Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          0qnCzCMduBZZmO4SH9ahDwK6CGDQchAa/lF5cBsCW/8=
Subject key identifier:   98:BD:FB:C2:55:07:42:9B:41:7C:2E:77:02:F9:D9:6A:47:4C:12:1F
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       0558BEADA6087EBBC541E7BD49070CD67C873326
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:38 +0000
ROA not before:           Fri 20 Sep 2024 16:22:38 +0000
ROA not after:            Fri 19 Sep 2025 16:27:38 +0000
asID:                     262296
IP address blocks:        177.11.122.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:58:be:ad:a6:08:7e:bb:c5:41:e7:bd:49:07:0c:d6:7c:87:33:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:38 2024 GMT
            Not After : Sep 19 16:27:38 2025 GMT
        Subject: CN=98BDFBC25507429B417C2E7702F9D96A474C121F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:ef:ac:56:3a:e1:df:ea:2f:09:2b:ff:4c:
                    99:1d:ec:9f:3f:8e:45:9e:f3:58:03:14:77:31:0e:
                    1a:05:7b:46:3b:fa:2b:32:c5:27:10:46:8e:84:f9:
                    31:2d:e4:c4:ca:77:bc:11:a7:82:54:d2:55:9c:2b:
                    0f:53:b0:08:4c:7c:fb:cc:c7:2f:3e:51:c8:2c:1f:
                    0e:19:e7:b1:47:5b:45:c8:f5:cb:23:ce:44:fb:b0:
                    b4:b8:d9:c6:52:3b:02:06:6c:4e:b9:65:14:f5:b1:
                    cb:03:a6:5f:f2:73:6a:24:7b:cf:20:9b:e7:f9:1d:
                    93:89:fc:97:a1:b4:3f:d6:3a:22:3a:c9:69:60:3b:
                    0a:fe:75:32:c2:df:74:be:60:83:d5:b7:46:65:bb:
                    71:7e:a0:36:2f:8a:1d:02:bc:d4:ea:30:ac:a6:19:
                    e7:0b:54:71:c6:04:56:37:49:fe:07:68:6a:05:ce:
                    d7:ff:63:71:16:59:b9:66:97:22:d3:4e:93:4c:f1:
                    33:7c:8e:03:5c:6a:3a:fe:b9:5e:76:00:15:99:07:
                    07:ea:97:b1:c3:58:6a:6a:24:84:41:6a:39:fa:ed:
                    52:e8:c5:3d:55:48:bc:13:8c:60:b4:40:da:66:9b:
                    f7:c3:a7:f9:60:65:27:11:1b:53:5b:16:61:7d:8f:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:FB:C2:55:07:42:9B:41:7C:2E:77:02:F9:D9:6A:47:4C:12:1F
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:de:c1:dc:9a:9d:13:4f:12:db:c3:c9:05:d5:92:72:06:df:
         4c:72:97:8f:73:4a:98:58:06:ae:56:90:bb:d9:a0:92:cb:26:
         dc:15:d0:14:64:b8:5f:c8:ca:33:87:8e:e6:ed:d2:69:7e:28:
         40:6e:37:5b:7b:76:b7:04:79:22:28:8e:0a:ff:76:ff:80:2b:
         1b:f0:35:32:3b:0e:ce:4d:89:25:62:4c:09:8e:69:18:10:20:
         33:dc:bd:4b:e6:f9:bd:1c:20:6b:79:c2:02:e9:3f:22:86:63:
         28:3e:86:8c:21:a4:b2:3f:53:5b:56:6a:72:26:e0:32:6d:59:
         a0:2f:85:bf:af:df:39:f0:3e:29:ac:08:1b:18:0d:f3:ef:b1:
         7e:f0:1b:42:df:ed:77:51:a5:a2:c0:54:5e:86:3f:28:bd:67:
         3e:2a:87:c3:d7:3f:a6:45:af:1a:db:66:32:c3:9a:0b:a6:d1:
         b2:ca:c1:69:3e:91:37:06:17:c8:16:69:b2:7d:92:29:32:01:
         0f:2f:db:3a:6e:79:cb:ce:6e:73:0f:ef:2b:ae:7e:2f:a3:0a:
         54:8b:a2:f5:77:95:91:b2:7a:36:de:23:d2:4c:21:e1:8e:d0:
         c3:66:f4:f1:56:a2:2c:d6:dd:a6:3d:fb:9f:9a:19:4d:14:e1:
         72:1b:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org