Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132372e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132372e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          bOTtXwW7yag4gEgkqcx45d7765mYlAtV7msFfvwtP+M=
Subject key identifier:   1A:BB:AB:5C:C8:08:D5:C7:7D:BB:30:FA:24:3C:C2:4C:4F:53:EC:87
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       44F234A4CFC9D611AFE6B427DC6C21706A9351AC
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132372e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:39 +0000
ROA not before:           Fri 20 Sep 2024 16:22:39 +0000
ROA not after:            Fri 19 Sep 2025 16:27:39 +0000
asID:                     262296
IP address blocks:        177.11.127.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:34:a4:cf:c9:d6:11:af:e6:b4:27:dc:6c:21:70:6a:93:51:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:39 2024 GMT
            Not After : Sep 19 16:27:39 2025 GMT
        Subject: CN=1ABBAB5CC808D5C77DBB30FA243CC24C4F53EC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:92:01:c7:4e:ab:61:57:f2:6e:1f:65:58:
                    7e:e7:28:2f:0e:75:3d:7f:06:8f:84:1c:cb:ec:48:
                    29:69:32:16:c3:42:d3:0b:ff:8a:04:a2:ce:78:92:
                    7c:22:ba:ec:db:d3:b3:3a:ee:4e:7f:1f:fb:1d:c5:
                    ef:bf:c4:31:b7:80:06:dc:70:15:7d:38:ee:69:10:
                    29:ee:88:01:3c:bb:6d:65:84:90:19:40:a8:13:c8:
                    ee:d8:da:0d:be:79:db:b5:1c:4e:a7:db:55:bd:49:
                    dc:9d:56:5f:b0:59:85:cd:86:b8:a7:55:7b:f1:41:
                    8f:7c:ca:02:6c:ce:2e:3e:e2:47:d7:d5:1c:25:c3:
                    0a:8d:f1:57:29:04:81:c8:36:7b:be:11:2a:6e:84:
                    fa:80:8a:2f:1c:f7:6a:f5:57:c1:7a:34:f9:1d:d8:
                    b1:44:0d:bc:92:09:cc:da:9e:10:5d:97:c1:5c:5b:
                    5c:46:f3:f1:4e:9b:c5:1c:b9:02:22:ee:02:14:bb:
                    1d:9c:4b:b2:60:6e:23:24:2a:25:34:d9:6e:d7:3a:
                    40:49:fc:b5:ff:b4:ae:56:15:12:23:44:5f:c3:9e:
                    c7:ba:87:7c:5c:cf:fb:d0:f7:23:9f:40:ef:8f:33:
                    91:cf:3d:58:c5:9b:6c:38:3d:10:98:86:34:4e:ab:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BB:AB:5C:C8:08:D5:C7:7D:BB:30:FA:24:3C:C2:4C:4F:53:EC:87
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132372e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:69:c0:5d:53:f8:96:0f:cb:2d:7e:eb:26:a9:de:7d:25:
         ef:a5:f3:44:bc:f5:dc:64:4e:5b:d5:b4:60:3a:aa:23:88:0c:
         3e:bf:4d:e9:0b:ba:76:8a:12:e6:b3:df:62:e9:01:b2:d8:4d:
         57:91:f3:fb:97:1b:e2:78:bd:64:aa:b6:5f:60:56:43:7e:0f:
         2c:42:3a:67:45:4c:79:32:3e:f9:c6:2f:22:3f:bd:f7:c3:00:
         e4:df:47:43:46:5b:d5:95:ac:6f:b6:ab:e8:bd:73:e1:df:74:
         8e:51:bf:95:53:7c:51:33:fd:e6:4c:e0:c8:83:0d:3f:8e:7c:
         89:eb:1a:ff:f7:05:b8:b6:48:6b:27:ee:bb:50:77:05:30:82:
         15:44:8e:e0:e5:3d:3a:18:65:d8:42:06:1e:e6:1d:63:d1:5b:
         1f:93:be:8e:3f:5a:73:0a:55:e6:38:03:f8:55:8b:46:3c:68:
         cb:6f:76:e7:80:11:d9:e0:42:62:5a:e1:90:7c:b1:86:a1:e1:
         e8:10:42:66:83:28:02:71:96:f2:19:80:26:c3:9b:e5:ec:6a:
         b6:4f:79:af:79:08:ed:e3:47:de:2c:41:ca:53:9d:ad:9a:9a:
         30:e7:2b:d2:75:1c:dc:70:1b:12:a8:d5:06:08:4c:12:62:7f:
         70:1f:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org