Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3137372e31302e35362e302f32312d3234203d3e20323632383437.roa
File:                     3137372e31302e35362e302f32312d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          E8Mh2DBk6U1uQ7E/kUb2aOWEk8Q2D2N3Afa9DloM4Wg=
Subject key identifier:   58:D9:D4:B3:3A:FD:59:61:4D:25:15:07:DD:01:40:88:B0:0B:72:AE
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       1E469CD8022F2AA564E40599845ABA2D52B22C6A
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3137372e31302e35362e302f32312d3234203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:34 +0000
ROA not before:           Thu 04 Apr 2024 16:07:34 +0000
ROA not after:            Thu 03 Apr 2025 16:12:34 +0000
asID:                     262847
IP address blocks:        177.10.56.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:46:9c:d8:02:2f:2a:a5:64:e4:05:99:84:5a:ba:2d:52:b2:2c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:34 2024 GMT
            Not After : Apr  3 16:12:34 2025 GMT
        Subject: CN=58D9D4B33AFD59614D251507DD014088B00B72AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:8d:48:20:40:8f:eb:62:9f:f5:84:29:28:
                    e2:fc:ef:bb:15:28:c3:60:33:80:73:6f:8b:c5:19:
                    7c:b0:e1:3d:5c:95:d3:e3:bf:d6:bb:db:20:d1:d8:
                    78:ff:e9:2a:1f:f1:7e:54:30:2f:03:8c:cc:5a:b0:
                    8a:67:13:a0:0f:12:c5:93:8a:78:e4:9f:c8:51:3b:
                    02:2b:46:59:60:d7:cc:f8:bc:2c:98:4a:0c:98:22:
                    fc:6b:fa:ca:ab:fb:24:b9:22:f4:bd:15:18:0a:e6:
                    dc:f1:99:70:d3:d9:46:e6:16:7c:6b:c8:bb:15:f8:
                    38:84:fe:69:14:3e:bf:5e:1c:c5:4a:33:58:c7:e7:
                    ba:36:3e:97:88:17:62:68:13:13:c3:80:c5:c5:34:
                    33:9a:93:b5:fd:e5:fe:67:d1:5a:b3:ab:6d:e2:0f:
                    90:cb:51:8c:19:ed:13:81:6e:7b:44:ec:7a:5a:69:
                    3e:79:94:b8:38:14:13:cb:c3:33:42:5f:a3:85:8c:
                    48:28:c1:ac:ac:2a:17:19:7f:3f:ae:30:5e:e4:e8:
                    7a:ac:78:0d:67:36:e6:5e:cd:28:9e:0a:f0:d1:d2:
                    37:3e:3b:dc:4f:ad:0d:74:0d:4f:a9:f6:f9:f1:70:
                    01:b3:14:53:7f:55:8d:65:40:49:06:74:23:8a:1a:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:D4:B3:3A:FD:59:61:4D:25:15:07:DD:01:40:88:B0:0B:72:AE
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3137372e31302e35362e302f32312d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:ab:16:a2:e4:e8:46:9c:54:a8:53:48:07:56:18:1d:ba:
         d5:3f:b2:f6:1e:1c:0f:76:8b:1d:c6:fc:a0:f1:e9:c5:ff:6c:
         f2:de:b7:12:68:a7:a3:06:63:44:3d:34:89:1b:26:05:74:ba:
         fb:71:70:ed:d7:6b:38:f7:6a:16:67:a8:d1:95:0a:d5:f9:9c:
         94:b2:c1:3b:6d:14:76:3d:63:db:b0:6c:01:79:36:08:58:e6:
         49:36:80:e8:af:09:60:90:fa:14:59:ba:cb:86:93:2d:84:fa:
         fd:4c:19:cc:4a:31:ef:c1:09:ce:fc:33:6b:67:2e:98:e4:fa:
         8b:0d:d9:dd:03:b9:09:8a:96:24:8c:d4:2d:b2:77:77:f7:69:
         99:70:0e:76:75:55:08:d7:cd:70:38:0e:32:4e:c5:a9:b0:7e:
         9b:f5:61:98:dc:19:6b:7e:74:5b:55:60:26:b2:d4:34:8d:9e:
         95:46:00:28:b8:a5:64:2a:04:be:28:64:81:4b:bd:e7:d7:7d:
         bd:57:c1:df:de:3a:0b:6b:28:62:dd:46:89:0b:a7:fa:81:71:
         9f:a6:85:c8:21:fd:81:28:e6:38:d3:33:e6:1c:f3:33:ad:3e:
         39:54:06:32:2c:fa:35:e8:f0:74:8f:d8:d9:86:9f:dd:2a:3b:
         64:1a:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org