Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          Rpa7AzcvZLV2zcDPf0ftTmfzvy5nAcFFzGZGJWobk2Y=
Subject key identifier:   24:D3:51:54:4A:E3:30:A4:13:F1:7D:9C:9F:BF:B8:4A:41:3A:98:D0
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       2C54DDC886281FBD41FD48CB68A17B657C1AB4D3
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:39 +0000
ROA not before:           Fri 20 Sep 2024 16:22:39 +0000
ROA not after:            Fri 19 Sep 2025 16:27:39 +0000
asID:                     262296
IP address blocks:        177.11.121.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:dd:c8:86:28:1f:bd:41:fd:48:cb:68:a1:7b:65:7c:1a:b4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:39 2024 GMT
            Not After : Sep 19 16:27:39 2025 GMT
        Subject: CN=24D351544AE330A413F17D9C9FBFB84A413A98D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:3b:57:a7:c7:5f:bc:e2:57:a4:ef:2e:c2:
                    ba:d0:10:e7:4b:f5:08:a3:34:4b:05:e9:7a:10:8f:
                    04:07:86:49:db:80:3c:97:a1:09:fc:ba:82:44:64:
                    29:59:1b:db:7c:78:2c:40:30:e3:48:26:1f:df:bf:
                    fd:d6:6e:e7:8a:9c:56:ed:31:86:5e:ae:70:f4:dc:
                    a8:58:40:4b:aa:58:6b:f5:2f:77:b6:12:a7:43:04:
                    e4:2d:8c:e1:7d:c7:1c:a0:0e:91:72:3b:d1:fd:ec:
                    c8:64:1a:af:31:74:81:9d:19:e1:2a:89:c1:cb:9a:
                    26:d4:01:d3:8d:69:75:15:3c:20:3a:83:dd:11:3c:
                    a7:fe:2e:2f:44:2f:6d:e5:1e:44:7f:a7:6e:bd:ed:
                    a8:8f:7d:75:5a:a1:2d:e0:b6:5d:6d:ed:e3:e8:59:
                    43:56:f9:23:54:21:23:3f:1e:88:21:11:25:bb:ee:
                    70:7f:ac:02:6f:4d:5b:b3:ff:f4:26:e5:40:a4:e9:
                    54:49:4c:09:1f:a4:8d:90:78:01:d5:b4:63:6b:bc:
                    d9:38:d4:03:a6:40:e9:70:b8:f2:ef:98:9a:51:a0:
                    10:45:11:01:ae:84:ea:4f:89:be:e6:a8:7f:03:07:
                    26:02:22:0c:25:b1:64:6d:8b:81:f1:ff:2d:cf:ed:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D3:51:54:4A:E3:30:A4:13:F1:7D:9C:9F:BF:B8:4A:41:3A:98:D0
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:fe:4b:39:a7:3f:9a:14:24:d5:8e:61:5d:ca:e2:6e:a4:eb:
         1f:6d:3b:8d:81:1c:1b:02:0d:cf:8c:f2:17:97:d5:b3:41:f0:
         86:4c:bb:38:c9:25:4b:af:80:a2:8f:86:3f:5e:b1:72:2d:9a:
         86:f4:62:45:c5:dc:00:c9:dd:e1:e2:f8:0c:b3:7e:9b:2f:62:
         c4:1b:f5:67:d7:e5:cc:42:39:a5:46:6b:a3:5f:9c:5a:58:56:
         ae:86:3b:fe:39:7a:6b:98:a9:e1:d8:e2:eb:f6:03:6c:74:06:
         8f:57:7c:79:c1:95:7a:fb:4a:4d:a2:fb:0f:ab:a4:2a:b1:f6:
         11:db:64:78:66:2f:73:d7:35:f1:7f:36:4f:f1:85:34:3f:ed:
         d9:1f:56:db:35:cc:21:98:c2:a7:eb:de:64:18:b3:71:6f:3b:
         50:77:e4:2c:d1:5a:69:f9:c3:d3:3c:d4:9d:17:2e:1a:99:00:
         0f:6c:e8:a0:df:57:2d:8a:08:fd:6c:ab:8b:10:48:72:32:a5:
         1e:aa:a3:07:ed:3d:8c:cc:fc:43:7b:84:ed:ce:be:05:d9:71:
         ad:fe:b5:9a:7f:c5:10:64:23:2b:10:b1:67:52:fe:17:b9:ec:
         b3:66:6f:23:60:c1:c2:9e:f3:b3:61:d3:76:fa:b7:3a:29:bd:
         da:74:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org