:23:ab:
                    dd:7c:3e:7c:5e:fe:6a:79:92:2b:c1:23:dc:20:e2:
                    4d:67:65:39:67:e0:c3:65:9d:3c:42:9b:26:64:b8:
                    f0:e3:3d:23:00:a0:15:bf:59:d0:89:c1:49:24:9f:
                    67:f1:1d:02:0a:4b:d2:fc:1e:29:ea:ff:26:35:ad:
                    9f:22:b6:03:32:8c:db:9d:84:27:fa:9f:cb:a0:25:
                    c7:3f:c0:c2:bf:44:3c:29:2b:26:7b:8d:95:97:70:
                    a9:7e:14:14:ae:4d:51:12:9a:23:94:9c:a2:2d:05:
                    7c:29:7d:c3:04:d7:4f:84:56:14:84:36:ff:d7:db:
                    9b:46:ac:05:52:88:f1:26:1b:6f:40:2e:2d:91:75:
                    ee:d7:3e:e7:8c:75:f7:1b:fa:39:9c:55:c3:5e:73:
                    d4:2c:5c:6b:8e:8c:75:7c:c6:d3:c9:38:43:3f:ba:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FC:83:60:22:8E:EE:79:0C:19:38:E5:40:E9:5B:56:3F:04:56:3F
            X509v3 Authority Key Identifier:
                keyid:B7:24:8B:6C:22:18:35:8C:A6:6F:4C:00:C8:B3:D6:EE:32:D6:7B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7248B6C2218358CA66F4C00C8B3D6EE32D67BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/3137372e33372e34342e302f32322d3234203d3e20323730353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:bc:12:20:fa:1a:74:6f:64:29:21:53:5c:20:e8:27:56:7a:
         a2:fa:bd:92:c1:28:fb:3a:5d:e8:aa:19:59:dc:8f:27:a2:75:
         b8:15:7e:dc:c1:41:c9:8a:e3:b0:0d:f9:03:70:a7:52:09:80:
         86:9a:07:55:5e:84:1f:4d:83:94:bd:1a:a9:f5:c5:3f:7f:01:
         e0:de:9b:12:78:e5:10:ab:b2:67:e9:29:dc:08:2c:f3:3c:dc:
         08:34:ec:3c:66:80:00:97:1e:46:74:fc:84:8b:f2:bf:a3:14:
         84:6d:53:00:fe:3b:29:1b:2c:3c:6a:e2:93:c3:20:f8:f9:fa:
         ca:43:6b:53:18:d5:79:22:92:c0:b0:9a:ad:43:58:80:dd:a4:
         48:62:df:25:e3:88:e4:be:44:b6:80:ae:0d:f7:3e:58:f3:89:
         4c:d1:3a:fa:cb:ec:2b:e5:8e:47:c4:47:f7:41:93:ac:50:4f:
         d9:3d:b9:3a:7c:c7:79:bd:92:2f:c2:31:dc:c7:d6:50:33:d5:
         8b:e7:32:f6:08:ce:95:e4:99:43:e8:8f:3d:bc:b7:ab:aa:28:
         a0:4a:fd:e1:1c:aa:37:db:49:4f:14:48:9e:83:dc:fb:8a:67:
         8e:18:07:ee:44:c3:a9:f1:6b:60:d8:11:e8:ae:09:b7:95:7a:
         de:47:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 00:09:26 2024 by rpki-client on console-ams.rpki-client.org