Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39322e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          36Hq83auPezwVQaeeLELd89qGyDoSpbfIChSQ8Q86gg=
Subject key identifier:   78:55:7B:CF:F8:ED:51:EF:AA:B7:7E:5B:73:2A:C3:E0:DE:61:1A:AB
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       31E852268D7296EF86FB405070B0578D7A7ABF6B
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:26 +0000
ROA not before:           Thu 04 Apr 2024 15:18:26 +0000
ROA not after:            Thu 03 Apr 2025 15:23:26 +0000
asID:                     262352
IP address blocks:        177.126.92.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e8:52:26:8d:72:96:ef:86:fb:40:50:70:b0:57:8d:7a:7a:bf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:26 2024 GMT
            Not After : Apr  3 15:23:26 2025 GMT
        Subject: CN=78557BCFF8ED51EFAAB77E5B732AC3E0DE611AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:6b:7f:7a:92:ce:00:58:f6:b8:5d:47:df:
                    03:8a:cc:a6:5e:57:5e:a7:d3:3e:90:33:ff:61:b4:
                    79:d3:a0:09:01:2a:45:d4:c1:1d:eb:54:da:a1:60:
                    10:52:f5:de:ec:8f:ee:4d:10:13:7c:7c:30:bd:ee:
                    79:f9:ba:59:fb:d5:7e:c9:00:c7:1b:fb:73:fa:90:
                    43:c0:d7:84:5c:55:2f:ae:0b:fd:54:1a:76:4a:3a:
                    c4:6c:49:d6:5d:67:22:36:a3:96:3b:52:9f:04:b4:
                    1f:25:a2:8f:0b:fc:fe:5e:b8:ab:20:f9:99:cb:4b:
                    be:9b:b6:cf:d9:75:cb:93:ed:df:2f:3f:f1:e0:0f:
                    2f:37:bb:be:0c:5c:7c:db:ab:b6:3f:7e:0e:bc:cc:
                    1b:64:06:d9:95:f2:5f:5e:05:23:28:3c:b8:2b:b9:
                    73:17:da:b6:e9:50:3e:cd:1e:2c:49:a1:4d:15:6d:
                    0d:b6:da:94:7c:72:45:8a:16:f1:8b:37:1e:d2:4a:
                    a4:5d:82:99:cb:52:ae:2f:e3:93:72:8e:6a:9e:9f:
                    0d:45:13:48:c4:4f:de:12:3e:c7:b5:be:8c:71:4a:
                    f5:fd:37:9f:78:10:e5:63:0f:e4:83:ef:2e:eb:85:
                    28:26:42:5c:e6:d3:b3:db:b0:da:ec:81:19:21:5e:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:7B:CF:F8:ED:51:EF:AA:B7:7E:5B:73:2A:C3:E0:DE:61:1A:AB
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:ab:88:d4:9b:28:da:4f:1d:e9:69:1e:7c:69:27:28:04:
         72:83:d8:79:63:a7:1d:e0:e1:6d:b9:0b:a5:c7:52:9c:68:d9:
         0d:59:60:7d:f7:25:0b:0e:cd:04:e3:0e:e3:18:19:78:71:0e:
         cd:76:e5:58:40:1d:ca:6a:a2:72:74:83:79:50:b5:36:59:e9:
         08:df:c1:55:73:60:22:e6:c8:e8:1c:29:a3:8c:2b:e3:02:f2:
         07:c4:d5:ba:37:f1:b1:77:0c:51:77:f5:76:49:37:a6:30:8a:
         83:39:74:37:d0:b2:e2:b3:da:3f:7d:9a:e6:de:92:3b:42:e0:
         29:a6:ed:c5:b3:34:1a:7f:36:ee:18:32:04:99:35:84:43:44:
         f2:fc:51:2a:f1:de:93:c6:94:77:67:a2:3f:35:06:68:b5:f2:
         cf:38:59:d4:0e:63:58:ee:bc:a5:db:a1:d9:3d:9e:fa:e7:fc:
         96:b3:c7:83:57:be:a9:a5:74:21:41:16:31:19:54:6d:2a:d2:
         a5:4d:45:c2:bf:4e:19:be:a2:79:58:30:87:f9:75:6c:97:d3:
         89:82:c7:2d:ba:28:15:96:33:ae:59:dd:06:44:8f:58:f7:24:
         61:b1:e3:17:ad:e6:62:04:6c:20:4d:d1:b4:39:53:aa:40:91:
         dd:22:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org