Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3332203d3e20323633343638.roa
File:                     3137372e37332e36302e302f32322d3332203d3e20323633343638.roa (raw, json)
Hash identifier:          0D4/VmMm5zeUb1y8pzAUkSVWwXbI7MGDLX95DLbRJ8M=
Subject key identifier:   B5:3D:52:7F:AD:27:A0:B5:76:10:31:C7:54:9B:BD:3F:B2:5C:5F:2F
Certificate issuer:       /CN=D06F3A94487140F90F261F2C9669A641452C4EC7
Certificate serial:       3E4ACADD0F3B50C89A5E11C2CAA117187A106D4B
Authority key identifier: D0:6F:3A:94:48:71:40:F9:0F:26:1F:2C:96:69:A6:41:45:2C:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06F3A94487140F90F261F2C9669A641452C4EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3332203d3e20323633343638.roa
Signing time:             Fri 26 Jul 2024 11:28:31 +0000
ROA not before:           Fri 26 Jul 2024 11:23:31 +0000
ROA not after:            Fri 25 Jul 2025 11:28:31 +0000
asID:                     263468
IP address blocks:        177.73.60.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4a:ca:dd:0f:3b:50:c8:9a:5e:11:c2:ca:a1:17:18:7a:10:6d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06F3A94487140F90F261F2C9669A641452C4EC7
        Validity
            Not Before: Jul 26 11:23:31 2024 GMT
            Not After : Jul 25 11:28:31 2025 GMT
        Subject: CN=B53D527FAD27A0B5761031C7549BBD3FB25C5F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:aa:06:47:6a:90:e2:58:c9:85:4a:c9:ae:
                    18:80:58:16:74:8e:e4:be:d0:d0:f7:f4:52:e6:c6:
                    b6:44:3b:5e:36:84:54:b4:d9:d8:c0:b8:50:41:76:
                    ca:c1:41:97:d0:ea:07:76:02:df:5b:af:00:9b:9d:
                    3c:6c:58:cb:93:c2:9e:00:61:55:1d:d6:17:72:9f:
                    d9:e7:cc:9f:45:23:34:f0:b5:0b:c2:7d:3f:a1:c8:
                    39:1b:6f:d0:64:5a:95:74:f7:e2:13:e5:88:cd:fe:
                    03:16:9b:e2:5c:ae:b4:89:2e:ac:9c:c9:79:03:0d:
                    0b:1b:a1:63:61:55:8c:ab:c9:2f:cb:39:bf:31:1e:
                    a3:96:c6:db:84:8d:fb:72:97:ab:e3:89:9e:a5:a2:
                    aa:9b:61:0b:07:21:1e:28:22:6f:ec:dc:fa:46:e6:
                    ed:62:e6:a2:49:e5:83:1a:03:ca:a5:9f:d8:56:2e:
                    25:42:26:2c:90:e2:08:82:f9:e9:af:f4:28:70:97:
                    c7:9a:fb:0f:ba:93:1a:c9:46:0d:05:3a:c5:af:af:
                    6f:90:5e:10:56:42:a5:a3:55:f1:51:19:37:9b:af:
                    59:a0:b5:a2:3d:05:77:80:14:ef:e5:ec:f6:ea:98:
                    19:c2:d8:b8:29:12:2c:ab:0f:21:b9:25:7f:98:0b:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3D:52:7F:AD:27:A0:B5:76:10:31:C7:54:9B:BD:3F:B2:5C:5F:2F
            X509v3 Authority Key Identifier:
