Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa
File:                     3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          +rOARltUZjNKAsBsfRkAPFTRPlxIqpze8IFxIUWQO+o=
Subject key identifier:   CB:AB:17:81:1F:3E:B1:06:83:8D:EF:43:46:E0:1A:91:8D:46:E3:9D
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       26AA45D60ACB88544EDCE7CC358E8326F8AE65BF
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:45 +0000
ROA not before:           Thu 19 Sep 2024 14:06:45 +0000
ROA not after:            Thu 18 Sep 2025 14:11:45 +0000
asID:                     262494
IP address blocks:        177.124.168.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:aa:45:d6:0a:cb:88:54:4e:dc:e7:cc:35:8e:83:26:f8:ae:65:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:45 2024 GMT
            Not After : Sep 18 14:11:45 2025 GMT
        Subject: CN=CBAB17811F3EB106838DEF4346E01A918D46E39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:61:e1:28:23:ef:db:a0:68:23:d6:42:a6:
                    f3:31:56:8f:66:c4:00:98:0c:fb:92:19:02:d3:80:
                    78:d1:3b:45:6e:3d:5f:de:86:6f:2e:70:b8:9d:e4:
                    f7:71:7c:c2:b3:7c:01:5c:3a:3c:61:2c:f4:01:22:
                    85:9b:81:55:df:eb:7c:9a:67:bc:96:e5:b2:90:44:
                    fc:95:8f:5b:30:fc:aa:45:e4:a2:9f:e0:dc:88:34:
                    b4:9b:7b:b8:16:ea:8c:24:2d:d6:58:d9:f8:a9:29:
                    6a:44:f2:d1:2c:46:d4:64:9a:4b:3a:6e:0f:c3:c6:
                    b7:4b:d8:1a:52:98:b8:3f:5f:be:c6:42:72:b9:4f:
                    14:17:76:69:6b:1c:cf:0a:2a:ab:af:1f:55:ee:4e:
                    c3:33:a4:d1:4e:d8:0c:5e:5f:25:17:e8:e4:60:fc:
                    2e:e3:cc:64:fb:fb:42:51:c2:35:17:e5:5f:b0:77:
                    f9:e3:80:96:5d:17:0f:f7:e0:a4:60:25:b4:00:19:
                    0c:17:8c:91:9c:9b:7f:8e:fb:a7:72:d0:8c:b7:54:
                    10:32:4e:71:88:56:1a:9d:60:f5:15:f7:af:d8:26:
                    c4:ef:08:14:f0:7a:79:c4:81:2c:18:65:25:b9:0d:
                    35:17:ed:87:d9:fa:22:ff:77:59:19:ef:b2:d7:bf:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AB:17:81:1F:3E:B1:06:83:8D:EF:43:46:E0:1A:91:8D:46:E3:9D
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3136382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:b2:43:4d:30:b9:4c:a0:a3:8c:72:7e:1a:5d:cb:3f:72:
         37:eb:52:a0:23:ea:b8:42:90:83:98:31:f9:31:8c:97:10:b4:
         e1:aa:25:a4:ab:05:3a:fc:63:37:a5:c0:86:e5:ef:76:78:5e:
         d6:c2:3b:0b:23:12:eb:bf:e4:c5:07:b0:01:f0:de:8b:24:cb:
         f1:32:d1:35:95:91:51:94:3c:a7:d6:49:ac:af:93:19:dc:9b:
         ba:ae:e2:a7:09:87:e2:3f:c0:e4:27:10:80:06:2e:ca:8d:c2:
         13:b6:f4:88:d4:3b:7e:df:33:80:c0:d6:5d:c3:82:7b:6f:fb:
         ee:6f:eb:d5:e4:06:92:85:af:4f:fa:59:2e:50:8d:73:e0:2c:
         6d:d8:db:6a:63:1b:2e:6d:dc:52:42:a7:41:cf:fa:24:82:e3:
         d4:0f:1b:59:ac:03:f6:4a:dd:71:44:af:1f:ac:08:2a:25:11:
         d7:5c:24:34:72:28:f0:9a:e7:4a:ff:da:f4:9c:e9:61:e5:3c:
         39:40:9f:6d:b0:2a:c6:69:b6:b4:21:8f:84:14:e5:05:32:f1:
         18:fb:c2:af:ac:b4:fa:65:03:d4:29:c4:ce:40:d4:8d:04:8d:
         f9:e7:47:90:46:f5:4f:65:c4:17:af:ac:64:5d:11:b5:73:5e:
         a0:91:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org