Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e34382e302f32312d3332203d3e203533303438.roa
File:                     3137372e3133372e34382e302f32312d3332203d3e203533303438.roa (raw, json)
Hash identifier:          Igl+oZMv4AXxPIAn46eB1tYr7LuDpBd5wAquUE3lew4=
Subject key identifier:   FA:74:B6:A8:B0:C0:2C:43:C5:E0:F0:7D:70:C6:21:46:FD:74:B3:98
Certificate issuer:       /CN=61A0D46B3E5BD8CD2D919613341FE3851FFAA888
Certificate serial:       09C3DAF8950951AD27E34F2934648379F4779F8C
Authority key identifier: 61:A0:D4:6B:3E:5B:D8:CD:2D:91:96:13:34:1F:E3:85:1F:FA:A8:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e34382e302f32312d3332203d3e203533303438.roa
Signing time:             Mon 07 Oct 2024 17:29:17 +0000
ROA not before:           Mon 07 Oct 2024 17:24:17 +0000
ROA not after:            Mon 06 Oct 2025 17:29:17 +0000
asID:                     53048
IP address blocks:        177.137.48.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c3:da:f8:95:09:51:ad:27:e3:4f:29:34:64:83:79:f4:77:9f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61A0D46B3E5BD8CD2D919613341FE3851FFAA888
        Validity
            Not Before: Oct  7 17:24:17 2024 GMT
            Not After : Oct  6 17:29:17 2025 GMT
        Subject: CN=FA74B6A8B0C02C43C5E0F07D70C62146FD74B398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:90:ec:c6:4d:73:5f:c0:ad:c9:44:d6:f7:
                    61:d8:e1:8a:cf:d0:76:35:da:1b:a5:69:a7:33:ac:
                    95:6b:66:4d:b0:93:bf:60:9f:1e:f8:a4:cf:6a:cc:
                    ae:d9:e3:60:84:a6:cc:6e:ec:3b:8b:28:37:e7:0a:
                    8d:4a:b7:e4:1e:d2:dd:ae:72:79:f5:ca:83:c2:f5:
                    08:a5:0d:d5:8f:89:24:52:21:5a:4b:c0:41:30:8a:
                    ff:c4:87:be:45:0b:6a:bd:d2:f6:31:b7:aa:57:8d:
                    e9:63:12:b2:02:98:7d:98:6c:ab:3b:b8:4f:e4:7b:
                    69:ed:f1:82:8a:8f:78:b6:1b:96:c7:cb:fc:74:ee:
                    08:74:fb:61:b3:e8:c7:83:72:21:5e:b3:0d:ec:fc:
                    ca:0d:af:5b:46:10:9f:12:ef:ce:6b:2b:b5:2e:91:
                    10:b5:08:eb:aa:eb:4e:bf:3d:50:cc:a3:dc:08:85:
                    6a:cf:f3:8b:ff:58:9c:21:0d:76:2a:56:0c:ee:30:
                    8b:20:76:9b:82:66:45:4b:46:3d:8a:c2:60:16:ac:
                    3f:f2:de:2f:64:82:8e:6c:93:b9:fd:fd:6e:a3:8e:
                    2a:b5:aa:e4:46:09:e1:a5:60:66:3a:ca:6b:dd:bd:
                    b9:83:87:a0:ca:fb:34:bc:29:b2:bb:89:e4:3c:7b:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:74:B6:A8:B0:C0:2C:43:C5:E0:F0:7D:70:C6:21:46:FD:74:B3:98
            X509v3 Authority Key Identifier:
                keyid:61:A0:D4:6B:3E:5B:D8:CD:2D:91:96:13:34:1F:E3:85:1F:FA:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61A0D46B3E5BD8CD2D919613341FE3851FFAA888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e34382e302f32312d3332203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:df:f3:31:25:00:b1:51:e1:f8:e7:98:50:21:f1:79:e3:03:
         50:b5:0c:a5:52:4e:65:64:5d:2d:23:cb:a4:71:90:bd:99:d5:
         b0:a9:dd:48:7c:e4:f4:9c:53:34:b9:fa:0e:fa:5e:bd:04:3d:
         7a:8a:5b:f2:88:9e:c5:5c:40:f4:ad:ca:36:24:4a:46:24:03:
         f1:e9:6e:cc:73:97:cd:a0:30:4d:28:28:e0:04:21:85:f0:f9:
         5f:9b:ad:fb:2e:67:f5:1d:05:d2:9c:61:6a:17:e1:3a:d0:24:
         db:e1:57:44:1c:2e:9a:29:58:d5:cd:4c:30:b1:86:cc:0e:08:
         48:6d:49:7f:86:69:64:1e:19:d9:05:a2:cc:3c:2e:9a:e6:c4:
         53:e7:2a:f5:94:a1:d5:81:b6:01:9f:ee:4a:dc:a4:ca:3e:35:
         2f:f6:45:b6:44:a9:74:7b:a6:59:77:8a:67:e6:72:11:75:5c:
         f1:ba:a8:ed:71:77:c0:4e:21:a6:fa:42:23:01:f9:ec:54:d4:
         2a:a8:90:49:27:21:de:75:03:d7:c8:a5:52:0d:ae:60:aa:a6:
         2a:31:27:7a:cc:bb:87:c4:c4:58:1e:4f:eb:68:23:82:4e:5e:
         ff:30:b3:8e:2a:3f:35:61:c7:12:d1:4d:cb:92:53:01:c5:ef:
         25:7b:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 09:47:20 2024 by rpki-client on console-ams.rpki-client.org