Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
File:                     3137372e36372e302e302f32312d3231203d3e20323632353039.roa (raw, json)
Hash identifier:          2w3pwpEeSuurGMrdMdA2chcB0CPFcZFbH2TVfevh/Dk=
Subject key identifier:   A2:CA:D3:10:8C:6E:9F:63:0B:09:B0:1A:D4:BA:9C:E3:02:59:1A:63
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       0DB2AB184E67C5AC944DF83A96FAA2C629408F37
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:51 +0000
ROA not before:           Mon 14 Oct 2024 01:44:51 +0000
ROA not after:            Mon 13 Oct 2025 01:49:51 +0000
asID:                     262509
IP address blocks:        177.67.0.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b2:ab:18:4e:67:c5:ac:94:4d:f8:3a:96:fa:a2:c6:29:40:8f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:51 2024 GMT
            Not After : Oct 13 01:49:51 2025 GMT
        Subject: CN=A2CAD3108C6E9F630B09B01AD4BA9CE302591A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:1f:c3:b9:19:96:f9:90:20:31:cd:dd:03:
                    90:c7:b5:86:6e:9c:3f:8d:9c:65:82:c0:bc:0f:dc:
                    a9:f7:dc:10:ce:8b:fb:22:83:0e:a0:88:cd:2f:1c:
                    c3:c8:9a:16:45:7b:c0:fb:aa:b1:5a:36:bd:fd:4d:
                    b3:50:6a:c9:a9:b5:ca:0d:a3:3a:81:64:e6:71:32:
                    c6:9f:23:b6:87:c2:40:9c:bd:85:3e:57:2c:22:1c:
                    31:51:43:c0:01:b9:2f:95:8e:68:55:b6:e5:da:ba:
                    82:0e:b7:82:ce:a9:4a:b9:2f:02:51:c0:fa:e6:e8:
                    71:23:09:32:f2:91:e4:30:41:4f:9a:e4:55:fa:45:
                    32:18:95:b0:14:3a:82:c7:8f:61:b3:93:78:bd:2c:
                    61:e1:7d:30:04:f3:36:6b:35:c6:a4:18:51:53:51:
                    9e:49:7f:43:74:29:e9:f8:81:ae:6b:c1:7b:92:04:
                    4c:43:25:50:2f:07:a3:43:b7:58:6f:19:80:a4:c4:
                    09:56:fb:47:db:94:f9:90:a9:ed:fb:5d:11:c5:e0:
                    1d:48:16:33:13:90:4f:63:da:2d:1f:52:91:4a:49:
                    52:fd:96:d3:f1:33:1c:e8:5c:77:ab:4a:6b:c6:ab:
                    81:e2:e2:62:32:09:e7:09:72:56:e5:80:1b:51:a7:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CA:D3:10:8C:6E:9F:63:0B:09:B0:1A:D4:BA:9C:E3:02:59:1A:63
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:84:30:13:d2:d8:09:20:48:da:be:c5:a6:79:8a:fb:20:36:
         a1:e5:85:41:16:fd:7f:8e:da:a1:98:1f:56:80:a8:ef:0e:6d:
         8e:7a:3e:9d:59:79:3d:7d:7f:d2:4e:9f:3d:02:69:a6:8e:29:
         0d:dd:e9:50:a4:05:8f:c4:22:7b:c7:9e:43:b9:0d:f1:5d:d3:
         f3:6f:ee:7c:f6:51:eb:4a:29:b3:9d:02:c5:f9:21:12:ea:68:
         dd:9e:44:ad:07:07:09:15:ad:8a:c0:88:db:4d:cf:67:e1:80:
         a1:0f:11:a2:95:19:55:57:b4:40:c2:ef:0c:d0:aa:09:74:e1:
         4f:97:b2:1b:66:20:a7:86:bf:0d:ae:89:f6:32:cc:8b:ca:cf:
         e1:98:3e:ee:ee:4e:5e:34:ff:bc:51:c3:e9:e6:10:ec:96:e2:
         6e:d2:c5:71:01:6c:f1:32:54:18:56:f4:95:1c:b1:2e:51:32:
         42:a6:87:18:77:59:8e:45:dc:80:7b:15:27:af:47:aa:ae:fa:
         a9:4f:f7:fa:be:2c:e5:e3:40:ec:32:f9:8f:c7:c7:ed:83:be:
         0a:b1:e0:31:c3:ff:6c:8d:ba:67:91:47:1a:a7:88:0c:36:d7:
         0b:6a:a2:c0:b5:71:20:12:16:ae:92:df:bb:b8:31:11:f6:45:
         e0:80:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org