Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34392e302f32342d3234203d3e20323730383638.roa
File:                     3137372e32332e34392e302f32342d3234203d3e20323730383638.roa (raw, json)
Hash identifier:          UmkFD2gTeG+DJqrfekUTcEcSsxv6D5TV1vy+K3LDAuM=
Subject key identifier:   59:20:48:03:2F:77:71:E4:C9:19:9A:58:0E:9B:C2:5B:63:F5:6B:AD
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       1C8096FD9A386889C3BCB0BE3E1AD1F9D4A0B927
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34392e302f32342d3234203d3e20323730383638.roa
Signing time:             Wed 03 Apr 2024 21:39:27 +0000
ROA not before:           Wed 03 Apr 2024 21:34:27 +0000
ROA not after:            Wed 02 Apr 2025 21:39:27 +0000
asID:                     270868
IP address blocks:        177.23.49.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:80:96:fd:9a:38:68:89:c3:bc:b0:be:3e:1a:d1:f9:d4:a0:b9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Apr  3 21:34:27 2024 GMT
            Not After : Apr  2 21:39:27 2025 GMT
        Subject: CN=592048032F7771E4C9199A580E9BC25B63F56BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:aa:8b:8f:2f:d4:b7:3e:4c:72:60:20:36:
                    26:33:22:8e:0c:ed:19:dd:77:1a:e7:0e:e3:e4:ee:
                    ab:e0:98:9e:6c:30:de:00:bb:ef:18:5f:fc:0f:b6:
                    3e:4c:05:27:ae:69:dd:0d:24:7f:92:31:83:e5:56:
                    9d:8c:6e:a0:e5:be:3d:91:fc:d9:b6:47:27:4e:5a:
                    00:0e:56:46:5e:9c:0e:85:fc:ea:06:db:70:34:69:
                    b3:82:66:f1:a0:ce:81:99:d9:da:d4:95:5a:48:7d:
                    92:33:5d:c8:00:9b:ce:b2:96:36:12:28:01:a1:45:
                    02:50:9c:68:dd:43:3e:be:11:24:22:ba:f5:b4:c8:
                    e3:c9:ed:8d:4a:64:56:31:19:80:bc:93:4d:69:ce:
                    43:d7:94:01:d1:28:c4:de:e1:6d:fc:86:72:87:36:
                    f9:81:69:1a:68:21:e1:d5:ae:80:3a:38:e0:ee:8d:
                    1c:81:e3:7a:4b:8b:a0:40:8e:19:29:d3:66:01:71:
                    22:11:89:0a:a6:b6:48:ab:20:7d:13:45:c7:dc:96:
                    db:07:4f:a7:ad:f6:68:84:83:5f:7b:71:f4:e4:53:
                    4f:95:f3:8b:db:94:75:8c:d6:eb:42:74:be:dd:d5:
                    7e:e8:fa:50:c4:fe:38:4b:f8:db:a5:1f:69:c5:4d:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:48:03:2F:77:71:E4:C9:19:9A:58:0E:9B:C2:5B:63:F5:6B:AD
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e34392e302f32342d3234203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:77:5f:2d:d9:e3:c9:71:b8:6f:ce:80:29:76:60:8e:e3:
         b4:b8:e5:b3:27:c3:1d:e0:16:57:4f:91:10:4f:01:4d:dc:a2:
         1f:eb:d6:82:a1:73:72:65:df:11:52:e5:62:fb:64:33:57:ed:
         61:b6:ae:f9:6e:8b:d2:64:06:44:86:93:d0:e8:73:be:a7:b2:
         41:48:ca:d8:30:5d:90:21:51:ee:2b:0d:b7:60:35:52:0d:34:
         35:de:05:79:46:01:ee:27:4f:04:7f:c9:92:8b:e1:87:aa:e8:
         f6:52:10:b1:8b:e7:38:2e:b3:30:53:66:eb:cb:0f:2f:b2:53:
         67:6d:21:63:c0:57:d3:42:a5:dd:97:66:a2:5e:a4:c4:48:cd:
         70:10:50:02:aa:ca:63:a1:85:67:e7:cf:3a:26:af:8e:5b:3e:
         91:8a:cb:8a:10:fe:a4:d4:10:fd:2c:9d:dc:4d:e9:10:c6:10:
         45:ad:09:52:d9:00:ae:58:fa:f3:2e:7b:9c:ea:f2:de:b0:43:
         49:be:e0:4c:1b:d7:40:61:44:2e:ad:bb:92:7c:ce:ac:d2:2c:
         fe:47:69:8c:84:e0:ca:b6:7b:1f:7f:94:9c:ab:04:92:3a:e9:
         95:ee:78:57:e8:7d:da:c5:e3:1e:cd:57:ae:bf:92:4c:32:3e:
         5b:65:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:13 2024 by rpki-client on console-fra.rpki-client.org