Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          FZ5lmWLvEkaVeisMH9GnE6RdQcARECR3tchWV4KpGUE=
Subject key identifier:   70:5A:6A:1B:AD:D4:D3:97:56:60:7C:A2:5D:16:8A:9C:9B:C7:6B:0C
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       6EEFA33B05C347D7BC42381B92765FCEDDFF06DF
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     262509
IP address blocks:        177.67.2.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ef:a3:3b:05:c3:47:d7:bc:42:38:1b:92:76:5f:ce:dd:ff:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=705A6A1BADD4D39756607CA25D168A9C9BC76B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:42:d6:41:8d:0f:d0:e7:99:d1:5c:6a:9a:
                    c8:e7:ae:6a:93:8e:f3:2d:65:a4:83:75:d7:82:30:
                    cb:df:c1:7f:31:4e:6c:21:74:79:d0:03:7c:90:08:
                    18:0d:75:dd:2a:a7:81:0a:4f:44:8b:f0:5a:58:3c:
                    42:42:53:7a:b9:a1:ce:23:68:2d:e4:85:8a:1b:87:
                    4f:01:b2:b4:ee:c3:58:b4:0a:cf:f7:06:6d:91:75:
                    81:89:de:12:34:ea:d5:22:40:13:ff:99:6f:5e:5f:
                    19:c9:bf:40:6c:32:c8:ae:d0:98:f5:c5:23:8a:5b:
                    aa:ee:62:f3:93:37:58:84:54:4b:f6:f5:b0:8c:e4:
                    f6:35:5c:d9:23:61:a5:ff:c8:49:82:67:3a:dd:ef:
                    b7:b3:e5:71:71:e8:f2:15:a4:6e:e7:a1:b8:58:ca:
                    da:6e:7b:ff:13:ce:5a:c8:66:6d:b1:ad:9c:ba:aa:
                    d6:72:cb:02:b7:6e:9c:a3:dd:f3:c1:34:dc:8b:d3:
                    c6:3d:6b:f1:76:8c:91:eb:ab:5d:bb:e4:9b:c9:31:
                    ad:36:3c:9f:c2:88:22:2b:35:f8:1d:00:65:a1:16:
                    ef:2d:9f:1b:b5:9f:38:09:62:da:eb:ab:e0:57:0f:
                    0d:d7:36:fb:f9:84:de:ed:80:26:c4:b2:b8:47:ca:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5A:6A:1B:AD:D4:D3:97:56:60:7C:A2:5D:16:8A:9C:9B:C7:6B:0C
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:36:9d:40:22:2e:f5:84:66:b5:d0:43:03:06:d8:95:0b:
         67:7c:60:23:bd:7f:37:a7:dd:be:cb:38:8a:0e:8d:74:fa:ff:
         93:6c:e7:d2:fb:33:1f:c7:07:f1:e2:ba:e4:b9:5f:a0:d4:50:
         7b:7b:93:09:60:8b:e6:f1:c7:c5:32:06:c9:6c:b1:0e:60:c7:
         d9:ae:b9:06:fe:d3:99:34:42:e5:4f:50:ee:78:d9:9f:f0:5b:
         33:4f:25:a3:70:fd:11:2c:d3:c8:15:64:ed:1f:90:4a:2a:41:
         22:3d:de:67:89:69:eb:a4:14:a8:ab:94:3b:72:b2:49:38:50:
         ee:a2:fe:09:b2:01:aa:15:49:12:00:50:9d:66:20:5a:7f:da:
         e6:3d:03:3d:6c:85:04:86:6c:50:f8:7e:e5:f0:f6:88:36:6f:
         61:1a:34:d6:6a:2c:6f:9f:0d:19:83:d1:28:c6:ec:58:35:3e:
         73:05:df:1b:d0:91:40:af:c8:e7:01:02:74:68:ea:52:ff:f8:
         de:ff:7a:81:f9:25:ee:93:15:4a:ef:33:7b:75:7b:90:fc:2b:
         24:db:61:65:c2:c0:ba:64:3f:e8:3b:5d:13:82:7b:4b:af:49:
         d5:6f:77:bb:90:94:27:11:cb:27:4f:70:f8:f7:f5:8b:b3:8d:
         16:09:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org