Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37342e302f32342d3234203d3e203532373636.roa
File:                     3137372e3132352e37342e302f32342d3234203d3e203532373636.roa (raw, json)
Hash identifier:          czGPZsIZGN3Ir7+oGC6rkIJhKSuObB6fgonyb7Itvrg=
Subject key identifier:   70:26:98:66:07:F6:B3:F4:F6:EE:42:09:0B:43:2A:F4:99:E3:71:1A
Certificate issuer:       /CN=7241752889858DD8717ADE0CA01065099204EFA0
Certificate serial:       669135230F709E117F898D95E82E46EABD5188F2
Authority key identifier: 72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37342e302f32342d3234203d3e203532373636.roa
Signing time:             Tue 10 Sep 2024 19:47:00 +0000
ROA not before:           Tue 10 Sep 2024 19:42:00 +0000
ROA not after:            Tue 09 Sep 2025 19:47:00 +0000
asID:                     52766
IP address blocks:        177.125.74.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:91:35:23:0f:70:9e:11:7f:89:8d:95:e8:2e:46:ea:bd:51:88:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7241752889858DD8717ADE0CA01065099204EFA0
        Validity
            Not Before: Sep 10 19:42:00 2024 GMT
            Not After : Sep  9 19:47:00 2025 GMT
        Subject: CN=7026986607F6B3F4F6EE42090B432AF499E3711A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:84:17:55:df:81:5d:98:c7:d0:8b:fe:ec:
                    9f:e6:97:35:94:ec:36:c5:72:0d:0a:3b:8a:5f:1c:
                    b2:37:c8:93:52:90:78:55:24:23:d3:06:6f:54:03:
                    a1:a2:12:5e:26:12:e1:e8:81:ee:c8:66:23:21:5f:
                    d4:cc:24:a7:99:57:60:4d:64:e0:ba:7f:e2:dd:42:
                    c8:b4:c9:c7:44:38:1b:f8:53:c4:55:9f:c1:3c:fb:
                    22:18:91:16:2d:08:f7:7a:84:76:f9:ef:14:06:8b:
                    fc:84:c0:8f:37:cc:7e:1d:e8:43:6d:30:c6:72:19:
                    7a:09:a6:65:f2:d6:34:83:b0:e8:ec:6e:14:1b:ab:
                    89:ad:b3:dd:1a:ba:3c:47:2b:a8:0f:5d:78:8a:e7:
                    a9:27:a4:d0:37:43:f2:b1:98:0e:54:72:fa:4d:f5:
                    72:1f:99:8e:2f:a1:32:e3:77:7e:2e:5e:e3:4e:20:
                    e4:7f:61:e8:2e:3e:bd:45:e0:8f:f0:f7:f6:29:94:
                    f1:cf:ee:8c:54:09:a5:25:60:03:8e:52:c4:1a:40:
                    f8:a0:60:05:fb:b1:17:bc:95:86:bf:07:ea:56:c4:
                    bf:c0:d7:30:b5:36:ac:7c:7f:96:c1:96:dc:1a:7c:
                    68:5c:d3:0f:64:aa:7e:77:ba:ed:94:84:14:c8:9a:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:98:66:07:F6:B3:F4:F6:EE:42:09:0B:43:2A:F4:99:E3:71:1A
            X509v3 Authority Key Identifier:
                keyid:72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/7241752889858DD8717ADE0CA01065099204EFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37342e302f32342d3234203d3e203532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b0:01:95:08:b5:76:3d:3f:c5:05:7f:56:0c:38:43:77:4f:
         e1:b4:a2:1b:91:11:5a:10:4d:b2:b6:d9:6c:d5:a6:d5:ac:73:
         20:f2:e5:bd:cb:35:b1:37:53:93:8e:5f:f6:81:6c:5b:03:c0:
         6e:60:c8:41:ba:c4:10:da:c6:b6:01:86:67:11:e0:f5:80:22:
         ab:fc:6f:bb:00:0f:82:98:df:f9:0e:00:4d:44:c6:e7:b9:39:
         62:fc:f7:7c:65:40:dd:2e:1b:3c:e0:c2:eb:91:3c:8c:98:f4:
         17:90:19:63:da:fb:57:9f:95:0b:c7:b0:bb:07:cb:27:76:81:
         45:45:3e:10:85:95:7e:1b:54:4f:e4:61:62:cb:83:97:b6:5e:
         52:1c:2f:ae:cd:99:e1:b8:0a:ac:f1:2f:91:de:8f:5f:6f:6c:
         ba:44:9c:a9:79:71:66:ca:cf:80:ad:6f:fe:6a:b1:66:16:aa:
         62:fe:81:80:c3:9d:51:69:b0:da:a2:cc:f0:27:0e:81:6e:ca:
         3f:dd:c8:8f:40:5d:6c:de:0e:53:f9:53:ff:7e:81:cf:31:fe:
         68:4a:d2:54:cc:5d:8a:e9:1a:83:4a:94:7f:d6:67:fb:18:8c:
         e9:ad:c4:5f:c1:51:76:00:de:ab:16:b6:c2:e8:31:3e:4d:05:
         5a:7f:f6:ed
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZpE1Iw9wnhF/iY2V6C5G6r1RiPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI0MTc1Mjg4OTg1OEREODcxN0FERTBDQTAxMDY1MDk5
MjA0RUZBMDAeFw0yNDA5MTAxOTQyMDBaFw0yNTA5MDkxOTQ3MDBaMDMxMTAvBgNV
BAMTKDcwMjY5ODY2MDdGNkIzRjRGNkVFNDIwOTBCNDMyQUY0OTlFMzcxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjIQXVd+BXZjH0Iv+7J/mlzWU
7DbFcg0KO4pfHLI3yJNSkHhVJCPTBm9UA6GiEl4mEuHoge7IZiMhX9TMJKeZV2BN
ZOC6f+LdQsi0ycdEOBv4U8RVn8E8+yIYkRYtCPd6hHb57xQGi/yEwI83zH4d6ENt
MMZyGXoJpmXy1jSDsOjsbhQbq4mts90aujxHK6gPXXiK56knpNA3Q/KxmA5UcvpN
9XIfmY4voTLjd34uXuNOIOR/YeguPr1F4I/w9/YplPHP7oxUCaUlYAOOUsQaQPig
YAX7sRe8lYa/B+pWxL/A1zC1Nqx8f5bBltwafGhc0w9kqn53uu2UhBTImobFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcCaYZgf2s/T27kIJC0Mq9JnjcRowHwYDVR0j
BBgwFoAUckF1KImFjdhxet4MoBBlCZIE76AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv
ZlYvMC83MjQxNzUyODg5ODU4REQ4NzE3QURFMENBMDEwNjUwOTkyMDRFRkEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyNDE3NTI4ODk4NThERDg3
MTdBREUwQ0EwMTA2NTA5OTIwNEVGQTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDUFBadVBqaXVRQllrdjNCYUtWTnFxSzV0Mjd6aXFwOWZoQldTU2VFb2ZWLzAv
MzEzNzM3MmUzMTMyMzUyZTM3MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX1KMA0GCSqGSIb3DQEBCwUAA4IBAQAQsAGVCLV2
PT/FBX9WDDhDd0/htKIbkRFaEE2yttls1abVrHMg8uW9yzWxN1OTjl/2gWxbA8Bu
YMhBusQQ2sa2AYZnEeD1gCKr/G+7AA+CmN/5DgBNRMbnuTli/Pd8ZUDdLhs84MLr
kTyMmPQXkBlj2vtXn5ULx7C7B8sndoFFRT4QhZV+G1RP5GFiy4OXtl5SHC+uzZnh
uAqs8S+R3o9fb2y6RJypeXFmys+ArW/+arFmFqpi/oGAw51RabDaoszwJw6Bbso/
3ciPQF1s3g5T+VP/foHPMf5oStJUzF2K6RqDSpR/1mf7GIzprcRfwVF2AN6rFrbC
6DE+TQVaf/bt
-----END CERTIFICATE-----
Generated at Sat Oct 5 23:39:19 2024 by rpki-client on console-ams.rpki-client.org