                keyid:D0:6F:3A:94:48:71:40:F9:0F:26:1F:2C:96:69:A6:41:45:2C:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D06F3A94487140F90F261F2C9669A641452C4EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06F3A94487140F90F261F2C9669A641452C4EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3332203d3e20323633343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:0f:ca:9d:32:72:c1:72:77:b1:6e:e6:15:d5:d4:9e:b0:a3:
         97:82:fa:ba:1a:57:ec:cf:bb:ae:fd:92:d9:3f:c5:e0:cc:f5:
         0f:d8:56:0a:00:7d:11:7f:5e:db:a8:5e:86:56:13:31:b2:8d:
         08:8e:f8:ea:c0:29:8f:87:8b:16:5f:d5:6e:3f:2e:6e:e0:08:
         e2:f6:66:c9:42:34:66:26:bd:7a:2f:2d:19:99:52:4d:9c:fa:
         4f:9f:ee:2f:e0:bb:9e:ab:1a:f3:a3:46:ab:a7:fb:8d:9d:de:
         f0:0c:d4:dd:7e:e7:73:6d:16:14:61:4e:18:57:88:e5:09:a7:
         9a:ef:15:f0:e9:ac:e6:47:fc:3a:d4:bc:23:17:24:8e:08:65:
         f3:fa:f3:d5:36:5c:ec:9f:62:3d:8d:75:65:19:8f:28:d6:94:
         37:68:e7:11:a5:b5:8f:3d:39:ba:b7:aa:a6:9a:bc:95:f6:bc:
         5e:cc:e0:f4:88:de:8b:17:43:3e:cb:40:54:2d:a8:ce:47:b8:
         73:70:c2:93:42:f8:d4:9c:29:b4:e1:66:c8:b4:b4:41:24:a1:
         ae:0a:38:dd:4d:25:4b:cd:e1:20:ec:1d:40:08:19:b1:36:62:
         8f:20:54:ae:8a:af:29:e8:d1:2b:e2:c3:f9:24:ac:92:85:90:
         ef:e0:c6:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPkrK3Q87UMiaXhHCyqEXGHoQbUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA2RjNBOTQ0ODcxNDBGOTBGMjYxRjJDOTY2OUE2NDE0
NTJDNEVDNzAeFw0yNDA3MjYxMTIzMzFaFw0yNTA3MjUxMTI4MzFaMDMxMTAvBgNV
BAMTKEI1M0Q1MjdGQUQyN0EwQjU3NjEwMzFDNzU0OUJCRDNGQjI1QzVGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkKoGR2qQ4ljJhUrJrhiAWBZ0
juS+0ND39FLmxrZEO142hFS02djAuFBBdsrBQZfQ6gd2At9brwCbnTxsWMuTwp4A
YVUd1hdyn9nnzJ9FIzTwtQvCfT+hyDkbb9BkWpV09+IT5YjN/gMWm+JcrrSJLqyc
yXkDDQsboWNhVYyryS/LOb8xHqOWxtuEjftyl6vjiZ6loqqbYQsHIR4oIm/s3PpG
5u1i5qJJ5YMaA8qln9hWLiVCJiyQ4giC+emv9Chwl8ea+w+6kxrJRg0FOsWvr2+Q
XhBWQqWjVfFRGTebr1mgtaI9BXeAFO/l7PbqmBnC2LgpEiyrDyG5JX+YC1fbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtT1Sf60noLV2EDHHVJu9P7JcXy8wHwYDVR0j
BBgwFoAU0G86lEhxQPkPJh8slmmmQUUsTscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh
blkvMC9EMDZGM0E5NDQ4NzE0MEY5MEYyNjFGMkM5NjY5QTY0MTQ1MkM0RUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNkYzQTk0NDg3MTQwRjkw
RjI2MUYyQzk2NjlBNjQxNDUyQzRFQzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJONVk2MjVnblRBTlBpVm1UTHROeDVQNlJKSHRNRVJjZXNLY2czcWNFYW5ZLzAv
MzEzNzM3MmUzNzMzMmUzNjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUk8MA0GCSqGSIb3DQEBCwUAA4IBAQC6D8qdMnLB
cnexbuYV1dSesKOXgvq6Glfsz7uu/ZLZP8XgzPUP2FYKAH0Rf17bqF6GVhMxso0I
jvjqwCmPh4sWX9VuPy5u4Aji9mbJQjRmJr16Ly0ZmVJNnPpPn+4v4Lueqxrzo0ar
p/uNnd7wDNTdfudzbRYUYU4YV4jlCaea7xXw6azmR/w61LwjFySOCGXz+vPVNlzs
n2I9jXVlGY8o1pQ3aOcRpbWPPTm6t6qmmryV9rxezOD0iN6LF0M+y0BULajOR7hz
cMKTQvjUnCm04WbItLRBJKGuCjjdTSVLzeEg7B1ACBmxNmKPIFSuiq8p6NEr4sP5
JKyShZDv4MaD
-----END CERTIFICATE-----
Generated at Mon Oct 7 10:00:42 2024 by rpki-client on console-fra.rpki-client.org