Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32342d3234203d3e20323632323936.roa
File:                     3137372e38352e37362e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          9wJ32VyEMGampornvsFPSVpyVHhjgfMNCS2cApV0Odo=
Subject key identifier:   FD:DF:54:19:59:FA:1E:D6:3B:83:81:A9:40:BF:F2:9A:60:3D:F1:8C
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       0461A81E1E06F6124BD13EEF62A6038D1F068A91
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:40 +0000
ROA not before:           Fri 20 Sep 2024 16:22:40 +0000
ROA not after:            Fri 19 Sep 2025 16:27:40 +0000
asID:                     262296
IP address blocks:        177.85.76.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:61:a8:1e:1e:06:f6:12:4b:d1:3e:ef:62:a6:03:8d:1f:06:8a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:40 2024 GMT
            Not After : Sep 19 16:27:40 2025 GMT
        Subject: CN=FDDF541959FA1ED63B8381A940BFF29A603DF18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:be:b3:20:d5:36:0a:f2:db:56:61:fd:e6:
                    33:e3:da:96:47:53:de:f8:9f:ea:48:76:11:25:97:
                    50:8a:15:5e:36:bf:fb:97:cc:9f:f9:5e:68:99:44:
                    6b:17:08:a1:86:f8:ff:cc:0b:06:6e:32:c5:f6:e9:
                    ca:69:88:23:3a:ca:60:a1:f4:4c:99:1e:aa:90:f5:
                    4d:aa:f5:d8:9e:af:96:7a:88:67:3f:ba:2a:a5:04:
                    58:5d:4d:a8:9c:09:95:76:25:41:17:44:4f:0c:50:
                    eb:de:c7:4d:21:80:aa:4c:0a:9a:d0:62:0c:77:c2:
                    c4:a6:72:a6:fb:83:12:fd:a9:d7:35:1e:45:cb:8b:
                    d9:1f:d8:e9:72:2c:38:2c:6d:3a:ec:ea:80:a6:6c:
                    2d:5c:53:ea:fb:bc:d8:04:df:68:2a:3d:d0:f4:c1:
                    49:ac:42:08:d5:74:9a:b0:4e:2b:ba:45:47:91:7f:
                    96:7e:97:87:04:83:c8:28:7c:3d:3e:7c:06:c1:b1:
                    71:8c:70:82:83:54:68:0c:65:d2:5d:63:2c:1c:0b:
                    11:de:a9:3b:d7:58:d2:87:aa:d8:54:eb:af:df:0e:
                    37:fa:5c:55:80:85:80:96:54:02:b1:db:c5:fc:d7:
                    3d:23:6b:af:d9:df:fa:00:a6:f9:a6:2b:e7:83:7d:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DF:54:19:59:FA:1E:D6:3B:83:81:A9:40:BF:F2:9A:60:3D:F1:8C
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:2d:72:e5:7b:b3:fb:10:ce:03:3a:00:99:8b:89:d8:43:
         74:c7:44:81:c4:ba:74:ff:d8:d2:00:bd:58:9e:36:f1:5f:a9:
         04:0c:1d:b5:67:42:c0:d9:d8:de:f4:52:4a:17:0a:02:0d:28:
         99:a6:66:a2:e8:06:8a:7a:d9:1f:fa:35:20:eb:12:ae:e2:fe:
         04:e1:53:4e:02:5b:d5:ce:03:28:ff:33:a1:5e:23:f6:e1:52:
         d6:5d:44:1b:99:bd:2d:75:79:ae:4f:5e:25:8f:fe:a1:bc:a1:
         81:25:3f:12:7a:85:2b:64:c6:78:be:01:c9:17:35:47:3d:27:
         b4:04:e1:6b:75:ad:93:32:a5:85:d0:58:8d:b4:17:55:f3:fb:
         36:6d:c0:19:2f:7a:b6:6d:35:3a:d8:6b:83:f3:1d:3e:8e:a8:
         ca:5c:eb:f8:e2:81:cd:8e:2f:be:b9:02:82:f9:11:2e:29:a9:
         6f:3e:55:5e:1f:83:a7:65:e0:24:c7:1f:51:2d:c0:fd:ae:06:
         24:bc:8c:45:4e:41:53:4e:0b:ba:21:ba:74:21:02:44:cd:9e:
         a8:48:ff:b3:f0:65:25:02:00:75:59:54:85:25:94:f5:c1:07:
         55:81:a1:b5:01:be:c3:6a:9a:bb:b2:d2:2c:dd:ee:c8:dc:d5:
         6c:56:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org