Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa
File:                     3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          NC2GFn8kU3eVkA3RzSZPoh7uINYz74qQK6nMsP4cUtI=
Subject key identifier:   24:8D:DF:8E:2B:6F:19:EB:36:BF:AD:63:87:CE:F1:F3:CC:13:8E:24
Certificate issuer:       /CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Certificate serial:       6813C612825CD9AAC2FB25B67ED91735B43C1E21
Authority key identifier: C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa
Signing time:             Fri 05 Apr 2024 01:07:59 +0000
ROA not before:           Fri 05 Apr 2024 01:02:59 +0000
ROA not after:            Fri 04 Apr 2025 01:07:59 +0000
asID:                     262769
IP address blocks:        177.155.144.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:13:c6:12:82:5c:d9:aa:c2:fb:25:b6:7e:d9:17:35:b4:3c:1e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
        Validity
            Not Before: Apr  5 01:02:59 2024 GMT
            Not After : Apr  4 01:07:59 2025 GMT
        Subject: CN=248DDF8E2B6F19EB36BFAD6387CEF1F3CC138E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:c2:e1:b6:d3:19:49:a9:e1:6a:17:43:b7:
                    ed:33:65:5f:f7:e3:c5:40:68:2c:2f:f8:55:bc:7f:
                    fb:fc:93:d5:4c:0d:f7:56:3e:be:c2:8f:fe:cf:0d:
                    3f:03:92:46:48:55:94:50:9c:52:39:f9:37:e6:eb:
                    a4:47:a0:ed:c0:9f:8f:57:a2:1f:44:c7:17:18:80:
                    76:46:d3:7f:ca:55:b6:0d:a5:ef:61:39:dd:dc:13:
                    e4:b2:72:be:31:e2:79:15:15:bf:bf:19:dd:46:c9:
                    81:e5:b4:ba:74:cb:09:e4:ce:29:98:4b:9e:b1:0e:
                    b4:0e:34:47:6c:0a:f4:29:1a:1c:46:c8:10:32:75:
                    db:18:4a:c2:9d:87:69:73:25:87:77:26:92:73:71:
                    30:dc:16:ae:92:c5:cf:55:1b:1a:57:f8:ec:9d:d1:
                    3c:ce:40:3a:ae:fb:e9:eb:92:e9:1c:d8:44:27:a5:
                    be:f4:58:d8:8c:75:53:26:37:00:fb:9c:87:42:1e:
                    b6:b0:65:e9:45:ce:f5:8f:a9:55:ff:0a:4e:e3:b4:
                    59:87:83:99:85:bd:63:f5:82:20:fe:94:ea:28:db:
                    42:0a:34:7f:9f:26:ba:f5:70:a1:0d:59:65:78:0a:
                    ab:10:09:02:14:7e:9b:36:77:f9:12:5e:c9:ea:27:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8D:DF:8E:2B:6F:19:EB:36:BF:AD:63:87:CE:F1:F3:CC:13:8E:24
            X509v3 Authority Key Identifier:
                keyid:C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:68:cf:9f:d0:69:d3:59:b9:c8:0a:ec:59:0a:b3:c8:3e:
         9f:28:01:15:99:e6:1a:3b:36:79:de:e9:70:8c:9f:46:46:a0:
         48:d3:b2:45:7f:c9:33:01:b5:0e:78:78:aa:e6:c6:be:1b:e5:
         a0:47:95:63:f1:cb:4d:1f:ef:85:91:dc:4c:43:b4:4f:e7:94:
         df:62:8d:0b:81:91:49:b9:eb:6b:9e:68:62:98:f9:46:10:6f:
         5a:46:04:e7:36:36:23:7c:82:31:8a:13:ae:ec:a0:5c:69:ea:
         b7:97:58:cf:71:f4:ae:9c:ae:b7:c3:a2:ff:a0:9a:15:10:8a:
         3c:68:26:3a:40:83:c7:d6:25:69:c6:14:c2:27:8c:ab:3c:53:
         97:e5:c0:90:de:b9:11:aa:30:e4:ca:1c:ea:93:42:05:a6:8e:
         db:a1:e7:a3:14:4e:7d:ee:a1:b5:f2:88:d7:ac:34:a7:32:5f:
         e1:6c:0c:05:37:cd:42:7f:d2:23:98:41:7c:6f:b2:85:68:64:
         93:36:f0:a9:08:b8:d7:1c:77:a6:b4:ce:6a:79:e8:73:6d:16:
         01:09:65:d5:80:16:79:a8:b3:44:e4:75:b9:52:15:67:7e:15:
         f4:eb:51:f7:b8:d5:5f:1b:23:1b:cb:9c:c7:98:4c:99:09:76:
         d8:f4:4f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 06:34:34 2024 by rpki-client on console-fra.rpki-client.org