Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37362e302f32332d3234203d3e203532373636.roa
File:                     3137372e3132352e37362e302f32332d3234203d3e203532373636.roa (raw, json)
Hash identifier:          qBv9h1KupVjSDgJDJfb/wdtKOFpKbZ594tzzC0SQ6NU=
Subject key identifier:   78:EB:CF:BE:95:51:99:0F:2F:74:C2:68:B1:BE:97:75:74:B3:25:41
Certificate issuer:       /CN=7241752889858DD8717ADE0CA01065099204EFA0
Certificate serial:       5CDD6A9F492175442EB266EA0E9923B4B91B34AD
Authority key identifier: 72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37362e302f32332d3234203d3e203532373636.roa
Signing time:             Thu 01 Aug 2024 19:51:01 +0000
ROA not before:           Thu 01 Aug 2024 19:46:01 +0000
ROA not after:            Thu 31 Jul 2025 19:51:01 +0000
asID:                     52766
IP address blocks:        177.125.76.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dd:6a:9f:49:21:75:44:2e:b2:66:ea:0e:99:23:b4:b9:1b:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7241752889858DD8717ADE0CA01065099204EFA0
        Validity
            Not Before: Aug  1 19:46:01 2024 GMT
            Not After : Jul 31 19:51:01 2025 GMT
        Subject: CN=78EBCFBE9551990F2F74C268B1BE977574B32541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:ec:bd:61:e1:4e:79:ea:36:7a:ca:55:c0:
                    16:28:15:94:4d:3c:60:10:f3:2f:78:8d:7e:b9:2e:
                    35:7e:de:fc:ba:7b:e7:74:28:b7:f9:cf:b5:50:90:
                    06:f3:d7:08:5b:37:44:5d:59:97:c8:85:c4:30:f7:
                    0a:2a:3a:47:25:00:a0:f3:50:74:be:e3:54:a9:5e:
                    65:93:c7:b5:34:01:57:a6:71:07:07:be:53:27:66:
                    14:00:0e:99:36:b1:49:5b:46:65:82:e4:7d:ca:c7:
                    df:36:d9:d5:15:f2:fe:4b:4a:dd:5a:88:14:88:50:
                    2d:46:bb:3b:f2:b9:7f:a3:5c:a2:2c:cb:b9:41:3c:
                    3a:1e:c9:66:27:38:b3:2e:ba:0c:da:fb:30:c7:df:
                    70:06:52:57:50:ef:46:cf:a5:23:4b:e2:72:ff:ca:
                    90:77:a6:aa:0b:42:a4:e7:09:17:a8:7e:f3:66:9d:
                    ba:aa:76:53:f0:18:48:4b:6f:0b:ff:30:8b:a8:20:
                    f3:f0:8e:1d:5a:d4:23:23:be:d6:fe:9b:8f:b9:e1:
                    fe:cb:96:2e:14:43:35:78:5f:64:95:36:9f:df:bc:
                    49:00:10:31:23:b9:08:a4:eb:d3:e9:e1:b0:f9:fd:
                    3d:15:3a:6f:37:c9:c3:4e:15:03:0e:57:01:8d:0a:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EB:CF:BE:95:51:99:0F:2F:74:C2:68:B1:BE:97:75:74:B3:25:41
            X509v3 Authority Key Identifier:
                keyid:72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/7241752889858DD8717ADE0CA01065099204EFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37362e302f32332d3234203d3e203532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:02:cf:b8:02:b4:4a:c4:ed:8d:34:41:65:ee:08:23:1f:d6:
         13:7a:77:43:17:e1:18:db:b6:64:91:2e:18:91:38:e6:dd:c6:
         9e:c6:21:95:e5:a6:f3:89:05:39:de:f0:31:d4:0c:d4:2f:12:
         87:fd:62:fe:0d:e7:d6:b2:e1:fd:52:1d:62:ec:82:9f:a1:6d:
         3e:35:f6:70:00:26:99:5e:60:1e:d3:a0:a9:43:a9:ea:f7:f3:
         e3:8e:1c:1d:e7:b9:92:ec:e5:5d:e9:bf:29:0c:b4:64:83:ab:
         8d:52:76:27:91:92:e8:91:b7:90:cb:85:aa:a4:42:28:be:7e:
         ea:3d:45:36:6f:a1:2a:a6:17:aa:2e:7d:0d:a7:61:c0:8e:8a:
         29:5a:1c:9a:2e:fd:c3:0f:43:06:a6:9f:b7:98:5f:65:9e:f7:
         c8:a5:1d:45:86:19:4b:27:6a:fb:d5:0b:f3:dc:91:d6:d8:92:
         ba:9f:41:e0:5b:50:33:0c:3b:0b:ea:27:da:9c:db:4d:f3:60:
         16:b6:03:2f:10:f5:97:0b:eb:4e:fd:ee:8e:c4:d4:8c:8b:04:
         38:de:a6:80:99:38:8d:c7:82:81:a2:1e:12:29:21:37:08:b5:
         02:a7:9d:ba:b0:57:32:23:17:52:57:da:ce:f0:66:47:e9:86:
         38:7f:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 23:39:19 2024 by rpki-client on console-ams.rpki-client.org