Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa
File:                     3137372e38352e37362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          20cZn5kat/MpSNU9TRm1eAM7a2VfxB0/vF++lJkf8Ko=
Subject key identifier:   2A:16:C5:CE:61:73:1E:E8:1E:68:84:12:F2:AE:77:D7:C6:24:73:5D
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       4132C0DBC68EEBCCB3B5B5FA22D9159C75530996
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:09 +0000
ROA not before:           Thu 10 Oct 2024 19:27:09 +0000
ROA not after:            Thu 09 Oct 2025 19:32:09 +0000
asID:                     262296
IP address blocks:        177.85.76.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:32:c0:db:c6:8e:eb:cc:b3:b5:b5:fa:22:d9:15:9c:75:53:09:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:09 2024 GMT
            Not After : Oct  9 19:32:09 2025 GMT
        Subject: CN=2A16C5CE61731EE81E688412F2AE77D7C624735D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:c7:65:f7:b2:40:1a:e0:84:0c:0a:67:a1:
                    82:f3:28:24:04:a8:9f:b4:48:ad:a9:b5:e9:67:64:
                    ad:6d:de:bf:45:a9:bf:2d:ec:01:92:a0:94:54:39:
                    ac:5f:ad:2b:1b:fc:fd:69:bc:66:e1:eb:d4:fc:f9:
                    48:11:f8:f3:8c:a3:e0:9c:cc:83:d3:f9:ad:11:54:
                    25:f3:1d:e1:7b:5b:9a:4b:cb:f5:27:c5:93:9f:71:
                    d2:6e:0a:24:e5:9e:1f:e6:e2:37:20:b1:f2:c2:ab:
                    b6:a1:21:49:62:e9:8b:4f:d0:60:89:db:c3:71:16:
                    3c:59:4e:30:d4:a6:ce:65:61:36:56:45:18:4d:dd:
                    33:b8:e4:68:5e:25:de:a6:d4:ca:d7:d6:cc:54:09:
                    17:cc:8a:56:4d:0d:fc:f0:ff:a1:08:17:97:02:a6:
                    9a:24:84:79:04:fb:02:68:a5:f8:1c:e2:1f:d0:cf:
                    f4:e9:11:8d:3b:fa:14:40:a8:e3:8a:4f:cb:f6:37:
                    e0:e3:1e:6e:6a:ca:10:68:c3:55:2f:dd:10:ca:ab:
                    5a:d2:5a:38:9a:2d:f0:3e:47:72:9c:12:57:dd:2a:
                    79:d8:77:2a:cc:7c:1b:56:fb:d6:3a:8a:c2:dd:9a:
                    b4:34:76:d0:f8:d4:f7:9e:0d:73:c7:7d:6a:64:54:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:16:C5:CE:61:73:1E:E8:1E:68:84:12:F2:AE:77:D7:C6:24:73:5D
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:ac:65:6b:f3:13:96:99:13:a7:98:2c:ff:de:26:af:77:e2:
         90:2f:51:3e:65:9a:73:82:ee:da:45:f2:24:4b:97:7a:36:60:
         13:be:57:80:01:90:14:bd:dc:98:ce:f3:37:dc:55:66:89:a6:
         34:72:d1:3e:73:6b:32:d1:a3:4f:b1:da:3a:41:b3:47:c3:cc:
         27:af:fb:4f:74:74:c1:ad:9f:c3:76:fa:26:cb:ee:ab:1a:cf:
         b9:8f:51:19:87:3d:18:e2:dd:a4:4f:b0:88:e6:2c:1e:df:9a:
         e6:90:b7:eb:1b:25:ca:e9:14:3f:f3:7a:8c:4f:ae:5b:fd:f7:
         5b:4a:a9:ef:ce:1b:3e:04:2d:56:81:c5:da:dd:eb:d4:3f:00:
         93:42:ab:f5:1b:d7:dc:82:b2:ec:3c:af:01:5f:d2:91:e2:a4:
         7d:b7:a5:e9:b6:a6:45:46:63:35:a3:b5:35:f0:09:a0:f2:d7:
         03:5c:f2:95:bd:61:d1:e1:f6:8b:47:73:6b:bd:d3:a8:0e:f0:
         52:8c:65:26:e5:d0:82:c0:a9:b8:7f:94:15:5b:76:35:d2:85:
         c8:bf:c8:ec:23:7f:6e:43:53:98:ee:0f:d6:a3:13:b0:79:95:
         f0:e1:43:63:47:80:48:c3:95:80:cf:97:97:28:3e:d0:1e:3d:
         18:1d:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org