Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e203238323730.roa
File:                     3137372e36372e352e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          09GDbtYMi3YYSWwmNQX9VYDH9jOyUjDpnhIodwRFHuI=
Subject key identifier:   46:37:C2:9A:78:4D:17:E4:86:FB:60:1C:66:E4:C0:63:B3:65:F5:F7
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       36D559F026420C382128F745102B780834339848
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:54 +0000
ROA not before:           Mon 14 Oct 2024 01:47:54 +0000
ROA not after:            Mon 13 Oct 2025 01:52:54 +0000
asID:                     28270
IP address blocks:        177.67.5.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d5:59:f0:26:42:0c:38:21:28:f7:45:10:2b:78:08:34:33:98:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:54 2024 GMT
            Not After : Oct 13 01:52:54 2025 GMT
        Subject: CN=4637C29A784D17E486FB601C66E4C063B365F5F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e0:6e:54:fb:ad:b4:8b:78:5f:3e:32:21:3d:
                    ed:e3:5e:8f:ad:67:37:26:ad:32:51:00:ed:ba:31:
                    c8:23:9d:49:6a:dc:9d:a1:43:d6:c6:3a:14:10:6b:
                    6a:3a:43:7e:19:29:15:b5:b3:4c:a5:50:b5:6d:aa:
                    04:e4:6c:47:8b:c2:6e:18:ac:c2:91:ce:e7:32:91:
                    1b:ce:07:80:df:2f:95:c0:e5:7c:44:3c:42:4f:78:
                    81:db:1b:e1:80:ae:6c:4c:58:6a:a6:b8:ca:55:29:
                    ce:f2:51:01:17:8a:3e:8d:f1:9c:58:f2:50:3b:0e:
                    c0:09:49:cf:63:da:35:7d:d8:d8:88:5c:8f:61:f5:
                    84:ec:ab:64:08:81:43:0b:e7:58:77:bc:b5:16:9f:
                    13:6d:9b:8a:6c:e6:8c:ef:4f:ba:f8:66:f3:47:76:
                    81:44:2f:22:42:b9:48:93:b0:34:98:f4:91:d1:bc:
                    6b:c4:26:2c:d6:fb:7c:0f:d5:5c:d0:bf:af:31:dc:
                    31:75:8c:f3:eb:43:bc:ae:0d:26:cd:1c:4e:e7:02:
                    73:fb:7c:44:a8:49:d6:36:f9:e0:ea:e1:d7:c7:4d:
                    7c:23:64:79:61:4c:47:ce:ba:f9:b0:f8:1a:6f:c3:
                    ed:53:c8:46:a8:9a:4c:e9:95:1c:d2:8f:6a:60:7b:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:37:C2:9A:78:4D:17:E4:86:FB:60:1C:66:E4:C0:63:B3:65:F5:F7
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:5f:4a:cc:4b:ab:0d:92:0e:8f:a7:da:90:b2:95:92:56:44:
         da:cc:a6:cb:f3:40:74:84:54:61:f2:8e:33:18:b3:ab:eb:3c:
         57:5f:1e:af:d8:a6:f3:d7:3a:a6:56:a3:f7:5e:27:3f:9a:db:
         8a:79:1a:f6:7a:4b:c0:59:21:85:43:4d:77:69:99:ae:a4:15:
         0a:34:73:cb:e5:25:11:e5:a4:68:0d:a3:36:86:fa:f7:2d:f9:
         60:0f:a9:14:76:33:ad:6e:75:8a:52:23:26:df:a5:3f:ff:e3:
         e9:e7:a1:bd:7b:4a:80:63:16:52:19:d0:02:7b:05:2a:06:06:
         db:ec:bd:e2:20:d7:b9:c7:c0:cc:ce:87:a7:32:9c:45:69:39:
         83:c6:08:2a:98:ee:67:2a:3c:71:dc:0b:11:63:f5:8a:65:4e:
         2a:96:b3:17:c6:4d:1e:90:c2:5a:97:98:10:6c:8e:3b:e3:42:
         4d:eb:04:91:ca:86:e2:d0:02:87:3f:71:38:59:f1:d8:ca:22:
         d5:23:b6:eb:78:d7:81:dd:bc:06:2b:95:21:a4:fc:b9:0d:d6:
         d1:24:7e:84:40:ec:30:43:13:8c:47:5c:a4:04:31:e2:eb:40:
         f8:3a:75:c6:6f:6c:e6:61:9c:ab:6e:56:c4:fd:52:1e:a9:62:
         e2:0f:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org