Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137312e302f32342d3332203d3e20323632343934.roa
File:                     3137372e3132342e3137312e302f32342d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          UOAjslJX1au8mmlWvGUPX1afl+FbvZpDm6ggLvw2fNY=
Subject key identifier:   5B:7C:C4:E4:B6:8E:E3:5B:0D:45:B7:1D:14:EA:6B:47:26:2A:8C:D4
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       28CA9F2EDB3246F9357BD6DF71A1736CDD73C7A7
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137312e302f32342d3332203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:13:07 +0000
ROA not before:           Thu 19 Sep 2024 14:08:07 +0000
ROA not after:            Thu 18 Sep 2025 14:13:07 +0000
asID:                     262494
IP address blocks:        177.124.171.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ca:9f:2e:db:32:46:f9:35:7b:d6:df:71:a1:73:6c:dd:73:c7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:08:07 2024 GMT
            Not After : Sep 18 14:13:07 2025 GMT
        Subject: CN=5B7CC4E4B68EE35B0D45B71D14EA6B47262A8CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:16:c6:5c:f8:a6:0e:ca:b9:ea:04:1a:54:
                    43:30:88:45:30:47:3e:a3:30:7e:d1:52:8b:0f:48:
                    b3:06:7c:cf:6c:80:a5:ae:50:46:47:d7:85:4a:37:
                    89:eb:b4:ba:a4:d1:7b:1a:60:4b:16:d2:5c:ef:b1:
                    9d:3f:63:f6:2a:28:d4:ed:93:da:36:a6:dc:55:82:
                    35:cb:ac:8a:38:cd:51:35:b8:ad:ed:0c:13:f5:57:
                    2f:36:b4:0d:ce:6b:63:10:aa:7c:2e:2a:49:ed:23:
                    34:80:f2:08:ca:fc:34:d4:e3:c0:84:26:6b:de:7a:
                    05:37:a0:d3:0a:2c:8b:b9:60:87:70:2d:00:2e:ba:
                    ae:f2:22:a4:ca:1f:a2:41:1c:3d:31:ca:b9:aa:08:
                    8f:b2:37:c6:b1:8c:b7:15:de:43:3d:51:60:ee:6f:
                    51:30:c7:b6:ad:f5:7a:83:a7:93:c3:21:57:f4:6c:
                    78:01:7c:41:90:55:59:c9:63:d0:45:cd:78:2e:0f:
                    b6:5d:f9:18:34:b2:ab:9a:49:45:2b:76:67:3c:be:
                    8c:c3:58:cf:6f:86:30:64:63:c5:e3:d5:31:34:1c:
                    b4:f0:23:42:43:3b:cd:c8:23:99:3b:3b:c0:28:e0:
                    1f:e0:4d:76:ab:0e:45:13:9e:5a:79:b7:e4:1a:ce:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7C:C4:E4:B6:8E:E3:5B:0D:45:B7:1D:14:EA:6B:47:26:2A:8C:D4
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132342e3137312e302f32342d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:37:14:ae:0b:18:17:fc:8f:11:cb:9e:d3:20:33:ec:9a:97:
         fc:3f:32:a3:59:72:15:5f:57:92:bd:87:fb:2d:60:fa:99:24:
         cc:5b:de:eb:93:d2:fb:8c:49:d5:23:7f:11:06:54:8a:9c:3e:
         b9:8a:c8:26:47:78:2f:25:2c:66:21:2f:62:21:68:75:2c:25:
         c0:89:4a:ae:71:09:8d:77:34:5a:d3:3b:1b:e2:ac:99:03:18:
         72:db:d9:c6:e1:77:df:59:53:38:0f:44:9c:90:b0:fa:fd:7d:
         81:ed:1a:00:00:e4:76:3a:ff:9d:d4:6e:8f:ea:95:2f:05:44:
         56:0e:41:6f:c1:0d:fc:4b:fc:04:2f:02:47:b6:53:78:2c:54:
         0a:14:c5:4f:cb:f9:31:e5:9e:ba:ba:49:53:aa:83:7e:94:2c:
         70:c9:81:f4:fd:54:b9:65:d5:54:90:f5:f5:87:7e:71:96:b2:
         8c:45:e9:2c:70:11:03:e4:32:2d:c6:2c:5b:03:5f:b2:88:03:
         8f:2f:94:6c:0c:17:79:6a:a2:99:4c:e9:8e:26:65:04:ab:1e:
         e3:54:0d:ff:a7:95:c6:9b:c0:ae:93:35:05:dd:bc:c1:b4:eb:
         14:5a:a4:ac:4e:5e:57:b8:94:b8:bb:51:40:2d:8e:e9:df:88:
         15:0d:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org