Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          CNipQ92IxrNVa8LBaVyNNz5vc4y3dyfAuRN3NxBvFVA=
Subject key identifier:   4B:2D:58:11:00:0E:44:DF:49:C1:E9:4C:69:C4:CD:03:65:A3:13:0E
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       38490BF0B56BE8F76A630E53F2561C007BAA62D3
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:39 +0000
ROA not before:           Fri 20 Sep 2024 16:22:39 +0000
ROA not after:            Fri 19 Sep 2025 16:27:39 +0000
asID:                     262296
IP address blocks:        177.11.125.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:0b:f0:b5:6b:e8:f7:6a:63:0e:53:f2:56:1c:00:7b:aa:62:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:39 2024 GMT
            Not After : Sep 19 16:27:39 2025 GMT
        Subject: CN=4B2D5811000E44DF49C1E94C69C4CD0365A3130E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:27:9c:4d:bd:e6:d1:23:66:fc:d9:a3:15:
                    c0:82:50:f9:8e:ba:91:21:41:3e:c3:ea:43:eb:dd:
                    37:b7:28:bc:8d:59:fa:6a:42:e6:91:b3:ea:c3:3b:
                    af:37:ba:33:6e:4d:d6:2b:7c:65:93:1f:8a:0e:6e:
                    fb:47:f9:94:24:0b:45:cf:b5:b2:9d:0d:56:3c:dc:
                    f5:32:6c:73:ef:13:9f:63:90:a0:b9:e6:36:98:4f:
                    e6:83:a9:1a:6c:75:15:0d:16:aa:74:8b:12:d1:7d:
                    8e:e3:c6:b1:87:08:05:29:e6:02:f6:c8:27:06:87:
                    1e:05:26:40:d5:50:64:03:e6:cf:ac:d5:92:0d:3f:
                    9b:71:54:1e:a3:0c:f8:92:d2:10:b6:3b:73:4e:79:
                    fb:7c:87:eb:00:a8:27:de:7d:19:32:78:2e:c7:05:
                    02:64:eb:9b:e7:2f:96:04:4f:bc:e2:ba:5b:9b:c5:
                    4d:f6:d3:b4:a4:1c:ea:90:96:6a:9d:5a:65:e4:3f:
                    4d:6d:c1:f1:f0:7b:b6:fc:0c:db:f5:87:57:c1:da:
                    8e:bd:ce:ac:c4:0f:72:1c:58:79:0e:55:de:fa:46:
                    50:9c:ef:83:20:7d:b6:af:af:d9:21:34:1f:5b:72:
                    97:fe:9d:b0:18:59:d6:88:72:e7:bb:44:5b:84:da:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2D:58:11:00:0E:44:DF:49:C1:E9:4C:69:C4:CD:03:65:A3:13:0E
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:7b:5a:f4:a5:e3:e2:f6:cd:0b:30:1b:2a:93:cf:23:21:
         1a:02:66:ca:cb:cf:03:1d:42:84:1d:97:ae:25:e8:bf:59:47:
         e8:fb:b7:3d:59:19:53:b6:67:8b:17:48:fa:b1:e5:73:d6:78:
         bf:8f:83:d3:07:bf:59:6c:03:4e:a2:cb:16:25:c4:81:25:4f:
         df:4f:2f:d5:58:52:3d:37:51:88:c7:dd:21:33:c3:40:a2:bf:
         33:dc:a8:f9:f3:48:b2:6b:e6:9b:d9:1c:4a:45:68:d1:6b:60:
         58:9f:f5:59:38:bd:45:a5:b2:5f:59:ba:5b:c6:df:cc:c6:87:
         07:62:a6:d3:da:23:e9:34:22:53:0c:67:66:13:95:3b:2d:46:
         ea:7e:1d:9c:06:56:cc:cc:dc:9b:dd:b4:54:ff:a4:10:1c:a8:
         89:0f:9f:24:ec:a5:45:24:c2:0c:e7:84:b5:8e:0b:41:11:3f:
         b1:fc:04:d8:4d:f7:f3:3d:4f:34:46:4d:dd:00:97:fb:ff:ab:
         8c:4c:83:e7:a8:37:40:c9:02:d7:56:98:7a:a8:b3:08:fe:9c:
         bd:7a:c2:98:e1:0f:ab:14:11:a8:e4:fe:de:aa:65:ff:a2:30:
         9e:7f:a2:26:a1:36:ed:49:43:db:b9:48:67:b6:b8:bf:41:61:
         f2:53:0e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org