Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          Z9z8pVg3wKqQahG6EOSGv8ekOlAWvw5KG4UXQ9RQWUM=
Subject key identifier:   87:CB:90:0F:65:A7:B6:F8:72:EA:2A:8C:98:76:B3:F2:0A:FF:2F:A5
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5BB9DCD1B3AF30B2EAD4893F4221298F4D40EEF0
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.81.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b9:dc:d1:b3:af:30:b2:ea:d4:89:3f:42:21:29:8f:4d:40:ee:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=87CB900F65A7B6F872EA2A8C9876B3F20AFF2FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:13:61:f2:06:c2:10:80:7f:98:0d:f8:8b:
                    18:6f:b7:de:02:9d:88:c1:c6:e1:b0:58:5a:9f:24:
                    95:33:4e:eb:07:63:81:4d:4e:e1:3a:f5:aa:eb:62:
                    ca:4f:fe:01:84:44:89:9b:68:3f:96:84:11:b7:b5:
                    54:e5:cf:43:e7:59:84:4b:51:0f:c9:5d:59:6c:50:
                    7b:5c:b7:39:b2:99:75:f0:24:5d:d8:c6:20:85:a4:
                    6f:07:b1:42:d8:ce:43:58:11:1b:ae:fe:9b:94:56:
                    25:42:da:c3:2b:08:f6:e1:db:12:c9:b8:05:87:d0:
                    85:67:de:31:31:e8:2c:4c:3f:cf:24:01:5c:80:f1:
                    91:d6:dc:85:26:fe:85:e1:c1:b5:b7:20:5e:78:56:
                    cc:3c:bd:01:4e:ee:04:cc:0a:d5:18:e8:49:f6:b9:
                    07:a9:32:ba:37:3d:db:49:d9:6d:81:a8:21:ad:12:
                    0c:ec:c2:69:c1:44:ce:cd:58:c5:a4:14:90:56:34:
                    19:be:34:a3:10:2c:df:ce:79:d4:65:ab:7d:a9:66:
                    5c:9d:8d:bd:ec:16:75:db:5b:eb:c1:8f:1a:b4:85:
                    ed:61:f4:86:cd:e8:33:63:8a:6f:5a:1c:0c:69:a7:
                    f1:19:06:67:dd:fb:ad:b4:c6:72:4c:a7:99:6b:fc:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CB:90:0F:65:A7:B6:F8:72:EA:2A:8C:98:76:B3:F2:0A:FF:2F:A5
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:fe:3c:35:02:e0:9a:6c:a0:29:73:b9:7b:83:d2:fd:5b:
         70:4e:ee:21:cd:fd:97:04:37:89:4f:ae:e3:6b:19:17:a0:71:
         6f:75:57:6a:df:24:c8:de:f0:dc:87:00:4e:42:91:c9:9f:56:
         5f:95:ee:79:86:72:cf:f7:2a:d4:4d:5f:f1:9a:5d:40:61:5c:
         74:7a:4e:16:5d:ee:f8:73:aa:04:63:0e:0b:12:53:3f:66:a9:
         d5:e8:3a:c3:0e:37:aa:2c:6f:e9:94:07:28:dc:c5:37:0a:cf:
         d4:54:bc:b6:eb:7b:ac:60:5f:76:90:70:6e:4d:8e:72:1f:8b:
         8a:04:da:62:e4:46:01:26:9f:ae:02:22:36:d7:da:a4:ae:11:
         e9:2e:3f:2c:b0:82:dd:3f:3f:33:06:f6:c5:e5:96:00:c4:fc:
         d7:a3:b2:d1:5d:92:0a:8c:54:a2:33:17:80:2e:00:fe:a9:cc:
         dd:b0:0d:97:75:b9:ca:f9:75:bd:aa:6f:92:06:91:91:fa:9b:
         46:76:29:38:4c:5f:55:19:b3:a6:c0:12:b6:f3:49:44:42:73:
         39:5a:ad:f0:d6:84:2c:6b:86:6e:b7:29:52:2f:49:34:e1:ec:
         96:60:23:f9:ae:04:d1:c8:b6:51:6c:f7:6c:7c:a5:09:94:36:
         be:79:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org