Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e33392e3131302e302f32342d3234203d3e203532373636.roa
File:                     3137372e33392e3131302e302f32342d3234203d3e203532373636.roa (raw, json)
Hash identifier:          GcOdDF33QW+I51uhrMADR+9sMTP/1zhCLhVsLYwHEQI=
Subject key identifier:   00:A9:B2:3B:92:01:4B:74:AC:8A:29:4D:CF:1F:92:2F:DA:CC:14:6B
Certificate issuer:       /CN=7241752889858DD8717ADE0CA01065099204EFA0
Certificate serial:       40BD631037F18DBF28DF7B535D6B7618AA1D35EA
Authority key identifier: 72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e33392e3131302e302f32342d3234203d3e203532373636.roa
Signing time:             Wed 02 Oct 2024 12:55:39 +0000
ROA not before:           Wed 02 Oct 2024 12:50:39 +0000
ROA not after:            Wed 01 Oct 2025 12:55:39 +0000
asID:                     52766
IP address blocks:        177.39.110.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bd:63:10:37:f1:8d:bf:28:df:7b:53:5d:6b:76:18:aa:1d:35:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7241752889858DD8717ADE0CA01065099204EFA0
        Validity
            Not Before: Oct  2 12:50:39 2024 GMT
            Not After : Oct  1 12:55:39 2025 GMT
        Subject: CN=00A9B23B92014B74AC8A294DCF1F922FDACC146B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cf:d6:26:6b:97:26:19:af:5e:e8:3c:23:3f:
                    d9:28:95:60:af:67:47:a9:15:27:f5:d4:1b:c8:1a:
                    01:81:bc:db:7e:38:71:fa:f9:2a:47:12:00:3d:b4:
                    2a:8b:68:b6:46:23:4b:0e:94:9f:72:02:18:47:98:
                    3c:48:26:14:20:78:92:c7:21:df:c8:41:0d:a2:d7:
                    e2:43:c1:67:15:24:95:b5:c8:b1:29:6a:05:c1:e4:
                    42:3f:1c:39:5e:ab:92:d6:09:aa:ef:dd:ba:c9:35:
                    8a:34:1b:3f:01:4e:e6:0a:51:85:30:13:f2:ee:35:
                    98:70:f1:2c:9d:d0:e2:16:9b:e6:eb:88:63:7a:77:
                    d0:71:3f:f5:0f:26:7b:b7:73:d2:d7:b7:41:27:b5:
                    cd:62:41:e0:95:a0:17:d6:2a:eb:f6:05:d5:35:e1:
                    da:52:76:ea:f3:32:45:06:7f:a9:80:36:2b:c9:29:
                    a2:12:fc:ee:c3:28:4a:26:cf:cb:fe:41:f3:e6:69:
                    34:f2:ab:55:40:91:39:f1:93:88:7d:41:90:86:0f:
                    e3:9b:c4:c5:87:55:8c:7a:9e:32:c0:65:9f:98:9c:
                    d3:ad:0c:2c:ab:86:5f:c1:50:10:18:15:b9:8f:6a:
                    5a:c6:8d:b8:51:bb:15:ab:b0:51:39:37:d9:c6:28:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A9:B2:3B:92:01:4B:74:AC:8A:29:4D:CF:1F:92:2F:DA:CC:14:6B
            X509v3 Authority Key Identifier:
                keyid:72:41:75:28:89:85:8D:D8:71:7A:DE:0C:A0:10:65:09:92:04:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/7241752889858DD8717ADE0CA01065099204EFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7241752889858DD8717ADE0CA01065099204EFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e33392e3131302e302f32342d3234203d3e203532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:14:74:54:e9:ea:07:09:45:a4:3e:d8:c2:0b:ba:0e:6d:a4:
         95:86:c2:f3:41:24:f2:96:44:07:0f:cc:61:21:ef:0f:32:33:
         12:d1:98:81:9c:bb:d9:2b:a3:03:e4:81:f7:70:99:e4:2f:d8:
         18:8b:4a:35:d0:d2:43:e4:30:f2:17:e2:18:83:b2:8f:74:18:
         6c:81:da:71:a2:f5:f3:66:20:e4:9c:d3:42:c1:2b:34:32:ae:
         32:80:b8:c1:8e:d1:21:67:9d:4c:b5:b4:ca:26:bb:5e:f3:b1:
         01:24:b6:40:62:02:69:70:52:16:97:27:24:25:77:6d:cf:c6:
         ed:db:61:19:54:e9:2f:f5:39:f1:09:75:6c:f1:b6:0c:a6:1d:
         ce:bf:24:79:ce:bd:f0:85:2f:8d:7f:80:0c:87:06:e7:e3:72:
         51:6f:2f:a6:ea:3d:91:af:82:bc:bd:92:59:4d:b9:51:59:51:
         d2:70:15:3f:3b:f5:08:70:15:fb:d2:f5:d8:80:b8:0c:7a:f3:
         23:69:bf:25:ed:3f:e5:de:8b:9b:b7:cc:cd:7b:98:97:7d:fa:
         0c:f4:ad:af:28:83:d7:fb:2a:46:88:ea:14:b3:32:85:cc:95:
         ed:c8:25:3f:b5:e2:7e:c5:98:86:9c:bc:a3:5a:6f:10:d4:ec:
         89:51:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 23:39:19 2024 by rpki-client on console-ams.rpki-client.org