Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa
File:                     3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          H0tCfS4FhDR9u5dzpoUdRMVClKBhNKA/kS5ZPl2myF0=
Subject key identifier:   4D:0A:4A:A7:ED:5F:12:1F:83:AD:E6:D1:D1:2A:5D:DE:80:E2:B6:48
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       1558B6FCF28BF98F8D555485A0DC96C148A9550A
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:09 +0000
ROA not before:           Thu 10 Oct 2024 19:27:09 +0000
ROA not after:            Thu 09 Oct 2025 19:32:09 +0000
asID:                     262296
IP address blocks:        177.11.126.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:58:b6:fc:f2:8b:f9:8f:8d:55:54:85:a0:dc:96:c1:48:a9:55:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:09 2024 GMT
            Not After : Oct  9 19:32:09 2025 GMT
        Subject: CN=4D0A4AA7ED5F121F83ADE6D1D12A5DDE80E2B648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:bc:e8:47:73:fe:47:57:d5:4d:75:8e:0d:
                    7a:1d:23:be:25:0c:68:b6:27:5e:86:87:08:9b:f9:
                    b6:fd:68:46:0d:c3:34:45:ff:9f:b9:e2:fe:d8:bc:
                    df:f9:39:07:cc:cc:98:99:fd:94:0e:d8:ad:c9:ea:
                    8c:8a:14:bb:ba:a3:31:63:14:bf:d4:c4:a6:2f:49:
                    2e:d6:77:29:e1:a8:68:43:7e:1c:bf:a2:f0:c7:fe:
                    5d:91:5d:88:e0:b5:7f:78:41:d2:79:ea:e1:e4:21:
                    76:bf:a9:94:23:d1:5e:45:5a:c7:d9:49:cb:15:d3:
                    05:a6:3b:e3:8d:2d:64:dc:59:ec:db:bc:1d:85:8a:
                    11:cd:0e:13:b6:a8:fa:2c:79:ec:1f:10:ce:ed:16:
                    04:f3:f0:46:ca:45:15:11:2d:fd:e2:06:51:ad:b6:
                    a0:58:3b:a7:8a:47:71:c9:91:2e:67:0d:9f:c1:3d:
                    24:a8:73:4b:8c:01:5b:02:04:e7:66:8f:04:c5:53:
                    e5:f7:c3:5b:2e:c7:0a:10:d6:ac:fe:e2:48:83:22:
                    f8:58:73:0e:96:0f:a5:c3:21:ba:f2:cf:9c:aa:ba:
                    d0:80:ed:64:3d:0a:ea:4c:3e:4e:8f:61:c4:10:50:
                    32:f6:6d:9d:e4:af:57:75:a0:a7:fe:c0:d0:3c:d8:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0A:4A:A7:ED:5F:12:1F:83:AD:E6:D1:D1:2A:5D:DE:80:E2:B6:48
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:08:10:7e:b3:92:c0:99:10:f3:a2:42:e5:59:13:71:56:3e:
         2d:7c:01:d7:ac:2c:82:9f:85:e3:1c:fb:b5:c0:bc:56:49:dd:
         1a:a6:7a:dc:a7:2d:ba:38:f8:ac:da:a6:45:e3:84:e2:fc:de:
         7c:e4:34:dd:99:a4:b6:4d:5d:46:5f:c9:eb:d6:fa:65:14:fb:
         2d:28:16:f7:49:a6:b4:69:3e:ce:46:3c:f8:bd:40:b4:cc:03:
         08:ca:d2:4f:df:f9:eb:67:38:73:76:2e:03:56:6e:e5:ea:8d:
         da:03:de:34:ad:52:b2:3f:29:39:15:90:e1:65:d4:d0:fa:9e:
         22:33:23:3f:fa:63:78:c9:98:d4:cc:76:a4:f4:e1:7d:2f:ae:
         8a:4b:75:f4:e4:66:10:9e:6b:76:78:49:e8:63:8a:05:14:3f:
         fe:eb:66:f7:43:ac:fe:5f:ea:fc:83:74:5b:f6:48:2f:75:24:
         c6:38:fb:c1:1d:69:5c:ad:8c:be:95:a2:46:ab:f3:56:88:f0:
         31:3c:5f:7d:81:ee:b7:91:94:5e:e6:38:30:9e:b8:5b:9e:fe:
         45:8f:e1:33:5b:f0:3d:a3:b4:66:29:26:9f:1b:19:30:22:0a:
         97:e2:47:a5:32:57:1b:5f:de:17:82:97:18:c6:59:9c:0a:8f:
         37:2f:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org