Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          Eoqp1bx9yXxLrUE3e8DoU2+6WezNiyMN5zYg0qFIxi8=
Subject key identifier:   C7:A1:AB:6A:E3:CF:9E:25:AF:A9:95:82:1D:DF:3B:16:31:85:74:0A
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       6F0FBFCA02C9760FAB935C2B85E15D327793013E
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.88.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0f:bf:ca:02:c9:76:0f:ab:93:5c:2b:85:e1:5d:32:77:93:01:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=C7A1AB6AE3CF9E25AFA995821DDF3B163185740A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:6a:2f:fe:eb:10:1a:4e:4a:44:9c:6f:af:
                    b1:ba:67:e4:da:de:73:9f:db:3c:9f:70:56:47:72:
                    0a:0e:e9:8e:d4:f6:24:11:63:ef:6a:e6:7b:db:4b:
                    06:c2:20:1c:63:cc:1e:89:3f:b9:70:9f:70:a0:3e:
                    3c:7f:d3:16:dc:36:9d:3f:f7:ae:12:2a:d6:2c:57:
                    61:d8:73:d3:13:50:f2:59:d3:bf:02:d6:35:a7:ff:
                    8d:cf:13:36:2b:9e:3b:3a:37:d5:76:d6:cd:c3:2c:
                    c5:d0:c6:b7:ee:8d:da:a0:f7:b6:42:5b:34:f5:43:
                    5c:3f:d1:95:04:c2:b3:db:b8:3f:4a:3d:93:eb:3d:
                    de:f3:48:1b:4a:e2:fe:5f:39:fc:60:89:4b:0d:2c:
                    6b:ab:3e:7e:49:cb:53:3d:62:62:75:d1:a7:9e:88:
                    5f:a4:5d:ef:0e:b9:fa:d9:ce:10:e9:7f:6d:23:b2:
                    19:15:db:84:45:08:47:61:d1:4e:fb:37:b2:4e:d5:
                    ef:0b:ed:77:84:60:ff:2f:ca:84:fa:d7:04:d7:44:
                    8f:40:16:55:c7:de:a0:39:1f:8e:59:e6:8f:8b:36:
                    13:36:ac:9f:85:f9:62:71:3b:46:62:b7:90:01:82:
                    d2:8c:55:64:2a:5b:24:6f:44:35:aa:e1:30:72:ba:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A1:AB:6A:E3:CF:9E:25:AF:A9:95:82:1D:DF:3B:16:31:85:74:0A
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:7d:36:e5:13:69:c8:20:48:5c:11:4c:d5:a5:a2:d0:b6:97:
         53:74:6d:24:78:4f:75:8d:fd:7e:da:c2:f3:28:70:c9:94:11:
         d9:66:32:72:f7:27:29:61:3c:e6:b0:24:2c:b6:9e:4c:19:8c:
         83:36:b1:25:a4:f3:33:95:c5:9e:57:ba:70:3e:9f:0e:b4:9d:
         43:92:27:81:8b:35:e5:7d:b4:a6:67:25:90:0a:af:69:7f:be:
         7c:78:ba:7f:14:be:c8:52:07:25:c9:8a:59:f8:10:d3:5c:94:
         44:e3:e4:3d:a2:21:7b:b1:26:6b:b5:ea:63:e2:3b:ca:10:eb:
         b8:95:c7:ca:93:64:44:59:7c:00:10:90:40:a1:9b:cc:8d:d5:
         6a:d9:52:d6:30:d2:7c:6e:f7:f1:ec:32:dc:37:91:dd:52:b5:
         7c:eb:3f:c6:0e:dc:dd:c0:33:5e:c5:56:68:f6:8e:04:3b:d3:
         c6:bc:0e:ff:ea:97:fe:05:cd:14:25:d3:39:7d:4a:61:61:b7:
         b1:48:68:02:6f:30:7d:43:7b:56:01:65:0e:2d:bb:1b:ee:44:
         a6:a8:54:f3:18:4b:ed:23:31:00:84:42:97:e7:1a:bd:f9:4f:
         67:1e:9b:9b:00:5f:24:34:76:f2:8e:0e:3d:70:93:bc:90:06:
         8a:24:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org