Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa
File:                     3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          P28FDcmO97gE5TeixQhX6AHMYU8FQ6kJSuc6PK2Dnec=
Subject key identifier:   60:CE:EE:B3:4D:6D:1E:A4:D4:DC:BB:CD:7C:AC:AF:BB:F5:47:62:68
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       6F57F33B1E3406C2F37EA8D4CA1C064EA6BF2987
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:08 +0000
ROA not before:           Thu 10 Oct 2024 19:27:08 +0000
ROA not after:            Thu 09 Oct 2025 19:32:08 +0000
asID:                     262296
IP address blocks:        177.11.122.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:57:f3:3b:1e:34:06:c2:f3:7e:a8:d4:ca:1c:06:4e:a6:bf:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:08 2024 GMT
            Not After : Oct  9 19:32:08 2025 GMT
        Subject: CN=60CEEEB34D6D1EA4D4DCBBCD7CACAFBBF5476268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:2f:f3:e4:18:4a:4c:dc:73:d8:3f:82:61:
                    45:a3:1c:87:04:4d:4c:14:0e:10:f2:6f:e5:2c:d5:
                    f3:e6:82:12:67:09:f7:0f:e7:73:37:f8:2f:84:1d:
                    63:df:5a:4e:a2:60:89:03:69:2c:e1:51:8d:22:3c:
                    d8:67:7e:43:ae:3b:35:78:90:aa:f7:36:c8:1d:dd:
                    cb:ed:7f:de:7e:f7:b8:8c:f6:73:cc:27:66:aa:07:
                    5f:f9:50:c0:b2:11:db:dc:5c:34:46:1b:df:ac:08:
                    a7:e7:d3:c6:80:a1:d7:83:c7:bb:01:74:55:14:9c:
                    39:60:36:67:ef:fe:48:6c:6f:62:3d:9c:db:88:95:
                    e0:8d:0d:b7:b3:76:31:ba:b0:08:8f:06:30:fb:63:
                    49:bf:7e:89:84:74:3f:6d:ed:b5:07:18:65:94:8e:
                    da:8b:1f:21:2e:89:ef:82:f8:54:86:d6:46:56:bf:
                    0e:8a:d7:8d:c6:54:eb:49:fa:9f:33:48:f3:95:de:
                    d2:be:6f:e5:82:3d:49:7c:17:23:92:8a:90:c3:3c:
                    3c:b5:32:39:30:51:fd:43:49:e9:1a:00:32:b9:56:
                    0d:b5:fd:f3:df:40:e2:b5:5f:ff:85:0c:cd:68:16:
                    59:48:06:d8:20:90:1c:95:69:7d:f3:3c:1d:42:0f:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CE:EE:B3:4D:6D:1E:A4:D4:DC:BB:CD:7C:AC:AF:BB:F5:47:62:68
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:b1:e4:13:45:c1:ab:70:a7:e2:e9:21:33:f2:a8:de:d3:2c:
         c9:d5:11:c4:43:56:af:b5:1b:cb:f8:29:dd:ef:c3:ac:56:97:
         66:99:a4:45:b9:eb:0d:69:96:8f:46:f0:a4:bb:84:21:bc:99:
         1a:db:ec:0b:23:cb:f3:ff:26:3e:2f:e3:39:19:05:8f:98:88:
         04:fe:52:c8:82:2b:0b:4e:18:5b:01:01:ae:ab:8a:29:e3:a3:
         c4:28:d7:b8:b4:61:36:74:4c:57:68:63:ed:b5:5b:12:47:fc:
         fa:54:41:62:84:35:4d:f9:41:1f:d1:5a:fc:57:95:7d:93:e9:
         9b:ea:84:81:00:bf:cc:5a:a1:a1:f1:27:52:ab:a3:69:88:77:
         d2:ca:60:ae:0f:bc:52:33:d6:e8:97:8d:6f:c1:01:0d:60:42:
         78:c2:e7:6d:51:9e:02:06:e8:61:e3:21:3c:e8:f6:ad:ee:1c:
         26:3c:f6:95:2d:bb:8e:49:b1:34:95:17:38:3b:3b:35:e1:7b:
         41:f1:83:b3:42:d4:0f:e2:ed:f2:e3:50:b0:3c:5c:86:02:2b:
         f8:ec:e6:28:d5:27:d4:ac:58:d2:7d:0e:b1:25:38:95:5e:d6:
         29:48:ee:ed:a7:07:38:c1:77:28:68:02:18:69:0d:33:e1:c2:
         0a:ec:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org