Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          rylC8wYogvs09ebZh8gACcu0tYKjP6TSLIZZRd9ECIQ=
Subject key identifier:   44:9F:60:12:11:ED:17:AB:BA:8C:FB:71:00:AD:13:D0:68:3A:78:86
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       25D238A3357D865AE90C83A25148B53B2B16B171
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:45 +0000
ROA not before:           Thu 19 Sep 2024 14:06:45 +0000
ROA not after:            Thu 18 Sep 2025 14:11:45 +0000
asID:                     262494
IP address blocks:        177.129.60.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:38:a3:35:7d:86:5a:e9:0c:83:a2:51:48:b5:3b:2b:16:b1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:45 2024 GMT
            Not After : Sep 18 14:11:45 2025 GMT
        Subject: CN=449F601211ED17ABBA8CFB7100AD13D0683A7886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:de:d1:aa:6f:4b:59:15:d8:d9:6e:27:5d:
                    1c:33:be:76:60:77:36:8b:77:47:69:cf:36:69:d0:
                    ee:01:e2:82:3f:21:9d:1c:07:ba:73:1f:79:74:b9:
                    35:5c:a8:dc:14:1b:59:e4:04:80:4a:0d:42:15:b3:
                    8c:5f:4a:b7:5b:8e:54:c7:98:05:eb:5b:7b:cd:23:
                    79:2d:53:4c:2c:bd:b7:ad:ee:61:a8:69:98:e1:92:
                    41:0b:bf:cc:4c:f0:eb:f0:5a:a0:87:8c:c5:d4:61:
                    0e:29:c0:fd:91:88:c6:79:c5:45:7f:6c:d4:2b:a1:
                    cc:b2:05:d2:e7:35:86:29:69:fe:a2:71:7d:a4:3e:
                    ba:b5:7b:e2:0c:1d:12:db:77:6e:c1:4e:c6:6a:96:
                    d3:17:30:57:1a:82:b1:89:5f:d6:4e:a3:82:8b:7a:
                    57:98:ac:d1:be:79:09:67:b9:a1:96:ec:29:71:ee:
                    e0:33:0c:e7:b1:1a:3d:de:73:dc:1c:99:61:6a:65:
                    43:ce:d7:e1:b0:c6:35:5b:23:f6:0a:23:48:28:11:
                    2d:b7:25:0e:12:91:31:8f:0a:3c:bc:f4:a7:51:61:
                    b0:63:6d:9e:36:28:d9:47:71:32:33:6f:ff:29:e0:
                    a7:b7:64:e4:3e:e2:65:b2:04:54:b9:d0:f0:bb:98:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9F:60:12:11:ED:17:AB:BA:8C:FB:71:00:AD:13:D0:68:3A:78:86
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:df:5a:00:a2:dc:34:10:b7:95:32:d7:3e:79:84:49:75:61:
         70:39:86:e6:d7:a8:d8:15:ee:7c:2f:2b:de:25:32:c2:f6:d4:
         5c:52:85:fb:2b:a5:5b:e5:f2:08:78:91:2c:53:1b:c5:d3:88:
         54:ab:63:ba:52:8b:3a:b7:f7:f4:4c:e6:2b:4c:d6:0d:e4:8b:
         c1:43:4f:7e:ff:6d:c1:75:0c:3a:f7:fd:13:77:a1:56:de:75:
         25:a6:7b:b0:aa:b7:a9:2b:02:49:a6:a1:5d:48:a7:1f:b8:66:
         17:b4:80:c7:08:06:be:8a:71:9e:72:04:ff:42:61:6b:d2:a5:
         69:b8:93:d2:94:af:3d:6a:7a:d5:5c:fd:c1:8e:b1:58:62:73:
         df:8a:f1:3f:b2:82:f4:21:f9:1a:61:08:e0:01:26:39:1c:10:
         5b:ea:05:15:e0:d9:21:11:ab:29:03:04:2f:4a:c6:fc:9e:aa:
         f3:05:b3:dd:27:71:3e:65:81:54:3e:87:86:22:cd:18:2e:9b:
         e4:bf:dc:fc:12:01:12:0e:b9:70:05:be:98:0c:a0:14:a2:8a:
         33:02:21:83:65:14:41:61:8b:be:09:b0:7f:40:11:6c:52:a5:
         33:5e:5a:02:d2:c5:88:39:1c:b5:bc:fe:4a:37:e8:0e:de:81:
         10:94:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org