Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38362e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38362e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          DJfBdcF+Ne/asUYZZ5erg215TMfLG/4ZyhuwrIknpAc=
Subject key identifier:   E5:C2:F2:5F:24:F2:E9:DF:C9:A2:8A:AB:F5:4C:A7:ED:7B:0F:4A:6A
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4512E0913C01CD423734247442A888953E051107
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38362e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:26 +0000
ROA not before:           Thu 04 Apr 2024 15:18:26 +0000
ROA not after:            Thu 03 Apr 2025 15:23:26 +0000
asID:                     262352
IP address blocks:        177.126.86.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:12:e0:91:3c:01:cd:42:37:34:24:74:42:a8:88:95:3e:05:11:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:26 2024 GMT
            Not After : Apr  3 15:23:26 2025 GMT
        Subject: CN=E5C2F25F24F2E9DFC9A28AABF54CA7ED7B0F4A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bf:b8:3a:d5:c6:ac:1d:0c:53:07:20:0c:60:
                    10:e0:7a:03:22:3e:aa:56:3b:43:9f:fe:14:22:07:
                    77:d7:c2:a5:34:db:a5:21:37:38:bd:1b:44:40:ff:
                    89:c3:95:27:06:60:18:6e:32:69:cf:1e:c9:0c:93:
                    cd:7e:27:d6:9b:37:e3:f2:b7:64:6b:33:13:bb:64:
                    17:43:9a:21:39:e0:7b:15:f7:c3:9b:f0:24:80:10:
                    5e:74:89:a7:d3:c9:19:b4:30:b5:12:91:ad:c8:4a:
                    28:dc:8e:fd:5d:79:0c:63:20:61:0b:2f:f3:80:60:
                    6a:ac:b9:e2:c2:dc:1e:c3:4e:69:7e:db:d7:77:da:
                    dd:0a:a9:14:4f:01:af:40:db:d3:2e:fe:95:b8:ed:
                    bf:0b:00:a2:6a:8b:36:a8:63:56:69:8a:42:1b:ad:
                    10:8c:c0:db:18:72:6b:74:69:7e:2e:c1:62:a4:bb:
                    54:1f:65:4a:2a:b0:59:d9:b2:98:69:76:c0:c5:5b:
                    3b:1b:03:0b:08:50:02:d0:c5:81:c8:2c:6b:f8:2d:
                    fe:da:d7:e0:e6:89:8f:e8:4f:f3:c5:51:de:b3:38:
                    a3:d0:a1:14:b2:05:4d:0a:fe:f7:74:b0:2f:1a:ec:
                    8e:fa:3e:26:a1:29:45:fb:8d:5f:ee:07:85:f2:37:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C2:F2:5F:24:F2:E9:DF:C9:A2:8A:AB:F5:4C:A7:ED:7B:0F:4A:6A
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38362e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:ae:b1:33:49:11:f7:7d:e5:72:a5:3d:68:e8:d7:42:39:
         00:4b:b8:5f:cc:d1:04:d8:90:0d:73:c5:b5:2f:9b:24:3d:e1:
         a4:f3:fa:b7:a5:b1:74:51:6f:0e:0a:71:ce:f0:e4:db:8c:9b:
         8c:fc:20:31:36:87:9e:f6:b9:a1:f2:dc:79:b5:57:74:53:22:
         95:68:0a:a2:c0:56:e3:d5:7f:15:b8:94:3a:38:7b:20:cf:a2:
         e0:a3:ec:ad:14:de:73:22:52:2d:24:74:d6:8b:58:8b:36:92:
         16:84:52:07:be:08:9d:2f:d5:b6:7c:db:f6:28:3c:a0:ce:3f:
         18:e4:bd:a0:87:aa:32:d4:46:c5:81:79:a8:b2:9a:5a:e6:7c:
         c0:b4:e2:b4:a3:03:0a:0c:ef:5c:6d:c4:77:f1:48:f4:4e:9f:
         9b:f1:18:f3:37:8d:92:7e:50:53:59:4a:da:67:fc:15:c5:d8:
         88:4a:2d:61:48:79:e2:00:02:49:5c:8d:27:36:6e:0a:cd:e0:
         40:e6:ec:5b:0e:e9:cb:60:73:31:ef:e1:1f:ea:62:ef:a5:8a:
         da:f4:38:9a:c7:c6:bc:70:31:e3:63:6f:20:1c:c5:08:8c:ee:
         91:72:b8:45:29:2b:4a:c0:f4:f7:b0:20:4e:c2:aa:23:4d:27:
         79:5f:08:96
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURRLgkTwBzUI3NCR0QqiIlT4FEQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA0MDQxNTE4MjZaFw0yNTA0MDMxNTIzMjZaMDMxMTAvBgNV
BAMTKEU1QzJGMjVGMjRGMkU5REZDOUEyOEFBQkY1NENBN0VEN0IwRjRBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdv7g61casHQxTByAMYBDgegMi
PqpWO0Of/hQiB3fXwqU026UhNzi9G0RA/4nDlScGYBhuMmnPHskMk81+J9abN+Py
t2RrMxO7ZBdDmiE54HsV98Ob8CSAEF50iafTyRm0MLUSka3ISijcjv1deQxjIGEL
L/OAYGqsueLC3B7DTml+29d32t0KqRRPAa9A29Mu/pW47b8LAKJqizaoY1ZpikIb
rRCMwNsYcmt0aX4uwWKku1QfZUoqsFnZsphpdsDFWzsbAwsIUALQxYHILGv4Lf7a
1+DmiY/oT/PFUd6zOKPQoRSyBU0K/vd0sC8a7I76PiahKUX7jV/uB4XyNy9BAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU5cLyXyTy6d/Jooqr9Uyn7XsPSmowHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxflYwDQYJKoZIhvcNAQELBQADggEBADNdrrEzSRH3
feVypT1o6NdCOQBLuF/M0QTYkA1zxbUvmyQ94aTz+relsXRRbw4Kcc7w5NuMm4z8
IDE2h572uaHy3Hm1V3RTIpVoCqLAVuPVfxW4lDo4eyDPouCj7K0U3nMiUi0kdNaL
WIs2khaEUge+CJ0v1bZ82/YoPKDOPxjkvaCHqjLURsWBeaiymlrmfMC04rSjAwoM
71xtxHfxSPROn5vxGPM3jZJ+UFNZStpn/BXF2IhKLWFIeeIAAklcjSc2bgrN4EDm
7FsO6ctgczHv4R/qYu+litr0OJrHxrxwMeNjbyAcxQiM7pFyuEUpK0rA9PewIE7C
qiNNJ3lfCJY=
-----END CERTIFICATE-----
Generated at Thu Sep 5 20:59:18 2024 by rpki-client on console-fra.rpki-client.org