Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34382e302f32342d3234203d3e20323730383638.roa
File:                     3137372e32332e34382e302f32342d3234203d3e20323730383638.roa (raw, json)
Hash identifier:          rcfR3E9Sa78x79FBhLyMcjH1u8j/90KL8BdJdtgRhQI=
Subject key identifier:   9D:D4:59:D5:C6:07:EC:D6:AB:E4:B4:AD:F1:CE:F7:6E:EA:5D:60:F6
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       561766B54667DBB1D8B56170FB2357ABA156A57F
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34382e302f32342d3234203d3e20323730383638.roa
Signing time:             Wed 03 Apr 2024 21:39:28 +0000
ROA not before:           Wed 03 Apr 2024 21:34:28 +0000
ROA not after:            Wed 02 Apr 2025 21:39:28 +0000
asID:                     270868
IP address blocks:        177.23.48.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:17:66:b5:46:67:db:b1:d8:b5:61:70:fb:23:57:ab:a1:56:a5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Apr  3 21:34:28 2024 GMT
            Not After : Apr  2 21:39:28 2025 GMT
        Subject: CN=9DD459D5C607ECD6ABE4B4ADF1CEF76EEA5D60F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:9a:d0:6f:aa:06:e4:ad:c9:85:5f:d4:6a:
                    b7:29:c8:bb:f4:82:56:4e:7a:35:b4:28:82:7e:ce:
                    17:27:b1:03:ff:4a:24:3e:73:50:42:35:5c:0f:f7:
                    4f:39:ca:15:5c:c3:e2:ed:3d:fa:e6:1d:1e:6e:ef:
                    89:f5:0d:4a:96:25:0d:b2:92:dd:ff:55:9f:7a:57:
                    06:8c:75:b9:83:c7:b3:cb:19:48:4c:7d:aa:58:98:
                    c0:87:15:44:4c:58:96:92:d8:cb:1e:5f:bf:3f:c6:
                    93:fe:34:98:ab:1e:c5:50:46:54:44:19:94:c4:aa:
                    ec:81:36:25:f6:99:22:4c:96:9b:ab:5f:58:eb:e1:
                    86:f0:0e:52:27:87:2d:b2:38:92:04:ba:2b:54:d0:
                    76:b2:9c:28:98:51:19:5c:4d:a6:0b:3d:f2:e2:0a:
                    1a:7e:be:55:08:a3:dd:57:f0:35:f2:4d:18:25:95:
                    9d:ca:35:8a:8f:3f:c0:9d:4d:b7:1d:a9:b3:a8:09:
                    2c:1c:be:bc:c6:37:cd:79:cd:40:b4:e8:3f:b4:67:
                    15:09:98:34:d1:e6:88:b8:f7:1d:e0:f4:f6:3c:27:
                    ba:39:9d:ee:b8:b2:2a:fb:77:d8:2c:98:7a:00:14:
                    99:e2:d9:59:92:5b:75:34:eb:0e:b1:9c:ca:25:d9:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D4:59:D5:C6:07:EC:D6:AB:E4:B4:AD:F1:CE:F7:6E:EA:5D:60:F6
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34382e302f32342d3234203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:be:88:44:d9:11:51:aa:57:93:84:ed:1d:9b:c1:8b:f8:eb:
         25:17:a5:b8:9c:54:cf:39:bb:b7:46:e4:02:8b:90:7f:e9:a1:
         b9:63:82:56:72:41:5d:19:28:24:29:26:1b:8d:db:e9:7e:06:
         6b:95:31:b1:5b:7a:e6:13:2f:95:02:87:dc:b0:a4:7a:a6:96:
         ad:8f:7e:85:bf:8f:6f:df:74:21:94:47:aa:30:e6:1d:b4:02:
         d2:61:4e:84:a3:24:0f:98:be:d9:70:ad:1b:0a:4f:a9:8e:89:
         25:53:ab:d2:2a:63:d2:94:c6:92:52:c7:ae:ec:42:07:31:11:
         c2:39:54:07:be:eb:b3:cb:08:4a:25:d0:47:df:a3:6b:ae:97:
         83:0e:5c:b7:54:1e:73:39:4b:45:a1:2e:be:41:1a:d5:8d:71:
         ad:e3:a1:d1:2f:82:c9:3a:30:b9:85:e9:84:32:88:3b:31:86:
         93:c8:3a:b9:55:e9:89:6b:37:5c:39:28:8d:31:85:78:70:10:
         6f:16:fb:18:19:05:e2:63:43:2a:a7:d9:ef:e2:1d:de:05:c3:
         d8:c1:d3:cf:73:9c:a0:cb:f1:6d:2e:64:c3:44:2a:c5:80:d4:
         62:25:c1:ab:58:92:54:73:c7:34:14:66:a7:51:7d:5a:d4:74:
         a5:40:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:13 2024 by rpki-client on console-fra.rpki-client.org