Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36362e36342e302f32312d3231203d3e203238323730.roa
File:                     3137372e36362e36342e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          VymUulNM7QEcZ3+FYTa9smBZT1XOOVJoh4A+gP+lGoo=
Subject key identifier:   4B:3D:81:03:12:1A:BB:1A:72:AA:A5:4A:1C:57:09:6A:F1:21:2D:52
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       45298FB01A63FD71FED0A2D60C4225D67ED29C95
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36362e36342e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:51 +0000
ROA not before:           Mon 14 Oct 2024 01:44:51 +0000
ROA not after:            Mon 13 Oct 2025 01:49:51 +0000
asID:                     28270
IP address blocks:        177.66.64.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:8f:b0:1a:63:fd:71:fe:d0:a2:d6:0c:42:25:d6:7e:d2:9c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:51 2024 GMT
            Not After : Oct 13 01:49:51 2025 GMT
        Subject: CN=4B3D8103121ABB1A72AAA54A1C57096AF1212D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:33:70:de:51:cf:17:eb:3c:c6:6d:42:fa:
                    e3:de:e2:44:eb:7b:42:24:21:b0:13:8e:37:6d:44:
                    2f:2b:2f:93:2e:92:74:56:6d:3f:00:b9:0f:d2:67:
                    17:1b:2f:c4:62:67:94:91:a1:0d:50:fb:bc:24:e2:
                    e0:ec:c0:63:1e:84:ab:ca:ae:40:98:86:a0:18:85:
                    51:5b:21:7c:ee:bf:32:ef:c7:72:14:4f:34:09:df:
                    6a:b8:db:89:07:c7:ba:a7:e0:59:0c:54:5b:0b:9c:
                    86:56:f2:fb:32:e1:37:54:72:d3:81:0a:4e:56:09:
                    b3:4c:3c:60:ca:d1:d7:10:48:af:03:02:fa:e9:da:
                    87:c3:d9:8c:52:2d:a5:0d:11:da:21:91:b7:db:0c:
                    f6:f8:9f:3f:4d:e1:b2:5a:2a:8a:8a:58:c1:44:b0:
                    6e:75:b4:9a:de:11:db:49:e0:79:46:ad:ad:c0:68:
                    82:58:a0:42:60:0d:2a:a5:63:69:de:67:fe:27:74:
                    af:b9:53:3e:31:15:92:82:ba:6c:c7:71:e2:39:74:
                    4e:8a:3d:64:39:4c:7c:49:1a:87:4a:92:d0:a0:95:
                    91:5d:5d:9c:fe:ae:7b:43:88:96:56:b6:0f:6e:87:
                    fe:59:8c:86:3f:71:a5:f6:75:37:c3:44:d7:2b:25:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3D:81:03:12:1A:BB:1A:72:AA:A5:4A:1C:57:09:6A:F1:21:2D:52
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36362e36342e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:67:55:4f:f0:10:8a:29:6a:62:76:dc:c2:97:62:c5:29:14:
         c5:34:90:ad:cc:ee:49:35:11:5f:83:9c:ce:90:81:72:a6:f0:
         2a:3d:b4:20:da:39:10:a5:09:ee:e0:bb:5d:32:4d:18:15:59:
         a7:20:e6:e7:04:6c:05:ec:20:2b:c0:13:94:4b:2e:9d:2a:19:
         cf:b9:78:56:4e:4e:4b:4e:9a:7e:d9:9b:69:e6:3a:8c:50:9c:
         95:3f:6f:71:4e:74:de:a0:d5:17:17:29:2c:fa:95:68:9e:f4:
         d1:a9:56:14:76:1a:a7:ce:80:3a:da:f6:aa:d8:ec:9a:5d:5a:
         02:f0:c7:a1:8a:9a:49:40:e4:76:75:11:4e:93:02:01:48:14:
         97:92:72:47:f4:b5:2c:95:f2:b0:6b:fe:9a:b5:dd:70:7f:3d:
         f6:a6:63:0c:84:66:76:fb:0f:ad:18:fd:bb:df:b1:27:81:a5:
         ce:ea:12:da:30:26:17:bc:3f:e7:e9:cf:87:3a:ad:0d:aa:74:
         75:fb:d2:43:8b:83:d8:b9:71:9a:be:95:19:38:68:64:bb:61:
         4a:67:78:d3:2a:12:e9:af:76:d3:ea:08:74:b7:37:50:53:50:
         fe:7c:29:3b:ef:8b:fe:4c:3c:85:96:9f:d5:8d:d7:89:dd:14:
         dd:14:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org