Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          2jHxbXBzOEG2nakyGY+dFpo2Mv/DByIPL+9K/GYexpk=
Subject key identifier:   E5:91:F6:CC:22:95:AF:62:FB:23:2E:CF:55:DD:00:53:0E:05:A1:FD
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       5FCBF6772890ED16A038340AD77EB3E31E763132
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:39 +0000
ROA not before:           Fri 20 Sep 2024 16:22:39 +0000
ROA not after:            Fri 19 Sep 2025 16:27:39 +0000
asID:                     262296
IP address blocks:        177.11.124.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cb:f6:77:28:90:ed:16:a0:38:34:0a:d7:7e:b3:e3:1e:76:31:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:39 2024 GMT
            Not After : Sep 19 16:27:39 2025 GMT
        Subject: CN=E591F6CC2295AF62FB232ECF55DD00530E05A1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:e1:f8:de:8a:17:2f:e2:59:a9:cd:30:8c:
                    48:4d:ec:54:6f:62:0c:b1:48:85:3a:aa:a4:e7:74:
                    b8:1c:c8:06:13:2f:c4:f6:82:ba:89:59:9b:13:fe:
                    2e:d5:c6:50:a3:d2:a2:28:ce:c9:f8:e3:a6:7f:6b:
                    2d:50:0b:4d:ab:5c:41:09:b5:a3:1b:9f:80:c1:a1:
                    c1:41:40:9a:9f:57:07:08:2e:f7:62:e7:d7:4a:32:
                    3d:10:19:93:dc:aa:6a:80:3a:49:c9:59:6c:fb:87:
                    f3:61:18:14:28:3c:2f:47:af:c7:db:72:a7:5f:bb:
                    3e:f2:8e:ca:89:4b:93:06:80:dd:dd:14:f3:7e:c1:
                    82:36:b4:ea:ce:ae:94:8a:49:8a:f6:11:ca:05:a5:
                    81:a9:6f:95:39:f7:ef:d8:a2:cd:7b:5a:66:d6:44:
                    de:1d:b3:11:0b:51:6a:83:6d:ef:c5:73:72:d4:a9:
                    35:ce:fd:90:af:ac:88:cc:52:f0:df:a1:fa:8d:e9:
                    15:50:b4:7f:31:e8:3d:eb:ae:dc:f2:3a:74:14:09:
                    97:e9:49:a6:55:0c:8a:fc:99:3c:5e:23:88:21:22:
                    9c:15:07:45:d6:60:f3:10:29:87:6b:51:01:c5:1b:
                    dd:e8:22:1f:0b:40:d4:00:51:ca:e4:f6:da:0d:95:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:91:F6:CC:22:95:AF:62:FB:23:2E:CF:55:DD:00:53:0E:05:A1:FD
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:68:4c:03:0e:89:89:f1:f3:55:d3:5c:63:6d:7f:0b:c8:05:
         68:c6:bf:bb:9d:e0:4f:28:9a:97:18:14:d9:8d:b1:2a:32:0b:
         52:c3:d4:53:1b:bd:f2:eb:36:ac:64:dc:2e:15:f8:78:c9:6b:
         d7:82:f7:79:46:db:32:33:06:1b:91:4f:e0:e9:ee:8a:e0:2f:
         e7:00:0e:a3:a8:30:a0:45:da:88:4a:a0:05:39:7d:71:05:b5:
         e8:d1:12:41:b9:8f:96:ca:e8:3c:ec:76:24:ff:cf:cc:e3:04:
         18:ed:b6:cd:d3:00:55:fd:8d:f6:61:e9:7f:e5:6f:dd:b0:fc:
         a6:23:2d:91:5c:81:80:01:fc:87:be:6b:1e:80:a9:b0:ed:06:
         89:03:98:ed:bf:6d:86:2d:c7:4e:11:84:da:51:d0:87:e2:3b:
         a9:2d:e8:19:c7:b2:95:03:a5:eb:78:68:c3:15:b7:5a:b6:55:
         91:b9:29:b8:63:bb:a6:04:ef:24:23:b5:23:3e:68:a3:4b:5c:
         f6:a4:60:bc:02:4a:12:19:38:ee:22:c6:29:bc:53:21:81:b4:
         06:c3:f4:33:d4:1f:38:ad:41:52:ee:cf:8b:44:ee:57:82:fc:
         f9:8e:8b:93:46:56:02:d8:fd:f5:48:2a:d8:74:b8:78:7f:b8:
         c7:ac:ed:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org