Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa
File:                     3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          VJVvPiCaAPKJRgxstbcPacMGiglA5FlEerfS7uXbomA=
Subject key identifier:   93:2D:CB:48:45:51:58:9B:AA:99:1F:38:8A:81:86:13:22:7F:A2:05
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       681DFDA26BD1C08CD9962FFEC469CFAEAE9C3631
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 14 Oct 2024 01:49:49 +0000
ROA not before:           Mon 14 Oct 2024 01:44:49 +0000
ROA not after:            Mon 13 Oct 2025 01:49:49 +0000
asID:                     271724
IP address blocks:        177.75.208.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1d:fd:a2:6b:d1:c0:8c:d9:96:2f:fe:c4:69:cf:ae:ae:9c:36:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:49 2024 GMT
            Not After : Oct 13 01:49:49 2025 GMT
        Subject: CN=932DCB484551589BAA991F388A818613227FA205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:17:88:73:b7:94:eb:8b:bf:66:46:6f:7b:
                    b1:a4:a4:ea:43:58:b1:c0:63:5e:8f:21:fe:ea:e9:
                    ac:eb:ff:f8:5c:5d:8c:1b:13:cc:16:50:39:76:c0:
                    bf:fb:05:bf:53:7b:c2:87:8d:f5:8a:35:9e:8f:c9:
                    8a:fa:8b:26:33:af:ea:7a:1b:28:0b:7e:02:c5:a7:
                    f3:4c:51:d9:05:9f:8b:b9:89:72:79:bf:be:bb:24:
                    fa:2b:5c:73:f9:85:2c:bd:92:a7:3f:3a:9d:2b:f3:
                    f3:2e:40:2b:b6:df:43:52:a3:1f:9f:5f:dd:35:3f:
                    f6:20:6f:15:47:18:b8:fc:65:c0:32:ce:60:31:84:
                    f3:49:dc:2e:34:15:5f:f3:c6:2a:bf:c4:b8:8f:00:
                    a1:a1:aa:70:d2:e9:b8:30:c1:0d:93:5d:12:d4:21:
                    3f:95:98:f6:69:08:e4:f0:01:05:d6:44:77:8a:ec:
                    8a:48:dd:33:5f:88:4a:8d:a9:ce:fa:19:76:11:95:
                    04:26:60:96:6a:e2:0e:c5:f9:4b:87:2c:31:ee:36:
                    67:07:17:03:7d:a6:18:f1:98:5c:93:bb:c2:c0:07:
                    b9:0e:27:65:1b:9c:45:14:90:60:a7:78:47:d4:37:
                    e3:92:b4:f7:da:b7:0d:19:53:1a:1e:7b:ea:f6:c5:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2D:CB:48:45:51:58:9B:AA:99:1F:38:8A:81:86:13:22:7F:A2:05
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:27:04:53:c5:4b:26:22:f0:e1:b8:a6:63:c2:cd:90:ce:7b:
         79:87:8e:4d:2f:e5:3c:76:c4:97:63:55:23:14:13:e6:b6:48:
         ca:07:1f:85:12:ac:85:da:de:8c:c6:2b:d0:32:bf:a9:f6:42:
         a1:78:2e:4a:28:41:50:eb:02:bc:77:9d:79:a4:db:f2:aa:32:
         88:c1:d0:27:25:dc:ed:ea:31:40:12:db:11:7a:b6:3c:67:cb:
         86:54:95:f1:b7:e9:4e:ec:34:8c:bf:c5:7f:cd:02:82:f4:bb:
         47:6d:69:b7:bd:f9:2d:5b:15:4c:82:4e:49:8b:b0:7f:2e:ee:
         05:3f:84:b7:5c:25:5b:ab:5a:43:55:2f:52:43:61:8b:c4:69:
         79:e4:82:73:19:65:07:7e:0c:fb:9e:ab:7b:ea:e9:d8:df:d9:
         4e:9d:e7:2b:7e:87:4a:8d:ed:7a:ff:af:93:5c:d6:9d:05:d4:
         99:ba:a4:b5:d0:15:dd:a7:5e:fe:73:45:19:f9:d2:71:56:9e:
         b6:05:84:14:da:c6:80:61:f5:36:d2:c8:97:fa:8e:28:26:79:
         ea:91:8f:d4:6f:08:35:a1:ee:1d:45:c2:ab:1c:1f:a6:c6:9f:
         06:2e:68:3e:1e:a7:9d:70:7f:50:fc:ac:51:1b:3b:1c:20:98:
         83:65:c5:cc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaB39omvRwIzZli/+xGnPrq6cNjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NDlaFw0yNTEwMTMwMTQ5NDlaMDMxMTAvBgNV
BAMTKDkzMkRDQjQ4NDU1MTU4OUJBQTk5MUYzODhBODE4NjEzMjI3RkEyMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEReIc7eU64u/ZkZve7GkpOpD
WLHAY16PIf7q6azr//hcXYwbE8wWUDl2wL/7Bb9Te8KHjfWKNZ6PyYr6iyYzr+p6
GygLfgLFp/NMUdkFn4u5iXJ5v767JPorXHP5hSy9kqc/Op0r8/MuQCu230NSox+f
X901P/YgbxVHGLj8ZcAyzmAxhPNJ3C40FV/zxiq/xLiPAKGhqnDS6bgwwQ2TXRLU
IT+VmPZpCOTwAQXWRHeK7IpI3TNfiEqNqc76GXYRlQQmYJZq4g7F+UuHLDHuNmcH
FwN9phjxmFyTu8LAB7kOJ2UbnEUUkGCneEfUN+OStPfatw0ZUxoee+r2xeQzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUky3LSEVRWJuqmR84ioGGEyJ/ogUwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNzM1MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM3
MzEzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxS9AwDQYJKoZIhvcNAQELBQADggEBAGEnBFPF
SyYi8OG4pmPCzZDOe3mHjk0v5Tx2xJdjVSMUE+a2SMoHH4USrIXa3ozGK9Ayv6n2
QqF4LkooQVDrArx3nXmk2/KqMojB0Ccl3O3qMUAS2xF6tjxny4ZUlfG36U7sNIy/
xX/NAoL0u0dtabe9+S1bFUyCTkmLsH8u7gU/hLdcJVurWkNVL1JDYYvEaXnkgnMZ
ZQd+DPueq3vq6djf2U6d5yt+h0qN7Xr/r5Nc1p0F1Jm6pLXQFd2nXv5zRRn50nFW
nrYFhBTaxoBh9TbSyJf6jigmeeqRj9RvCDWh7h1FwqscH6bGnwYuaD4ep51wf1D8
rFEbOxwgmINlxcw=
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org