Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          Aw9KZHMJ6jsUaI1qTHtSHwtW/4GJqOV4mkb6OSPT1gc=
Subject key identifier:   55:3D:9A:87:EE:43:0C:67:27:62:4C:68:8F:A6:1F:0A:8A:E1:2A:38
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       216AB72D801EAE8713DD7A4F38D571516DD45E06
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:29 +0000
ROA not before:           Thu 04 Apr 2024 15:18:29 +0000
ROA not after:            Thu 03 Apr 2025 15:23:29 +0000
asID:                     262352
IP address blocks:        177.126.84.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6a:b7:2d:80:1e:ae:87:13:dd:7a:4f:38:d5:71:51:6d:d4:5e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:29 2024 GMT
            Not After : Apr  3 15:23:29 2025 GMT
        Subject: CN=553D9A87EE430C6727624C688FA61F0A8AE12A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:96:2f:40:49:88:49:eb:f9:a1:59:93:29:
                    ef:8d:71:89:a2:87:1b:08:e6:a4:b2:52:ee:70:70:
                    b1:0d:33:e6:8c:80:15:15:cb:e5:5a:fd:5b:97:f2:
                    23:0c:56:79:4c:6f:1a:34:ad:ec:eb:c5:8e:22:8b:
                    1c:12:ba:9c:49:6e:b1:fd:85:d8:62:f8:20:64:f8:
                    8e:ad:ad:5a:3e:a3:d3:d0:96:40:4d:51:76:64:6c:
                    17:46:d8:1f:c4:e1:2b:13:ef:e8:48:6e:69:3c:6a:
                    14:ec:14:c0:d8:83:1e:4b:89:05:d4:7e:99:da:49:
                    89:0a:ab:41:58:53:a7:52:81:e3:69:8a:4d:9e:ad:
                    b8:2c:89:aa:28:72:82:09:d5:af:44:28:f6:92:fc:
                    d5:41:49:95:ca:ee:91:04:b2:14:82:f6:47:06:bf:
                    19:1b:af:e2:55:6b:0a:49:d9:6c:80:30:93:1a:76:
                    46:7f:d0:6c:60:5e:24:4d:5b:38:d4:ac:6e:80:da:
                    51:c0:8c:2e:42:5a:d6:68:95:69:cc:aa:5d:e1:1e:
                    74:f9:a4:97:b4:31:7c:d9:8c:c4:d2:d2:89:d0:9f:
                    01:18:7c:d0:4c:47:2b:a3:92:59:bf:03:cd:81:93:
                    a2:20:74:22:7f:61:85:a1:34:bb:e4:7f:19:7f:5a:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3D:9A:87:EE:43:0C:67:27:62:4C:68:8F:A6:1F:0A:8A:E1:2A:38
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:44:cb:cb:1f:63:53:79:8b:ce:ce:27:e2:7b:af:89:21:
         b2:23:54:b7:66:ab:ec:a1:e8:36:93:ed:36:52:0e:69:59:38:
         f3:8f:71:f4:53:2b:e7:54:cf:86:67:a5:20:14:cb:ef:c2:a2:
         ae:59:42:35:b6:2d:b5:ff:66:fb:21:d1:ca:fc:18:d9:ff:e2:
         1a:4a:e1:94:71:36:30:af:8f:13:b5:b7:4f:b2:1b:e4:b7:4b:
         f9:44:3e:5b:58:77:ca:4a:ce:25:aa:14:31:ee:b9:3c:74:ed:
         7c:6a:17:3a:7a:88:a6:f3:62:fa:a2:c6:dc:ca:11:3f:67:10:
         b2:7f:38:c7:a3:50:f1:de:d4:f9:e3:43:a3:56:68:5f:0e:e8:
         31:85:77:e2:5f:b4:31:6d:bb:54:84:b4:59:f8:ff:6f:01:a8:
         8f:cd:90:ad:7f:31:d2:28:6d:e1:3c:fe:2a:e9:9b:02:0b:7e:
         11:09:16:43:48:19:4b:4b:70:62:f8:f2:1b:b5:e1:b0:b7:e8:
         32:15:e2:f4:4e:88:fc:e8:1d:03:8e:e2:eb:6c:b4:bb:88:be:
         70:40:b8:a9:5c:83:08:8c:9d:e6:86:27:5a:e6:f2:a4:47:33:
         74:5b:c3:14:5d:64:b2:ca:1e:7e:c1:0e:a8:2f:4a:63:b6:ec:
         1e:1a:89:64
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIWq3LYAerocT3XpPONVxUW3UXgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA0MDQxNTE4MjlaFw0yNTA0MDMxNTIzMjlaMDMxMTAvBgNV
BAMTKDU1M0Q5QTg3RUU0MzBDNjcyNzYyNEM2ODhGQTYxRjBBOEFFMTJBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DJYvQEmISev5oVmTKe+NcYmi
hxsI5qSyUu5wcLENM+aMgBUVy+Va/VuX8iMMVnlMbxo0rezrxY4iixwSupxJbrH9
hdhi+CBk+I6trVo+o9PQlkBNUXZkbBdG2B/E4SsT7+hIbmk8ahTsFMDYgx5LiQXU
fpnaSYkKq0FYU6dSgeNpik2erbgsiaoocoIJ1a9EKPaS/NVBSZXK7pEEshSC9kcG
vxkbr+JVawpJ2WyAMJMadkZ/0GxgXiRNWzjUrG6A2lHAjC5CWtZolWnMql3hHnT5
pJe0MXzZjMTS0onQnwEYfNBMRyujklm/A82Bk6IgdCJ/YYWhNLvkfxl/WkBbAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUVT2ah+5DDGcnYkxoj6YfCorhKjgwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxflQwDQYJKoZIhvcNAQELBQADggEBAGfPRMvLH2NT
eYvOzifie6+JIbIjVLdmq+yh6DaT7TZSDmlZOPOPcfRTK+dUz4ZnpSAUy+/Coq5Z
QjW2LbX/Zvsh0cr8GNn/4hpK4ZRxNjCvjxO1t0+yG+S3S/lEPltYd8pKziWqFDHu
uTx07XxqFzp6iKbzYvqixtzKET9nELJ/OMejUPHe1PnjQ6NWaF8O6DGFd+JftDFt
u1SEtFn4/28BqI/NkK1/MdIobeE8/irpmwILfhEJFkNIGUtLcGL48hu14bC36DIV
4vROiPzoHQOO4utstLuIvnBAuKlcgwiMneaGJ1rm8qRHM3RbwxRdZLLKHn7BDqgv
SmO27B4aiWQ=
-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org