Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          u9q2XfvYtlbO0WNBYCzyAY+uyVq/R67w7N4mH6Ofh1s=
Subject key identifier:   50:69:DE:1B:4D:85:DD:FB:8C:22:86:C5:4D:7C:01:4B:A4:FA:C8:45
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       62DCF708C5FDF7320DADD049751FA6D6F8AC285A
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:39 +0000
ROA not before:           Fri 20 Sep 2024 16:22:39 +0000
ROA not after:            Fri 19 Sep 2025 16:27:39 +0000
asID:                     262296
IP address blocks:        177.11.123.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:dc:f7:08:c5:fd:f7:32:0d:ad:d0:49:75:1f:a6:d6:f8:ac:28:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:39 2024 GMT
            Not After : Sep 19 16:27:39 2025 GMT
        Subject: CN=5069DE1B4D85DDFB8C2286C54D7C014BA4FAC845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:c8:17:17:e8:e3:95:24:8b:75:9e:71:98:
                    6c:ef:a9:f4:2a:72:a2:73:57:c3:e0:48:b1:a2:a2:
                    2b:41:ed:a4:a3:a6:7e:2a:84:94:c8:c7:06:39:55:
                    01:cf:82:15:f7:a7:e8:4d:6e:4d:41:4e:b0:a5:5a:
                    6e:36:b2:02:3e:5d:cc:49:d8:56:05:55:ec:e5:9a:
                    34:b8:ea:80:46:04:47:42:65:dd:49:59:10:8e:ee:
                    45:92:c1:28:ba:af:4e:65:a4:f9:fc:62:28:8a:b9:
                    a4:95:32:72:b7:ca:d9:6d:6d:d7:e7:f6:74:4e:9a:
                    4b:c7:10:7f:58:16:3c:77:fe:46:52:6c:75:4e:74:
                    d0:65:d9:24:31:75:6d:b0:03:2a:3e:e2:2b:41:4b:
                    69:2e:3d:41:fb:a9:a3:5d:7d:6e:c6:3b:f8:31:50:
                    f9:aa:ac:e7:88:a0:b8:67:23:29:e8:c4:b4:d5:60:
                    8d:1c:1b:79:97:98:42:5b:f7:6d:61:ed:11:43:48:
                    6c:f5:e7:ff:81:3b:f1:f6:be:1a:1a:37:15:52:3d:
                    13:20:ba:14:56:02:a9:05:3f:3f:d5:ff:73:df:26:
                    46:0d:f2:fc:db:f2:fa:4f:58:84:24:47:13:13:7d:
                    e5:ae:c7:68:96:30:b7:a2:94:bd:90:ec:d8:da:88:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:69:DE:1B:4D:85:DD:FB:8C:22:86:C5:4D:7C:01:4B:A4:FA:C8:45
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:bd:29:a5:51:67:45:15:05:4a:94:64:b1:60:15:d7:84:
         d4:04:a5:e7:dd:b6:15:30:25:a9:77:27:09:89:60:06:a6:3a:
         f4:2d:55:5d:9c:be:33:d9:a8:b4:6b:5d:62:eb:6a:12:a1:64:
         e5:4b:83:4b:a8:aa:1b:01:d5:4f:22:f3:9e:b0:9a:87:f0:ab:
         23:59:d8:7a:1d:ce:d7:15:05:cc:eb:73:af:23:14:64:dd:32:
         94:17:4c:80:cc:17:7e:98:6c:40:74:27:1c:0a:95:ad:42:2b:
         b9:8a:6b:0c:76:63:2e:9b:9c:2e:62:ec:a7:bb:cf:5e:e6:23:
         6f:71:d6:3f:b2:7a:a4:22:ad:cc:88:6e:8b:07:ca:df:0f:15:
         0f:7c:b3:3f:ab:a6:46:89:8f:cb:97:12:63:b0:f2:3e:ec:a6:
         ae:93:76:45:82:59:78:4b:62:fe:f4:9e:7e:ca:b2:42:e9:bc:
         ab:46:4e:24:69:0b:b9:be:86:5d:8f:fc:f4:d4:21:6c:ea:27:
         a9:bc:ed:55:8c:76:61:e1:92:d6:88:1a:36:d0:f8:2d:ef:29:
         42:95:c5:5d:73:3e:f1:70:a1:ae:b8:55:a9:f7:e7:b7:64:f9:
         97:e2:cb:71:2c:b1:76:fc:85:63:7f:f4:b0:9c:d1:65:94:e1:
         e4:8b:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org