Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37382e302f32342d3234203d3e20323632323936.roa
File:                     3137372e38352e37382e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          8owreWUrLj9HySYxI2d1g9UojVRlKwtcMJxglswwvxE=
Subject key identifier:   AC:87:01:5D:F4:99:0E:FB:55:85:82:32:B4:0A:54:B2:7C:B7:40:97
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       20DA4DBCA1FF691427D822D1725ECFD50A58AF8E
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37382e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:39 +0000
ROA not before:           Fri 20 Sep 2024 16:22:39 +0000
ROA not after:            Fri 19 Sep 2025 16:27:39 +0000
asID:                     262296
IP address blocks:        177.85.78.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:da:4d:bc:a1:ff:69:14:27:d8:22:d1:72:5e:cf:d5:0a:58:af:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:39 2024 GMT
            Not After : Sep 19 16:27:39 2025 GMT
        Subject: CN=AC87015DF4990EFB55858232B40A54B27CB74097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:92:c6:c0:1c:41:23:14:b4:52:b3:c5:d0:
                    83:09:9d:ca:a0:e9:bb:69:8a:38:55:16:a7:6f:09:
                    c0:e9:83:68:48:e2:fd:81:04:43:3d:75:bc:11:12:
                    e3:80:e9:c4:f6:59:15:2c:92:ae:cc:b0:b0:e1:2c:
                    b0:c6:2c:f7:1d:5b:15:47:8f:24:25:2d:86:c3:3b:
                    d6:5b:10:0b:8f:49:0c:89:50:2b:22:65:47:14:2d:
                    60:e9:21:1b:61:9b:f0:9d:ea:ee:a7:f4:5f:15:87:
                    b9:3a:fb:e4:ba:e8:b6:01:a4:1e:76:7d:a1:67:57:
                    c5:07:2d:6b:ab:a0:b0:99:1b:c4:d6:16:2c:5f:ef:
                    4f:7a:97:f1:42:ac:84:16:5c:30:c2:d3:9e:a4:df:
                    8d:cf:9f:ee:ec:72:a6:b9:8a:75:05:5c:38:ea:b7:
                    cb:2e:90:a7:c3:f9:aa:c5:df:db:93:84:57:9d:8e:
                    4f:18:48:14:9a:3a:63:53:a8:88:43:9e:f2:60:b6:
                    7c:47:22:e6:7c:92:70:4b:5e:d2:d1:cc:1f:fa:92:
                    f8:8a:d6:00:de:55:d5:74:21:e9:f4:a2:a9:f3:71:
                    3c:9f:06:90:18:11:2b:80:52:ad:4c:ab:6c:7d:bc:
                    fe:be:bc:6e:08:e7:3f:d0:a0:8f:c9:db:d6:63:70:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:01:5D:F4:99:0E:FB:55:85:82:32:B4:0A:54:B2:7C:B7:40:97
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37382e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:7c:2d:5d:d2:ad:e0:72:88:28:ff:82:a7:b5:d9:c8:2d:
         4c:c6:5d:81:30:9c:20:cd:29:7d:84:f2:20:d3:a2:ad:88:47:
         14:cb:8f:00:c9:d8:e5:3f:23:8b:9c:5b:5f:51:f7:e2:11:8a:
         2f:cb:f5:a1:c2:a7:82:3e:92:cf:85:d1:79:e1:e1:63:ce:9c:
         89:0e:16:d2:8b:96:e2:b2:d1:9c:78:e4:c9:4e:c9:fe:ec:8d:
         e6:be:77:42:da:0a:e4:a7:fc:b2:91:97:30:08:a3:7b:fb:9e:
         9c:09:6c:65:fd:60:48:03:ca:5a:2e:bb:0e:10:ee:1f:a2:17:
         ca:1d:a3:ed:20:0f:09:4f:d4:79:49:a1:15:33:a8:33:03:53:
         34:bc:5a:70:ac:f8:d2:2e:3c:ac:c9:6b:b1:c5:10:37:16:21:
         68:36:2f:e7:da:77:a5:70:5f:3f:0d:6c:8e:3a:47:6b:16:75:
         82:4e:ce:c8:15:6c:15:fe:f7:9a:21:4e:00:b7:73:55:0c:63:
         26:cb:cf:e1:a1:64:1e:e4:a4:2f:f8:69:d5:70:ec:76:d5:eb:
         a6:a0:39:f0:d1:36:32:43:24:e3:58:69:83:b9:a3:3c:c0:c9:
         b1:b3:74:5d:2d:7e:72:a9:93:42:b2:43:dd:66:5e:c3:2b:87:
         b5:19:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org