Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          pB0t9AFJpAqYgTurNx3mXsyvJyuNmzSBanE6AoRJoDA=
Subject key identifier:   D5:E9:C1:F8:6D:2B:E5:69:5A:BA:3F:BA:45:EC:3C:3D:E7:34:0C:08
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5887126B919E209F43693B88827C42AEA4755C99
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:27 +0000
ROA not before:           Thu 04 Apr 2024 15:18:27 +0000
ROA not after:            Thu 03 Apr 2025 15:23:27 +0000
asID:                     262352
IP address blocks:        177.126.94.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:87:12:6b:91:9e:20:9f:43:69:3b:88:82:7c:42:ae:a4:75:5c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:27 2024 GMT
            Not After : Apr  3 15:23:27 2025 GMT
        Subject: CN=D5E9C1F86D2BE5695ABA3FBA45EC3C3DE7340C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ae:98:eb:e6:5f:f8:d6:5b:62:09:b9:28:23:
                    6d:13:87:24:96:61:fc:96:b4:44:f5:45:bc:5c:16:
                    c5:21:4a:ba:38:95:84:c6:ba:09:fc:73:ca:fe:61:
                    a8:84:37:5d:fb:6b:06:fd:4b:fe:99:d1:83:23:ae:
                    3d:50:99:48:e2:0c:f1:1e:d5:8e:9b:77:cb:f9:75:
                    89:69:bc:c4:72:65:4c:72:39:02:f6:ce:10:6f:10:
                    6b:b2:9c:0d:45:2a:1e:4d:14:de:83:96:fa:a5:33:
                    0e:5b:0a:a6:9f:c6:c2:74:5f:1f:62:e8:4b:40:1d:
                    03:1d:90:c7:d2:ee:09:c7:78:fc:91:b5:60:3b:9c:
                    d1:1a:ad:ec:64:fb:ca:17:9e:b9:a7:90:cf:7f:33:
                    8f:78:6a:40:10:24:d6:77:77:9c:1f:c6:b6:b6:a7:
                    eb:50:c3:e8:2e:dd:30:58:16:f0:6d:9d:30:47:f7:
                    38:42:bf:c3:c8:fa:35:3a:7e:c5:8e:72:ec:a6:0a:
                    80:6d:52:2e:4c:4e:5a:67:75:87:98:70:7e:3b:17:
                    93:82:a0:f1:4d:23:f4:75:5d:3b:44:10:e7:be:0e:
                    8d:db:2b:21:1f:97:60:84:99:a7:fc:69:3a:4a:21:
                    b6:c1:47:59:f3:a8:8c:e8:f6:20:d1:da:1f:d4:39:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:C1:F8:6D:2B:E5:69:5A:BA:3F:BA:45:EC:3C:3D:E7:34:0C:08
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:b1:a3:74:8a:e6:c9:44:a7:d5:80:94:d3:b5:85:82:d9:
         93:96:e7:9b:16:00:5f:c1:e3:95:2c:e9:59:ed:02:85:c7:6c:
         0e:97:b6:3e:c2:fe:19:34:6a:07:b2:65:16:25:b6:90:09:68:
         af:75:cb:dd:e3:2a:ec:90:43:b3:73:7c:f7:ff:9d:57:f6:39:
         9e:cd:c3:de:ee:45:ad:c6:3f:9e:a2:79:0d:78:b8:7e:6c:37:
         10:1c:e0:8c:39:f8:6e:af:b7:49:91:63:45:68:2d:a8:eb:bb:
         80:4c:53:ca:03:54:d5:77:81:cb:11:1d:28:97:9c:d2:6b:ba:
         be:90:09:d3:50:8f:47:46:50:0a:1f:3a:6b:ea:c3:3c:66:4d:
         a4:22:73:07:d4:79:6c:84:b4:16:d6:32:af:cf:97:30:29:89:
         38:3d:d4:87:7e:3c:3d:4e:7f:bd:5d:25:d0:f8:4d:81:ae:96:
         7e:c0:f7:ee:08:24:e7:b9:52:b7:8d:b1:a9:53:7a:cd:a5:7e:
         53:a5:b8:74:ca:b3:a0:e6:57:03:79:7e:02:18:c7:c7:6b:ce:
         e7:2d:66:ab:42:ed:0b:da:d7:7e:73:47:8c:77:d8:bd:61:8a:
         1f:c4:c1:d9:9c:07:b6:91:30:71:d7:10:44:8b:5d:ef:1a:ba:
         30:7a:3b:48
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWIcSa5GeIJ9DaTuIgnxCrqR1XJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA0MDQxNTE4MjdaFw0yNTA0MDMxNTIzMjdaMDMxMTAvBgNV
BAMTKEQ1RTlDMUY4NkQyQkU1Njk1QUJBM0ZCQTQ1RUMzQzNERTczNDBDMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDurpjr5l/41ltiCbkoI20ThySW
YfyWtET1RbxcFsUhSro4lYTGugn8c8r+YaiEN137awb9S/6Z0YMjrj1QmUjiDPEe
1Y6bd8v5dYlpvMRyZUxyOQL2zhBvEGuynA1FKh5NFN6DlvqlMw5bCqafxsJ0Xx9i
6EtAHQMdkMfS7gnHePyRtWA7nNEarexk+8oXnrmnkM9/M494akAQJNZ3d5wfxra2
p+tQw+gu3TBYFvBtnTBH9zhCv8PI+jU6fsWOcuymCoBtUi5MTlpndYeYcH47F5OC
oPFNI/R1XTtEEOe+Do3bKyEfl2CEmaf8aTpKIbbBR1nzqIzo9iDR2h/UOdvnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU1enB+G0r5Wlauj+6Rew8Pec0DAgwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxfl4wDQYJKoZIhvcNAQELBQADggEBAABqsaN0iubJ
RKfVgJTTtYWC2ZOW55sWAF/B45Us6VntAoXHbA6Xtj7C/hk0ageyZRYltpAJaK91
y93jKuyQQ7NzfPf/nVf2OZ7Nw97uRa3GP56ieQ14uH5sNxAc4Iw5+G6vt0mRY0Vo
Lajru4BMU8oDVNV3gcsRHSiXnNJrur6QCdNQj0dGUAofOmvqwzxmTaQicwfUeWyE
tBbWMq/PlzApiTg91Id+PD1Of71dJdD4TYGuln7A9+4IJOe5UreNsalTes2lflOl
uHTKs6DmVwN5fgIYx8drzuctZqtC7Qva135zR4x32L1hih/EwdmcB7aRMHHXEESL
Xe8aujB6O0g=
-----END CERTIFICATE-----
Generated at Thu Sep 5 20:59:18 2024 by rpki-client on console-fra.rpki-client.org