Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          YRomvyvHwMpGXHh/K8xW2hWinyqFFp8A8CxR7geMk1A=
Subject key identifier:   0D:6D:47:EC:BC:4F:93:FB:20:B8:E4:7F:1A:BB:D7:D0:65:3A:DD:29
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       6A63153805A19B1B4ED6896390752EE2AE54B4D5
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.82.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:63:15:38:05:a1:9b:1b:4e:d6:89:63:90:75:2e:e2:ae:54:b4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=0D6D47ECBC4F93FB20B8E47F1ABBD7D0653ADD29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:e9:d1:0a:34:f0:c9:52:dd:66:4d:82:0f:
                    12:4e:20:83:67:8b:4e:7c:f5:fe:4c:8c:99:c6:16:
                    05:86:34:cf:72:7b:af:77:cc:d3:7f:6c:f2:54:06:
                    11:88:c0:e2:4a:42:d8:ad:bd:70:6f:d9:09:9a:7b:
                    af:21:5e:c2:67:54:4f:35:4d:a4:a2:56:18:17:93:
                    60:b6:21:0e:74:1c:7d:85:3e:46:d0:04:eb:53:24:
                    90:91:7c:81:c3:51:8f:f1:d9:b4:ff:0b:49:eb:42:
                    77:29:f0:c8:e8:b6:f7:be:29:1c:cd:73:b4:12:a9:
                    cd:c3:76:57:71:ad:12:60:3c:11:8e:4a:e5:54:41:
                    86:d3:4a:cc:76:c6:2e:84:b5:14:b5:70:d4:d2:88:
                    46:ab:f8:52:5a:d5:2f:2c:85:81:e7:33:3d:25:0d:
                    5f:5d:b8:a5:6f:a1:97:4d:ae:12:47:3e:52:29:83:
                    04:22:ab:bc:29:bf:9c:25:4b:86:74:c1:af:aa:2d:
                    b5:93:e2:49:da:b4:ba:cb:19:ec:8a:a8:f9:bf:bd:
                    51:f4:30:c0:60:49:ee:23:b0:d2:7a:9d:e4:ae:da:
                    76:f2:8d:ba:b5:ba:a9:3c:bf:d5:1b:2b:dc:52:e3:
                    55:52:25:97:af:b7:79:2a:39:dd:fb:aa:46:10:d4:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:47:EC:BC:4F:93:FB:20:B8:E4:7F:1A:BB:D7:D0:65:3A:DD:29
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38322e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:fb:92:f2:50:3f:b5:85:9c:16:a0:eb:50:c0:33:ca:ce:c7:
         4f:70:a3:62:78:f4:09:f6:1f:f0:3c:b1:00:da:5b:fd:4c:8d:
         19:b1:18:e3:7f:58:1e:54:22:b1:45:83:4c:5c:73:87:7c:bd:
         31:f8:01:42:47:33:7e:a9:af:3c:1e:72:ca:62:6f:27:bd:0a:
         ab:72:a4:84:03:3b:87:c0:61:94:d9:2b:a8:bf:d0:4a:c7:89:
         e7:e7:93:2b:54:7a:ab:ee:bd:c9:6d:23:f3:5f:5b:d5:14:54:
         a4:c7:33:dd:34:61:e4:87:d8:fc:c9:d5:e3:04:4d:3b:b8:af:
         31:09:4f:02:1f:e3:1a:30:66:6a:c5:8b:d4:e7:c0:9d:42:37:
         46:41:29:34:c4:d5:9d:ae:f0:eb:cb:6d:cf:6d:4a:be:be:e8:
         0d:0f:90:2b:ce:33:c2:be:6c:5d:72:1e:e2:61:0c:5b:27:a2:
         b2:66:c3:b1:12:48:df:1c:c1:d3:cd:94:65:12:ff:5d:b7:32:
         0c:da:58:ee:42:0b:97:5a:e0:2d:30:fc:fe:da:91:77:64:1e:
         24:e2:cb:8b:63:26:2f:7d:1d:97:ab:0e:08:a8:93:92:f9:e9:
         04:ac:33:09:00:7b:24:a5:c1:4a:f1:e5:ce:21:6d:f4:71:fe:
         3f:4c:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org