Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa
File:                     3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          FPMxWN/QwkEPvEqDUuQBRmR1LMKw3qTozZYKTm7Jqxk=
Subject key identifier:   93:60:74:B6:27:5B:0B:44:D6:CE:54:1E:DA:39:66:9A:5C:BB:CD:F9
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       107EC583FF4A95AE3C06DB6A4B2332E61DFE9119
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:10 +0000
ROA not before:           Thu 10 Oct 2024 19:27:10 +0000
ROA not after:            Thu 09 Oct 2025 19:32:10 +0000
asID:                     262296
IP address blocks:        177.11.120.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7e:c5:83:ff:4a:95:ae:3c:06:db:6a:4b:23:32:e6:1d:fe:91:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:10 2024 GMT
            Not After : Oct  9 19:32:10 2025 GMT
        Subject: CN=936074B6275B0B44D6CE541EDA39669A5CBBCDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:86:ab:4a:3a:30:6e:26:4f:ab:14:52:c0:
                    5a:ea:cd:1e:64:e4:ad:d2:fe:82:90:e1:36:c2:12:
                    38:eb:86:53:ee:33:cd:42:0d:86:6e:9e:09:76:09:
                    c1:d2:2e:4b:3b:9e:10:be:60:5c:7a:1a:fe:36:6c:
                    ae:fb:a0:5b:cb:b1:e4:2f:ef:35:b2:dd:d3:14:c7:
                    b2:a1:c8:1c:08:4b:60:ee:d1:06:69:80:16:ce:66:
                    9b:64:43:ff:b4:fc:b7:19:20:9a:63:30:5a:e4:20:
                    f1:3e:3f:ff:c0:56:d7:fa:35:41:3a:bb:6c:7a:65:
                    33:a7:48:89:b6:cb:9d:95:97:14:7c:d2:c1:1a:03:
                    ac:8c:29:38:ea:74:3f:1d:b8:c2:4c:21:9d:3e:5e:
                    d9:3d:38:d7:86:45:c7:c8:27:89:af:33:3d:ba:a3:
                    8b:79:d8:f8:8e:c9:94:d0:3a:6b:17:ca:b5:46:47:
                    92:46:01:f5:1c:47:db:02:dc:a9:fc:d0:31:cc:41:
                    d1:4c:71:74:9d:4e:be:2e:ef:84:a2:7a:a9:88:26:
                    30:2a:56:5e:d7:78:92:3f:80:e9:16:f9:a1:a8:0e:
                    2c:44:30:c6:ef:d7:f5:db:ed:f7:07:40:10:8b:11:
                    c3:74:c4:93:54:ea:94:10:64:96:03:ef:66:8e:96:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:74:B6:27:5B:0B:44:D6:CE:54:1E:DA:39:66:9A:5C:BB:CD:F9
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:2a:70:20:b7:ca:c4:5c:80:e9:4f:2a:97:d7:62:4f:b1:
         0a:3f:87:89:4d:44:de:af:d3:2b:a3:d0:7b:f7:97:c1:d2:ae:
         01:13:7e:10:e0:87:b9:1d:8a:c0:9a:3b:1b:8c:3f:0d:17:fa:
         90:ab:fa:fe:b4:f5:5c:f6:17:db:65:d1:53:49:7d:42:4a:82:
         0b:3b:ea:5e:d9:4a:3b:ec:8e:3a:66:35:ce:51:31:54:a0:9f:
         92:6a:84:16:35:7e:11:dd:e0:45:5a:8c:6a:9a:93:a5:86:6b:
         3d:09:b8:9b:53:80:a9:d1:15:68:dd:46:46:88:57:8e:7b:d7:
         72:2c:12:1a:f5:d2:95:18:ff:01:cc:c9:40:6b:1d:11:f5:1f:
         ea:c5:e4:30:23:68:75:82:72:97:b2:c2:eb:d9:e3:4f:40:b3:
         e0:0b:bf:23:11:da:da:0a:c9:47:29:0d:b5:93:a5:d2:6d:d1:
         5b:a8:91:bb:72:be:32:f9:e0:13:3c:0d:aa:13:4d:6c:5d:8a:
         06:89:03:80:61:45:dd:47:a0:da:80:02:26:bb:78:ab:13:72:
         e1:a5:b2:90:f1:fc:7e:c1:2c:f1:4c:38:ea:4c:3b:b2:42:2c:
         1a:51:5a:a7:4e:64:31:51:78:44:a1:8d:3f:24:96:bf:03:82:
         c2:5b:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org