Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa
File:                     3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa (raw, json)
Hash identifier:          +QvR8EcUvKOCektoNNpjn54hcP+mgCpE3mP8iQLz1bA=
Subject key identifier:   1D:98:23:71:7F:7A:18:8C:E2:33:34:B5:EC:34:B3:50:20:BC:CB:79
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       0BEBAA1F4900EA57A198FBF33672C798970A0BF1
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:29 +0000
ROA not before:           Thu 04 Apr 2024 15:18:29 +0000
ROA not after:            Thu 03 Apr 2025 15:23:29 +0000
asID:                     262352
IP address blocks:        177.126.88.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:eb:aa:1f:49:00:ea:57:a1:98:fb:f3:36:72:c7:98:97:0a:0b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:29 2024 GMT
            Not After : Apr  3 15:23:29 2025 GMT
        Subject: CN=1D9823717F7A188CE23334B5EC34B35020BCCB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:57:7f:9f:a5:e5:32:a5:10:7a:57:7e:94:
                    6c:6f:44:8f:53:2c:e4:aa:2e:48:7d:94:07:43:ff:
                    7e:0f:42:66:18:6d:35:00:be:47:ca:ec:1d:73:ff:
                    80:92:50:3d:0c:17:ed:1b:4d:bb:73:cc:29:0a:79:
                    91:ba:5c:a7:eb:7f:78:77:e3:cd:fe:fe:f3:12:2d:
                    1e:04:e2:cf:30:b7:1e:a6:4a:b8:a3:e4:e6:19:c7:
                    0e:4b:29:fc:51:ba:b1:b3:f1:e9:b2:13:15:50:dc:
                    8f:39:6a:12:9f:da:e7:a5:41:c5:cf:39:a5:90:3d:
                    85:93:f4:51:39:b8:23:15:7c:09:45:95:a1:23:b5:
                    13:09:51:4f:9a:4b:78:ee:c5:41:1d:af:cc:21:c7:
                    f7:64:ee:09:f7:67:15:c7:b3:8b:83:89:08:4d:6d:
                    03:e2:c5:f6:93:10:64:a3:40:37:ad:97:c0:6e:79:
                    f0:b0:d2:1d:cd:75:8a:35:f7:fb:65:48:f3:09:3b:
                    1c:4b:2f:8c:09:2a:3c:a2:7b:83:f5:c9:5e:5f:54:
                    a1:a1:19:41:6c:39:02:0b:79:10:39:c4:55:18:55:
                    6c:c5:a0:46:86:1e:10:1f:7a:6e:16:84:3c:18:41:
                    9c:ac:80:1c:a1:76:d1:98:6d:48:fa:f2:95:e3:eb:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:98:23:71:7F:7A:18:8C:E2:33:34:B5:EC:34:B3:50:20:BC:CB:79
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:69:11:7b:ed:f5:83:18:da:64:71:a1:7a:61:b5:a7:cb:
         26:c9:c4:3a:da:82:53:37:03:ca:a3:ad:16:0a:12:83:15:dc:
         b8:04:ab:62:f9:f9:e9:62:b1:e8:63:7c:91:e5:68:7d:3a:ed:
         0d:4d:cf:35:0a:47:5f:b1:fc:87:7f:49:4a:ef:42:86:f8:30:
         52:6a:8f:70:36:88:fa:4b:14:1c:e5:a4:cb:3f:49:9a:70:d5:
         b0:71:13:82:16:03:72:26:15:6f:09:06:58:85:a7:db:7d:c4:
         68:2b:5c:e1:bc:f7:06:0f:3b:a0:29:2d:89:93:28:63:f4:f7:
         ec:c5:b1:1c:57:9b:d3:4f:a2:62:7d:04:49:71:91:0d:6c:59:
         50:72:eb:8b:48:28:a4:bf:d8:6a:86:2e:b3:5b:39:d2:c7:1b:
         2c:aa:2f:23:b1:c5:bf:a8:9c:17:76:34:cd:c2:62:bd:98:04:
         fb:6e:a6:a3:e4:40:b8:f6:12:25:2c:23:40:c1:fb:be:45:dc:
         20:71:ea:2a:f6:79:a7:bd:24:56:d8:37:cf:3a:77:42:4b:15:
         7b:c8:ec:68:b2:c2:8e:c8:7e:63:17:54:48:ed:f0:ec:48:bf:
         44:24:4e:ab:13:f1:d9:a8:db:e3:87:32:00:f2:09:2f:7b:bc:
         e2:3c:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org