Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37382e302f32332d3233203d3e20323632323936.roa
File:                     3137372e38352e37382e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          frR8GEc0/CVXgLDw20F1GSAwLmJ3gk3YsfN63k4Cq0k=
Subject key identifier:   30:15:42:07:53:59:6B:51:6C:0F:F2:16:16:6C:8F:B1:3F:57:D0:6A
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       70EFE180EEE22BD1BA3FA5E5E49F8EED41F296CF
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37382e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:09 +0000
ROA not before:           Thu 10 Oct 2024 19:27:09 +0000
ROA not after:            Thu 09 Oct 2025 19:32:09 +0000
asID:                     262296
IP address blocks:        177.85.78.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ef:e1:80:ee:e2:2b:d1:ba:3f:a5:e5:e4:9f:8e:ed:41:f2:96:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:09 2024 GMT
            Not After : Oct  9 19:32:09 2025 GMT
        Subject: CN=3015420753596B516C0FF216166C8FB13F57D06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:8d:13:5b:c9:b0:ba:d4:2c:d7:e4:34:29:
                    98:bb:3d:d8:2a:0e:8b:7b:71:9d:13:7a:83:92:dd:
                    61:26:00:9b:dc:08:f0:cd:6a:af:af:72:4a:c1:d7:
                    c4:e2:d3:21:4f:cc:be:a8:bf:19:5b:69:3b:d4:5c:
                    92:11:05:54:36:67:46:43:10:a3:9f:85:c3:f1:07:
                    ce:13:4e:59:25:e2:31:44:66:d1:83:24:e3:4e:ae:
                    00:c9:8c:30:06:82:4d:97:1b:b8:4a:d7:89:56:c6:
                    33:d3:de:fb:ce:93:ad:e1:55:d6:f3:6a:e0:7d:1b:
                    e3:8d:6c:a6:b8:95:c1:6a:a6:2e:02:6f:56:02:e4:
                    34:1f:c2:16:9f:e9:30:29:67:80:f6:d0:8c:c6:15:
                    ea:f9:bc:92:43:f2:46:31:7f:74:74:84:19:05:0d:
                    57:ec:49:91:0a:04:d3:91:c7:f2:e3:f8:68:ca:1f:
                    11:cf:bf:d0:c6:f2:0e:61:f2:a8:f7:94:f1:02:78:
                    7a:52:d1:a6:8a:e1:44:de:e0:34:4d:4f:49:3d:86:
                    e1:f5:ba:a7:a7:cb:54:88:03:2c:f2:4f:a6:51:cd:
                    19:07:73:d0:98:76:ef:71:4e:06:50:31:7e:1f:00:
                    d5:6b:ff:d3:2a:de:72:c9:8b:f4:c7:c0:0c:fa:8b:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:15:42:07:53:59:6B:51:6C:0F:F2:16:16:6C:8F:B1:3F:57:D0:6A
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37382e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:4a:a7:23:36:1b:f2:4a:96:50:e6:14:22:81:5a:46:9b:59:
         4a:0c:c3:23:5c:90:22:a5:85:c6:d5:70:87:f2:db:91:43:2e:
         8a:66:50:ae:df:6c:f5:be:3b:75:15:ee:6c:56:77:03:e0:0e:
         27:52:af:0d:c1:c1:b8:6c:b7:4c:51:f0:3b:f2:72:98:95:5f:
         c2:b2:64:bf:86:f6:84:e8:1c:4a:38:09:ef:43:26:b0:0e:7a:
         4b:e2:e9:d5:10:e7:e5:03:17:07:3e:81:89:b9:b6:73:2f:7e:
         80:e7:b7:09:33:78:2e:a7:e7:82:71:da:3e:40:aa:35:99:e1:
         1c:e2:3d:cb:f8:c0:86:14:11:76:cb:0b:e2:c2:fb:74:48:fc:
         dc:43:0f:19:bc:3e:82:66:6a:72:1f:8f:b4:4d:70:18:ea:d1:
         b3:5a:21:13:66:39:a5:59:9d:25:6c:3c:91:b5:43:2f:61:2d:
         7c:c4:1a:7e:db:95:5f:58:0b:46:1d:09:1e:a6:65:88:09:62:
         e7:a1:4b:6a:6d:fb:ae:3b:81:97:85:05:98:0c:20:52:cb:ee:
         b9:16:de:19:27:9d:49:1b:0f:15:f3:58:f6:e0:80:bc:f3:bb:
         a9:40:e8:50:f5:09:3a:b9:ff:9d:af:03:5c:87:ed:f2:f4:a1:
         e4:23:8c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org