Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132302e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          qXoPwZQ9e6qEyyQDYzWpfThhCdnqHHzj2Iksik6v5YA=
Subject key identifier:   F5:88:9B:AC:51:F2:E8:1F:96:4A:F9:A5:33:4A:87:FB:BB:E7:69:31
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       6D6A92C48E61E878DF0780BF5AE049B380146CE5
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:40 +0000
ROA not before:           Fri 20 Sep 2024 16:22:40 +0000
ROA not after:            Fri 19 Sep 2025 16:27:40 +0000
asID:                     262296
IP address blocks:        177.11.120.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6a:92:c4:8e:61:e8:78:df:07:80:bf:5a:e0:49:b3:80:14:6c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:40 2024 GMT
            Not After : Sep 19 16:27:40 2025 GMT
        Subject: CN=F5889BAC51F2E81F964AF9A5334A87FBBBE76931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:f2:59:ab:e2:cc:28:25:4a:68:36:f4:fa:
                    2a:04:cb:bb:b6:5b:ba:7e:53:ec:a2:23:e5:bc:30:
                    ed:82:b3:e4:f7:f6:3c:42:9c:fe:46:a9:12:15:50:
                    48:22:51:2f:49:d2:9e:f6:80:53:76:56:f0:e7:a0:
                    fd:b2:d1:1a:d9:ed:bf:07:c8:46:e2:e5:ce:93:87:
                    61:49:53:71:0d:7e:9b:62:17:be:bd:87:e0:9d:75:
                    ae:63:dd:03:22:6e:2d:aa:a7:c4:d6:1d:0f:7e:eb:
                    01:22:8a:c9:9b:4e:b7:21:08:9c:52:f3:0a:16:d4:
                    e9:82:5c:43:be:27:09:7b:36:0e:e7:70:1f:a9:6e:
                    6d:1b:9d:1d:e0:7b:2a:c1:d9:d6:32:7a:ef:9e:eb:
                    06:9d:95:e9:79:08:04:08:76:9e:30:11:47:07:ec:
                    87:03:02:31:b1:0a:80:62:1a:0f:9c:1e:3b:05:e6:
                    77:9c:89:92:64:04:e5:fe:bb:06:cb:5b:82:be:54:
                    68:e9:7f:70:d7:0e:dd:68:f2:69:ea:2c:7d:63:d2:
                    33:e2:43:4e:8d:bd:8b:dd:70:0d:55:a0:42:4f:15:
                    d2:a0:1f:3b:e7:68:11:55:a9:46:e8:9e:94:aa:24:
                    18:f7:ad:a5:e1:41:c2:c9:f0:01:f4:1a:f3:2a:a7:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:88:9B:AC:51:F2:E8:1F:96:4A:F9:A5:33:4A:87:FB:BB:E7:69:31
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:59:8d:92:26:29:8b:6c:86:57:d3:7e:98:b6:11:5b:a4:59:
         0b:10:f7:7e:39:fd:d5:b5:7d:c4:27:0c:ec:0a:6d:2b:f1:26:
         9f:81:90:b0:66:19:62:31:48:71:99:38:cc:c2:c2:5a:28:02:
         c7:23:0e:f5:75:09:e0:c1:65:a7:95:73:13:5b:3e:8d:c6:7c:
         9f:d5:1a:ba:ad:dc:97:cb:84:bd:15:5d:b6:74:47:33:a9:a3:
         1e:0b:39:40:2a:9d:5b:1b:eb:1f:e6:27:78:08:24:bd:4b:6e:
         3a:74:86:07:3e:8c:17:9d:67:74:02:55:bd:43:43:b9:44:d0:
         1c:78:4f:6a:75:44:54:b2:01:a3:ce:a6:43:0b:df:f0:82:9e:
         4a:d7:6b:2d:83:7e:28:70:16:d4:46:47:d3:a6:68:6d:97:39:
         56:9e:03:b2:2a:9b:5d:c8:34:b6:21:5a:02:87:6e:98:85:8b:
         cd:0e:d6:5a:0f:69:83:23:37:c5:6a:f6:05:6d:2e:9b:8f:19:
         8e:94:17:80:77:cd:e0:6a:53:e8:9c:b8:68:bd:37:fe:41:c9:
         1a:38:ed:a8:de:3d:fc:b3:c8:b2:d1:aa:f1:e3:72:62:c4:ab:
         68:a4:23:b6:cb:c2:18:d7:14:29:07:d8:9f:e1:36:c9:d0:ed:
         7f:4d:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org