Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e35312e302f32342d3234203d3e20323730383638.roa
File:                     3137372e32332e35312e302f32342d3234203d3e20323730383638.roa (raw, json)
Hash identifier:          J8mnXGmlyxi5S57OO5ZYvyglcLQ45LGC9Iyr0xMqj54=
Subject key identifier:   26:28:3A:15:10:7D:EB:6A:91:39:D7:60:60:20:34:88:11:4E:C8:22
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       477D3CF87AD8F283680EB6BCF548249A4999CFE5
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e35312e302f32342d3234203d3e20323730383638.roa
Signing time:             Wed 03 Apr 2024 21:39:28 +0000
ROA not before:           Wed 03 Apr 2024 21:34:28 +0000
ROA not after:            Wed 02 Apr 2025 21:39:28 +0000
asID:                     270868
IP address blocks:        177.23.51.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7d:3c:f8:7a:d8:f2:83:68:0e:b6:bc:f5:48:24:9a:49:99:cf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Apr  3 21:34:28 2024 GMT
            Not After : Apr  2 21:39:28 2025 GMT
        Subject: CN=26283A15107DEB6A9139D76060203488114EC822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:a1:b8:f6:11:c1:9a:cb:b5:b4:c5:b5:74:
                    da:25:30:d0:39:f9:1b:4a:3b:fe:42:66:70:09:71:
                    45:76:76:d3:b0:09:5c:12:8d:01:20:1a:64:6b:af:
                    47:a0:44:af:bc:a9:6d:46:01:3c:02:78:fe:6e:76:
                    44:81:9d:3d:fa:1c:7d:70:94:fa:dd:d2:82:0e:1d:
                    70:7c:35:46:63:95:76:d7:cd:78:fc:bd:97:01:63:
                    4f:e1:8f:05:78:7d:5c:da:df:6c:a7:15:2b:cf:44:
                    fc:f2:bb:96:4b:f1:f8:d7:84:21:1c:b3:46:e3:73:
                    c4:0a:99:eb:e7:54:ef:73:67:10:86:3b:a3:68:d3:
                    80:45:0c:b1:fb:3d:6d:e0:06:fd:3c:a2:11:9e:a8:
                    ee:ac:02:06:fe:e9:f3:73:d9:1a:41:5f:9a:60:d5:
                    87:e2:2b:1a:49:f5:5b:50:03:6d:24:ac:e4:ca:6f:
                    b0:42:d2:73:45:7a:fd:af:dd:3e:a4:ec:dc:51:6b:
                    5a:82:2f:8d:fd:71:2f:29:f8:be:87:d6:d9:ec:53:
                    86:35:ad:46:ef:19:75:b4:c4:93:b0:0a:12:c6:7b:
                    75:62:3e:a3:c6:66:53:69:80:b5:4b:d5:eb:11:d4:
                    8e:79:a8:b6:d3:a3:e7:f7:22:72:cd:e2:63:50:a9:
                    7e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:28:3A:15:10:7D:EB:6A:91:39:D7:60:60:20:34:88:11:4E:C8:22
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e35312e302f32342d3234203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ce:24:a2:0e:3c:6b:ff:78:d6:95:76:14:8e:78:04:05:5c:
         65:dc:1e:6d:42:2b:14:47:8e:ba:a4:3f:a2:fa:9d:b0:9b:80:
         d1:3a:5a:a3:51:ee:9b:08:d7:bf:f9:c4:95:4a:13:54:1b:10:
         d0:36:cc:93:44:b9:d8:1e:29:c3:61:72:94:dd:26:50:84:aa:
         fd:9e:ad:98:5d:fe:ab:ee:10:83:88:56:6c:41:f3:49:51:d0:
         ae:9c:5d:fe:e7:ca:f5:01:a5:5e:de:aa:00:40:42:72:4e:1f:
         bb:f5:18:d3:c6:95:9e:ca:83:a0:da:9b:b5:6e:44:17:9d:f2:
         b0:7e:95:e7:30:89:f3:b6:a7:6a:51:41:aa:23:c8:33:fd:e1:
         59:54:11:56:b7:f5:56:aa:3a:27:94:16:69:c7:5d:a9:3a:26:
         4a:20:05:ef:c6:52:0e:70:5f:42:cb:8b:e3:f8:25:57:a4:cb:
         72:9d:db:68:9e:e1:62:68:5c:f0:cd:34:6f:c5:43:19:ae:a8:
         1e:8e:e3:f6:af:68:79:23:de:46:0a:29:0d:92:b2:48:1c:f8:
         0e:65:a7:15:ee:c3:d1:fd:b3:46:08:30:6c:f9:0d:9e:c2:6b:
         6f:5e:8e:6c:45:c8:7a:19:7c:a3:f5:f3:33:4b:5b:64:87:5b:
         09:7d:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org