Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3230382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          jLzq8sMHmQt78NRMg7OqHct3sP6fqydGgK8ZQXKX9aw=
Subject key identifier:   7A:14:ED:16:DE:FE:37:2B:08:0E:B7:B9:C0:AB:90:3F:DD:C9:28:66
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       44FADF4063F0ADC40C8CBDB5A086428D90A0E55A
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:47 +0000
ROA not before:           Mon 14 Oct 2024 01:44:47 +0000
ROA not after:            Mon 13 Oct 2025 01:49:47 +0000
asID:                     28270
IP address blocks:        177.75.208.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fa:df:40:63:f0:ad:c4:0c:8c:bd:b5:a0:86:42:8d:90:a0:e5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:47 2024 GMT
            Not After : Oct 13 01:49:47 2025 GMT
        Subject: CN=7A14ED16DEFE372B080EB7B9C0AB903FDDC92866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:cb:2c:af:ed:0a:8c:8f:e3:52:6f:50:dd:
                    a1:92:da:1d:aa:2a:fd:7d:77:bd:f4:fa:6c:e9:58:
                    37:ff:51:eb:7f:10:75:2e:f8:8e:6f:63:cd:3c:06:
                    f8:3b:60:3c:2b:4e:54:64:bb:f1:cf:55:d5:e6:c6:
                    ad:7d:74:03:00:33:4d:95:8b:f3:9f:3f:23:87:ad:
                    77:51:e7:2c:7b:9d:7b:8b:4e:75:ad:fc:1f:ce:0b:
                    e9:d2:58:21:34:62:fd:2f:53:f8:94:5d:3b:0b:47:
                    8c:f0:7c:8c:c7:b4:9a:d2:12:81:d4:44:5b:37:1d:
                    26:6f:18:91:6d:d0:4b:9a:7e:ee:76:ce:cc:ac:29:
                    25:65:04:ca:31:67:a0:ed:79:27:6e:b1:c3:fd:c9:
                    bf:d7:a4:cc:93:b7:bc:a4:5d:bb:2d:ba:7b:4b:af:
                    55:78:7b:a7:0e:81:ac:35:19:0a:8d:42:23:15:ab:
                    25:54:00:fe:fa:3f:0a:0c:28:64:06:8f:ea:75:c5:
                    1b:20:33:0f:c1:34:63:26:8e:dd:a3:43:d8:12:44:
                    0d:c7:3b:df:b1:11:77:e4:4e:bb:15:26:dc:5d:72:
                    26:a5:67:f3:50:29:d9:d1:97:fb:a5:c0:d9:72:db:
                    d5:0e:8c:76:5b:0e:ef:50:0d:e5:28:d0:9f:1d:25:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:14:ED:16:DE:FE:37:2B:08:0E:B7:B9:C0:AB:90:3F:DD:C9:28:66
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:b2:23:cc:8b:a4:e0:c7:10:d5:6c:d4:45:9b:7c:15:93:8c:
         cc:92:22:f4:06:e5:fc:38:a9:ca:6a:04:ae:dc:47:60:7f:34:
         68:3e:b6:34:2c:fe:d5:00:38:8b:93:ab:35:7d:b2:ef:7d:e1:
         e0:fc:b2:e8:22:ff:08:46:d2:d9:14:71:f0:b8:51:d5:7e:53:
         14:07:73:c8:a7:eb:47:5c:53:73:3c:4c:39:94:0a:0a:19:69:
         32:a0:dd:db:90:c5:40:35:e8:dc:04:95:3a:76:ac:fb:aa:e7:
         83:88:b5:d6:5e:09:62:94:84:f0:c0:02:b3:0d:cc:35:47:13:
         96:17:5b:bc:3e:86:17:a8:39:63:b6:52:47:9d:05:45:5f:cd:
         ae:1d:e4:8c:c6:bf:c6:48:8a:c6:b5:75:d9:13:65:be:b3:77:
         f0:a6:1b:d1:ad:ff:ca:11:05:e3:22:b9:66:a2:dd:51:1e:ae:
         c0:c3:bb:f6:d3:ab:6c:d5:c0:55:24:42:39:6e:01:5f:97:0e:
         f6:9b:f2:72:42:83:f4:1e:e9:03:86:ad:bf:f2:69:41:fd:18:
         aa:bc:30:17:f8:d8:b6:53:dd:f5:8d:d6:ff:4c:f5:74:b8:74:
         fa:17:86:25:79:25:2d:94:61:a3:09:7e:a6:ea:c9:e9:ff:b5:
         07:b6:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org