Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e203238323730.roa
File:                     3137372e36372e312e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          7FALIAe5fosVFfKFgm40LZUOANhsBf/5sneP4+TU2Jc=
Subject key identifier:   F9:21:55:A8:6F:5F:56:07:9C:39:22:1F:04:9B:3F:F5:04:1E:B2:2F
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       7A70C9C9B6DCEFFF2D2BAA65A879332FA48C79B4
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:53 +0000
ROA not before:           Mon 14 Oct 2024 01:47:53 +0000
ROA not after:            Mon 13 Oct 2025 01:52:53 +0000
asID:                     28270
IP address blocks:        177.67.1.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:70:c9:c9:b6:dc:ef:ff:2d:2b:aa:65:a8:79:33:2f:a4:8c:79:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:53 2024 GMT
            Not After : Oct 13 01:52:53 2025 GMT
        Subject: CN=F92155A86F5F56079C39221F049B3FF5041EB22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:93:f4:1c:c7:a2:de:04:3b:26:f5:b7:ad:
                    d8:d9:6a:35:ad:6c:f7:7c:0a:d4:d9:81:8e:cd:d8:
                    b9:26:6a:b0:31:08:bf:22:6c:11:35:67:d2:67:2c:
                    1b:3f:b6:06:35:ed:a7:13:d8:a4:45:bd:91:0c:2a:
                    e1:a1:a9:c2:31:ae:b2:72:53:8c:88:b7:92:ea:21:
                    49:02:83:67:60:d6:83:28:0a:de:50:2a:25:ba:d9:
                    00:ef:df:19:f6:55:e1:1e:87:46:6b:70:ad:ed:00:
                    8e:f9:74:7f:0a:28:3e:63:d4:1f:ed:e0:08:22:e8:
                    9b:56:6b:16:fa:d9:ec:8f:30:e2:79:03:86:36:56:
                    89:9f:9c:03:18:d6:2b:d6:62:2d:97:f1:71:bc:43:
                    13:1a:55:04:4e:92:59:31:a1:14:10:27:3c:46:75:
                    65:96:80:48:17:3d:b4:38:e3:5f:d2:af:dc:d8:ba:
                    ec:b2:6d:67:11:93:b8:ba:7b:a1:fe:ea:79:0f:f1:
                    ec:19:94:55:6d:23:b5:cc:e6:c8:ed:06:47:5e:08:
                    53:dd:97:a6:b5:c3:d5:a0:c3:2d:11:12:5f:fa:30:
                    45:27:27:b9:9b:22:7b:0e:5b:6b:c8:8a:2d:1a:57:
                    f4:7b:5d:ac:4a:66:37:74:89:bb:36:6e:72:e6:65:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:55:A8:6F:5F:56:07:9C:39:22:1F:04:9B:3F:F5:04:1E:B2:2F
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:4c:61:37:07:24:6a:ae:89:c1:15:79:85:2d:25:b9:bf:
         1c:de:1c:f9:5a:e3:8e:af:d1:48:6f:02:e8:93:61:ad:71:83:
         b8:d8:6e:07:bb:be:1e:fb:f1:52:94:29:b6:e3:fd:34:87:36:
         29:69:e3:10:f3:c2:f6:00:73:0d:97:87:d0:ec:fc:13:08:c1:
         1d:44:24:25:66:0e:83:42:96:da:12:d9:ab:28:5b:cc:dc:a6:
         a6:c5:85:42:52:3c:d1:93:fb:fe:1e:30:7d:d2:27:eb:e7:99:
         57:1f:ab:80:4c:b9:78:97:3f:ee:fb:34:49:93:8c:29:fb:3f:
         0f:e2:f5:bc:60:fc:4a:91:f7:c1:09:47:9f:24:7f:2f:68:5a:
         a2:7f:a3:a6:5c:80:da:df:26:69:a8:81:db:8f:2b:a4:26:22:
         1f:30:bd:72:bb:d0:55:5a:f3:05:d7:e8:95:33:e0:69:c9:dd:
         f8:8b:a3:d1:77:1f:57:73:4d:f5:4a:9c:fa:86:98:24:5c:95:
         5e:3f:ae:38:64:3c:f8:2e:b3:7d:f2:3a:3a:4e:cb:99:69:d1:
         c6:c9:af:43:61:93:2e:44:87:d2:5c:2f:24:3f:72:ee:c6:cb:
         52:80:25:38:4b:47:7a:7b:42:28:99:59:32:fe:da:5d:54:58:
         67:e9:67:64
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUenDJybbc7/8tK6plqHkzL6SMebQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ3NTNaFw0yNTEwMTMwMTUyNTNaMDMxMTAvBgNV
BAMTKEY5MjE1NUE4NkY1RjU2MDc5QzM5MjIxRjA0OUIzRkY1MDQxRUIyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDJP0HMei3gQ7JvW3rdjZajWt
bPd8CtTZgY7N2LkmarAxCL8ibBE1Z9JnLBs/tgY17acT2KRFvZEMKuGhqcIxrrJy
U4yIt5LqIUkCg2dg1oMoCt5QKiW62QDv3xn2VeEeh0ZrcK3tAI75dH8KKD5j1B/t
4Agi6JtWaxb62eyPMOJ5A4Y2VomfnAMY1ivWYi2X8XG8QxMaVQROklkxoRQQJzxG
dWWWgEgXPbQ441/Sr9zYuuyybWcRk7i6e6H+6nkP8ewZlFVtI7XM5sjtBkdeCFPd
l6a1w9Wgwy0REl/6MEUnJ7mbInsOW2vIii0aV/R7XaxKZjd0ibs2bnLmZe3HAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU+SFVqG9fVgecOSIfBJs/9QQesi8wHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNjM3MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMjM3
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACxQwEwDQYJKoZIhvcNAQELBQADggEBAATtTGE3ByRqronB
FXmFLSW5vxzeHPla446v0UhvAuiTYa1xg7jYbge7vh778VKUKbbj/TSHNilp4xDz
wvYAcw2Xh9Ds/BMIwR1EJCVmDoNCltoS2asoW8zcpqbFhUJSPNGT+/4eMH3SJ+vn
mVcfq4BMuXiXP+77NEmTjCn7Pw/i9bxg/EqR98EJR58kfy9oWqJ/o6ZcgNrfJmmo
gduPK6QmIh8wvXK70FVa8wXX6JUz4GnJ3fiLo9F3H1dzTfVKnPqGmCRclV4/rjhk
PPgus33yOjpOy5lp0cbJr0Nhky5Eh9JcLyQ/cu7Gy1KAJThLR3p7QiiZWTL+2l1U
WGfpZ2Q=
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org