Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37322e302f32332d3234203d3e203532373636.roa
File:                     3137372e3132352e37322e302f32332d3234203d3e203532373636.roa (raw, json)
Hash identifier:          bAnfO30SarGtIE1LPX08aQOhjVd02WqhO5T3nXmdr+M=
Subject key identifier:   E8:94:98:3E:8E:8C:87:48:98:F0:FD:C0:88:A1:F8:97:F2:7D:63:D4
Certificate issuer:       /CN=7241752889858DD8717ADE0CA01065099204EFA0
Certificate serial:       0D6375193E02C234B193AF2D39C75A60CFDF05C7
Authority key identifier: 72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37322e302f32332d3234203d3e203532373636.roa
Signing time:             Thu 01 Aug 2024 19:49:05 +0000
ROA not before:           Thu 01 Aug 2024 19:44:05 +0000
ROA not after:            Thu 31 Jul 2025 19:49:05 +0000
asID:                     52766
IP address blocks:        177.125.72.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:63:75:19:3e:02:c2:34:b1:93:af:2d:39:c7:5a:60:cf:df:05:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7241752889858DD8717ADE0CA01065099204EFA0
        Validity
            Not Before: Aug  1 19:44:05 2024 GMT
            Not After : Jul 31 19:49:05 2025 GMT
        Subject: CN=E894983E8E8C874898F0FDC088A1F897F27D63D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:73:4d:f2:27:0b:14:36:83:1f:61:c0:72:
                    30:2e:c7:72:2b:47:b4:65:d7:93:11:13:ea:01:9a:
                    8c:8a:5a:a1:9c:6a:81:b1:cd:71:64:97:c3:ce:79:
                    f9:d7:ef:1f:29:97:48:b0:46:d7:56:56:3c:47:e6:
                    aa:bc:4f:5c:41:36:27:49:6d:7f:58:14:33:40:b1:
                    1f:0a:6c:8a:4a:c8:af:ec:26:06:38:49:c1:7f:7d:
                    7d:66:c6:c1:68:d2:fd:40:9c:55:e4:f2:cd:e6:7a:
                    e8:7d:34:1d:2c:d1:93:9e:78:8a:7d:99:84:2c:6e:
                    19:4e:ff:aa:d8:21:5b:f6:ae:19:ef:11:3b:68:80:
                    29:8e:0d:0e:48:2a:d0:80:ce:5c:73:51:2f:f2:f6:
                    29:d1:d0:42:9b:98:a2:bd:54:58:22:6a:c4:3a:94:
                    80:79:db:12:bc:79:95:d3:4a:81:b5:f3:b0:29:b3:
                    41:58:f2:35:b8:ee:e7:9e:3e:45:d9:f9:45:f8:53:
                    a7:d2:d8:33:0c:c5:aa:49:e9:ef:b7:2c:92:85:d6:
                    85:83:cd:d6:5e:69:30:1b:fc:3a:96:be:0b:ac:63:
                    82:5d:4c:72:32:de:9b:fa:8a:bb:11:1e:89:c0:93:
                    f4:22:c7:6c:35:4e:0b:0b:0f:ca:eb:09:63:f3:43:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:94:98:3E:8E:8C:87:48:98:F0:FD:C0:88:A1:F8:97:F2:7D:63:D4
            X509v3 Authority Key Identifier:
                keyid:72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/7241752889858DD8717ADE0CA01065099204EFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37322e302f32332d3234203d3e203532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:3c:d1:c9:1e:fc:36:32:4e:1f:84:8b:45:b6:f4:0c:ac:
         e7:9d:d4:45:a7:ee:f1:af:aa:5e:14:fa:37:20:1a:0a:99:b5:
         86:03:bc:39:45:82:27:c0:45:a7:57:4a:1f:81:0f:a1:c1:30:
         29:60:5c:4d:39:07:57:be:1c:66:da:26:56:89:c0:0e:b4:55:
         1e:c4:d2:85:c3:45:7a:74:0e:b9:7c:ff:ef:5d:63:87:b5:4c:
         c8:4e:23:28:9c:f6:28:dd:2e:0b:3a:06:cf:99:66:ee:92:5b:
         23:b8:d9:38:20:6f:6a:6e:76:58:71:e3:3b:b7:15:36:b9:27:
         78:4f:48:08:bd:da:3f:5d:91:3e:69:c6:90:fb:40:db:c9:c7:
         99:90:85:e7:10:5b:3d:e1:e3:66:03:29:30:b9:90:39:9d:fc:
         4c:d1:1f:d8:c3:b6:59:e6:1a:d2:18:3a:68:f5:c4:ef:2a:7b:
         b5:d5:9a:8a:37:b2:ae:7e:3a:b2:21:df:4f:dd:c5:b0:21:59:
         1a:d9:a2:fe:7a:5f:9f:d6:44:3c:27:12:ed:8a:b7:68:13:25:
         d2:03:f9:23:78:65:5a:87:cf:fb:77:17:8c:91:3b:af:42:ff:
         a4:8f:08:ae:b8:33:de:ed:12:0b:50:a6:7b:8c:2e:a0:78:c4:
         de:39:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 23:23:33 2024 by rpki-client on console-fra.rpki-client.org