Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e372e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e372e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          Xu5WVeDj0yaINU2piN2BPtCbTM+XXzTt5efg7bD/a5w=
Subject key identifier:   22:A7:4A:52:DD:D5:A2:A1:7B:76:93:6F:2F:E9:25:29:CF:19:BA:AA
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       7036F681DC51766D488A79882CB1E25AF09B9FD9
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e372e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     262509
IP address blocks:        177.67.7.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:36:f6:81:dc:51:76:6d:48:8a:79:88:2c:b1:e2:5a:f0:9b:9f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=22A74A52DDD5A2A17B76936F2FE92529CF19BAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:e3:95:39:0d:4d:ad:dd:44:be:ad:11:4c:
                    fe:96:e6:6f:c9:bb:9e:f9:3f:5a:c8:33:be:74:2d:
                    59:d9:5e:83:dd:5b:7b:c3:92:1f:21:9e:21:24:01:
                    6a:ab:b9:9e:9c:90:f2:c8:7f:f1:77:2b:cc:76:5e:
                    47:3f:e0:02:92:27:f5:06:7b:13:b0:c1:07:1b:a6:
                    52:fa:99:8a:47:8a:c3:88:b3:cc:cd:2c:04:c4:a2:
                    a3:0c:e4:5a:c7:1a:71:03:7b:df:23:37:4d:89:35:
                    0f:36:49:71:41:dd:29:cd:94:0e:af:2b:a6:9e:89:
                    6d:06:b3:bb:93:65:53:bc:2c:9c:32:6a:07:ee:fa:
                    21:c0:8f:fd:b3:24:fa:07:02:07:ac:1d:15:1a:ed:
                    97:76:50:d6:f3:5c:93:f9:a9:1a:1e:08:00:8c:c8:
                    54:a8:71:35:24:9b:17:d4:b3:7d:5f:3e:bb:5c:fc:
                    e2:04:a8:33:fc:e1:c3:ab:f0:ef:a3:a7:97:1f:c8:
                    fa:8f:0b:7e:b6:db:fa:87:a5:57:f0:dd:87:6a:13:
                    b3:d5:0e:b2:cb:38:ee:ff:ff:81:5c:29:2a:a1:e6:
                    d5:1e:10:60:87:0a:c8:93:c5:e3:23:24:99:7e:9a:
                    ca:a3:92:c8:22:52:53:88:d3:a6:e0:6d:d1:c7:2a:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A7:4A:52:DD:D5:A2:A1:7B:76:93:6F:2F:E9:25:29:CF:19:BA:AA
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e372e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:16:c8:b1:52:71:11:17:03:c7:82:2b:7d:a9:09:77:8e:
         0e:ba:f0:11:65:fe:e5:2e:18:0c:3d:72:e3:a9:b1:c5:ad:d0:
         47:c0:93:0c:23:ed:39:f6:3e:f0:de:61:55:94:05:c2:88:a8:
         c9:ba:d3:43:a3:b7:68:d6:17:c1:06:4c:d2:b9:6d:2f:36:a1:
         a3:41:43:80:2a:b3:79:80:71:7b:e3:02:88:b1:ce:25:f2:ba:
         e7:66:c7:b1:3e:cc:85:5c:74:33:97:e7:b8:19:c9:5d:b4:8a:
         3c:cc:b1:ee:68:f4:89:44:c0:60:d6:9e:92:61:1e:0c:e6:9c:
         26:32:7d:d5:6a:06:36:22:84:39:46:2e:ba:67:a9:70:92:88:
         2d:5d:5d:d2:65:a5:62:80:6b:78:a8:12:b2:9c:b9:59:56:b6:
         0c:b3:a3:19:5f:94:d6:20:ee:91:5b:ba:6c:db:e8:e0:f1:e1:
         47:0d:2d:cf:02:17:ac:37:9a:78:6b:73:ee:5e:c6:82:69:44:
         0c:a0:c0:66:87:38:2a:a7:a7:d2:85:10:75:fd:bc:ec:0c:0e:
         84:5c:51:76:a9:ba:91:ac:56:aa:0e:fc:af:f5:1d:63:a0:f0:
         70:14:b2:52:2c:69:fb:f2:7a:41:dd:74:ee:3e:de:c4:ea:c1:
         86:b4:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org