Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          ST07z40suAjmfXYfCh9qmogFqBKsM/lzdgeNB0q70As=
Subject key identifier:   DC:5B:0C:9F:38:68:A7:BE:4F:F2:9E:E4:27:CA:E8:20:C0:C6:66:63
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       66520CE73B91A2DF58D68705FBDFC23F689237DB
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:41 +0000
ROA not before:           Thu 19 Sep 2024 14:06:41 +0000
ROA not after:            Thu 18 Sep 2025 14:11:41 +0000
asID:                     262494
IP address blocks:        177.129.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:52:0c:e7:3b:91:a2:df:58:d6:87:05:fb:df:c2:3f:68:92:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:41 2024 GMT
            Not After : Sep 18 14:11:41 2025 GMT
        Subject: CN=DC5B0C9F3868A7BE4FF29EE427CAE820C0C66663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:22:c3:d4:35:02:91:41:33:57:69:10:11:
                    e6:e2:40:c2:aa:8f:9b:2d:32:df:e1:73:70:93:29:
                    64:58:6e:dc:f8:dd:0b:01:fa:52:38:04:9d:41:6b:
                    59:94:7c:70:be:3f:e5:be:cd:fe:7a:83:69:42:50:
                    81:f8:e5:c0:9d:8d:2c:66:7e:05:e2:fb:83:39:52:
                    f8:58:5b:c3:8a:74:c8:88:0f:4f:aa:7f:f5:ef:53:
                    4f:56:41:ec:83:d7:b5:6b:10:c6:6c:0f:6f:aa:a2:
                    83:0d:a0:f8:96:dd:a2:06:d6:31:19:11:29:61:6d:
                    3c:f7:bb:e2:e7:3f:40:7d:c4:1b:ca:e7:dd:ad:d2:
                    db:2b:70:85:10:48:61:5c:2c:ef:b6:0e:04:ed:f2:
                    e8:66:a0:b9:19:84:d5:80:e1:e3:ee:1b:91:21:da:
                    6b:27:1c:04:23:69:4b:1f:a7:b9:bf:38:43:95:a1:
                    21:74:86:7c:81:af:d9:10:41:19:dc:22:d4:46:6f:
                    88:30:10:2f:1d:e1:4b:d3:55:73:e3:f5:b8:31:53:
                    07:bb:e4:11:8f:0a:49:a3:f6:6c:81:98:f0:cb:14:
                    4e:86:9e:e1:18:0c:87:85:3a:99:af:b5:03:9a:7d:
                    74:30:71:76:58:21:86:d9:47:a2:67:28:a9:2c:c5:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5B:0C:9F:38:68:A7:BE:4F:F2:9E:E4:27:CA:E8:20:C0:C6:66:63
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e3132392e36302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:6e:8e:31:59:cd:fb:70:29:cd:56:05:29:48:43:b6:37:f3:
         c2:ee:5d:82:3d:2a:58:20:ae:15:28:54:ea:6d:b7:24:71:04:
         1e:d7:7d:06:6e:75:04:9d:7c:b8:c8:b6:76:1f:b8:58:b0:24:
         ea:45:79:ce:ad:04:ca:ab:0b:9f:fc:a5:f2:8c:c4:74:ce:05:
         9a:36:25:8d:9b:fd:a0:23:4d:2c:b6:37:53:c1:39:26:f2:73:
         be:79:7b:ce:a3:db:bd:4c:cb:0f:55:0c:ac:5c:c5:6f:83:8f:
         34:75:c3:13:05:b1:72:30:be:72:63:f5:09:da:ff:2d:e7:98:
         cd:ad:e6:d4:d6:08:b6:e5:59:52:2d:07:ae:15:40:21:85:ec:
         b3:28:1c:7e:bd:66:72:f3:ba:4a:7d:b7:35:eb:f6:22:0b:7a:
         87:7e:a4:fd:a0:26:d2:2a:1f:bf:b1:de:0a:58:5c:8c:05:50:
         4a:a7:05:81:46:40:07:e2:76:a1:e0:c3:6e:f1:5e:eb:8d:a1:
         de:da:e7:f6:0d:d6:31:06:cc:c6:3a:3b:3d:f3:af:37:43:5c:
         83:01:1d:a2:7c:8b:cd:5a:e6:c3:fc:a5:67:fa:6b:d4:92:e9:
         a9:f8:24:bc:91:36:45:30:3d:ad:58:6c:2f:19:01:d3:55:82:
         e7:bb:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org