Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa
File:                     3137372e38352e37392e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          E+/PPnsxoel6lazoinf8P699qhVwFNSYAY4dlqlSOfo=
Subject key identifier:   8D:23:AC:90:AA:2A:E7:58:01:6E:D7:67:65:7D:96:61:62:65:1D:EA
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       5E06312172579B8CF7887F7D7BE193D96FA8F89D
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:41 +0000
ROA not before:           Fri 20 Sep 2024 16:22:41 +0000
ROA not after:            Fri 19 Sep 2025 16:27:41 +0000
asID:                     262296
IP address blocks:        177.85.79.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:06:31:21:72:57:9b:8c:f7:88:7f:7d:7b:e1:93:d9:6f:a8:f8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:41 2024 GMT
            Not After : Sep 19 16:27:41 2025 GMT
        Subject: CN=8D23AC90AA2AE758016ED767657D966162651DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:96:93:33:55:99:a1:6b:0d:cf:ac:d4:60:
                    0c:06:25:6e:dc:5b:fa:f4:dd:2c:19:f9:0a:e4:64:
                    eb:02:81:63:67:a5:7a:23:75:ac:c4:c4:24:76:13:
                    20:71:e9:07:23:19:f3:ea:1c:58:ee:c0:28:0f:72:
                    5a:bc:39:c9:ab:08:93:5d:5b:8e:3c:0d:3e:6e:e4:
                    78:6a:dd:ae:89:95:c2:d5:07:da:bb:be:fb:c1:b3:
                    20:78:99:53:4b:32:89:d6:0c:b2:66:b0:49:63:28:
                    33:44:2b:91:8b:e7:f3:7d:18:44:70:aa:bc:15:73:
                    5a:91:71:bf:50:a0:d3:fe:a6:f1:95:41:ba:c7:02:
                    c3:51:83:80:b3:b7:47:8f:d5:bb:04:83:64:96:4f:
                    9d:c1:6a:71:99:03:8d:fe:02:c4:f4:4e:59:18:c7:
                    0b:a8:1e:06:df:a1:ee:7d:fa:21:31:ce:a2:c9:6a:
                    61:7c:e0:12:75:98:f8:29:56:36:4f:9f:5d:c0:9b:
                    a9:41:a3:b6:5d:32:1b:27:cc:d3:88:2b:8a:22:1e:
                    1c:bf:03:14:ce:38:9b:b7:f2:60:6e:62:be:9d:e1:
                    be:84:6c:37:49:8c:c3:38:ad:21:5b:f4:56:aa:58:
                    63:c1:d0:14:31:e5:01:a2:89:92:61:6b:84:d7:38:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:23:AC:90:AA:2A:E7:58:01:6E:D7:67:65:7D:96:61:62:65:1D:EA
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:be:6c:3e:d0:53:b0:76:16:f2:9a:cd:1a:a2:11:a2:aa:29:
         f2:ea:8a:74:ee:c9:7d:78:ff:f2:e6:10:66:5e:c1:5d:c8:e6:
         87:f8:69:bd:e3:40:40:ff:e1:9e:eb:63:9f:ce:b1:5a:af:95:
         ed:1c:17:d2:8f:11:97:14:0a:cc:40:fc:ee:2e:5f:4f:57:9f:
         47:2a:a6:4f:1e:fa:84:fc:e0:c8:84:87:57:b3:15:6d:e4:f2:
         8a:16:5d:f2:fa:2d:99:07:fd:6b:76:74:da:4c:9a:d7:f8:1d:
         c5:ee:24:4c:2b:b6:d5:bf:c8:ff:b0:c1:13:9f:ae:08:35:75:
         e4:53:ac:99:7f:df:5e:0b:e9:ce:cb:e0:c3:ac:b2:95:bb:59:
         e6:3c:5d:1e:08:d3:22:f5:2d:82:36:b1:9b:7d:56:a1:e0:cd:
         a3:1d:45:a0:d7:dd:31:fa:0c:49:53:30:3e:a3:85:ca:bf:ce:
         fc:57:89:33:b5:ec:f7:30:30:d6:fb:03:7a:e2:a5:b3:dc:64:
         f7:5b:e0:d6:88:3c:c9:75:3c:34:cc:f8:71:a7:ac:86:90:e1:
         40:5d:52:00:be:f1:1b:6f:dc:34:c6:f1:78:81:b1:2a:f9:82:
         b8:35:c4:99:0b:96:8d:f4:3d:e0:aa:a8:cb:39:43:87:46:f1:
         d5:72:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org