Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e362e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          v8/PJgX0dzhRLuVVFsS2BnZkiIDawOTcytmnD8mLp18=
Subject key identifier:   FD:E7:FD:94:28:11:F6:3A:F2:D5:C6:1C:66:BB:54:E9:0C:49:52:B7
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       3BC4A8061610568D55E67679ECADF87215F23A7B
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:50 +0000
ROA not before:           Mon 14 Oct 2024 01:44:50 +0000
ROA not after:            Mon 13 Oct 2025 01:49:50 +0000
asID:                     262509
IP address blocks:        177.67.6.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c4:a8:06:16:10:56:8d:55:e6:76:79:ec:ad:f8:72:15:f2:3a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:50 2024 GMT
            Not After : Oct 13 01:49:50 2025 GMT
        Subject: CN=FDE7FD942811F63AF2D5C61C66BB54E90C4952B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:81:f5:70:8a:35:69:29:24:e0:83:7d:c4:
                    67:6a:69:5e:27:9d:3f:9e:e6:9c:55:eb:7c:b4:6d:
                    22:b5:ef:91:0b:68:47:1f:a3:ea:86:6f:be:18:0a:
                    dd:86:de:9a:87:d1:d1:42:88:43:61:53:3a:2d:5e:
                    d1:9a:13:7a:40:20:80:8c:3f:96:ff:b6:17:55:a5:
                    17:53:e4:ef:13:41:34:6e:f5:1b:f5:31:6f:77:e0:
                    8c:04:4d:e5:c5:75:9d:b6:08:38:b8:63:7d:36:61:
                    3e:e0:66:ed:d7:b7:86:c0:a2:56:0c:59:3a:e0:0c:
                    00:06:06:d9:88:47:a7:94:44:bf:a0:04:2a:7b:71:
                    36:c8:6a:0b:81:ab:9b:aa:a2:3d:d6:33:0e:a7:56:
                    73:3a:d3:90:2f:ac:bd:b9:b6:5d:9e:14:a4:30:2e:
                    73:dd:2c:2d:69:2b:7d:79:e7:6e:81:be:e5:85:b3:
                    de:de:76:47:05:a0:94:ab:dc:e3:0d:5d:38:b0:23:
                    44:08:18:aa:e6:d9:36:f9:be:c1:e4:1a:9e:6b:ac:
                    e7:0e:78:17:29:c0:df:7e:30:83:53:cf:a3:8e:fe:
                    3a:92:6c:73:81:29:c2:49:aa:f9:45:cf:b8:24:9c:
                    01:99:e2:79:b0:cc:36:d2:50:cc:e6:d9:51:e3:87:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:FD:94:28:11:F6:3A:F2:D5:C6:1C:66:BB:54:E9:0C:49:52:B7
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:2e:55:5e:48:0e:97:8d:97:22:ff:ae:a7:f9:6e:f0:0b:
         5e:85:88:5e:c2:34:86:8b:4e:1c:00:47:f2:81:f3:c8:61:67:
         ae:b7:82:8e:de:97:5b:cd:9d:85:ec:1c:d3:6a:3d:09:53:d4:
         5d:4a:4e:35:42:06:33:76:e8:f2:ea:d1:e9:b7:0c:45:92:af:
         54:23:b5:1a:0d:48:5e:40:d9:55:e5:f7:83:55:87:46:88:bf:
         73:12:de:c7:6c:d4:d9:c4:21:91:b7:74:e5:a1:fb:3d:69:5f:
         22:07:bd:15:c8:6c:fb:ab:54:f1:f6:14:45:2b:b6:91:3e:f9:
         7e:20:3a:16:99:b6:8a:a3:c9:c3:50:7b:3d:26:8d:7e:3e:96:
         13:d5:23:62:48:77:5b:8e:d8:3c:da:5c:bb:4c:21:5d:24:fd:
         1d:7f:2a:31:e7:5c:fd:68:b5:23:22:2b:df:4d:7d:a0:47:0c:
         64:ab:cd:2a:43:92:58:5b:3b:8a:b5:02:2f:6f:a3:d4:75:62:
         ab:e0:cb:c3:a7:d6:61:be:b9:38:f9:38:92:2c:ea:00:97:1a:
         35:d9:c7:d5:17:a0:d7:2c:d8:45:eb:9b:da:ed:82:11:22:08:
         65:1a:e6:43:b0:9c:31:14:5b:53:62:9e:0c:eb:5f:ba:bc:f3:
         dc:06:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org