Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa
File:                     3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          tusF0qV1LUEcvQ0WsmBFnUrHWETiQ2s17wGEL61I4HM=
Subject key identifier:   63:6D:B9:5D:0B:D9:3C:BB:0E:21:98:5B:CF:57:BB:76:42:80:AA:04
Certificate issuer:       /CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Certificate serial:       35CCDC6AD53C1B13F4287ABE7660BAAD33F502F7
Authority key identifier: C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa
Signing time:             Fri 05 Apr 2024 01:08:00 +0000
ROA not before:           Fri 05 Apr 2024 01:03:00 +0000
ROA not after:            Fri 04 Apr 2025 01:08:00 +0000
asID:                     262769
IP address blocks:        177.73.76.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cc:dc:6a:d5:3c:1b:13:f4:28:7a:be:76:60:ba:ad:33:f5:02:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
        Validity
            Not Before: Apr  5 01:03:00 2024 GMT
            Not After : Apr  4 01:08:00 2025 GMT
        Subject: CN=636DB95D0BD93CBB0E21985BCF57BB764280AA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:69:27:0c:f8:39:8a:6e:21:b7:a5:08:c0:00:
                    54:e2:f5:4c:0a:82:bf:31:66:08:d7:c4:12:53:65:
                    51:ce:6f:0f:ae:45:25:be:e9:d9:72:db:ef:35:d4:
                    b9:2d:05:56:e2:19:06:8e:c8:65:40:e3:cd:bb:a1:
                    e4:4e:1c:36:cb:39:f7:70:1c:77:42:27:39:e3:23:
                    71:3b:12:cb:8c:4b:31:27:fc:77:d4:77:ae:f5:58:
                    1a:6f:ca:6f:10:ae:f1:01:55:4d:21:ef:b6:e2:29:
                    61:20:e7:0c:5c:0a:74:ff:ba:73:89:dc:96:28:bc:
                    3f:6c:ab:41:b7:0c:5d:ba:74:e6:69:d1:98:af:ee:
                    b3:0f:d3:41:4b:58:fa:1a:1a:cc:28:61:57:b1:38:
                    75:78:f3:0d:3d:2f:c0:3c:af:5f:68:f6:95:d8:4b:
                    de:b1:45:0c:79:6e:6e:4e:4f:02:92:72:a2:1a:54:
                    9f:50:d6:04:34:d7:76:87:64:b1:f7:4e:23:0c:39:
                    74:70:08:ff:7b:66:a3:a6:68:be:f2:17:b2:b8:09:
                    88:bb:73:0a:6d:d3:81:99:e3:0b:b2:48:ab:56:75:
                    ab:cb:b1:fd:48:b9:1d:f4:49:4f:fc:2d:eb:4f:17:
                    03:eb:d4:82:97:de:62:12:50:9e:9a:b2:9c:86:2b:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:B9:5D:0B:D9:3C:BB:0E:21:98:5B:CF:57:BB:76:42:80:AA:04
            X509v3 Authority Key Identifier:
                keyid:C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:a1:52:be:34:d7:c1:6a:57:b5:a3:b2:fc:04:f3:d3:ee:65:
         2f:26:40:4f:6c:d5:9d:45:66:09:a7:b8:a9:70:2f:e3:9e:14:
         c7:f9:60:2b:3d:15:68:c8:d8:61:03:46:ce:de:30:99:20:bc:
         a5:da:e8:42:b6:a5:a9:56:31:a1:36:28:5a:25:de:e9:a3:99:
         c6:5a:f8:69:aa:87:64:8b:f7:b3:32:14:0d:c4:b1:a7:66:6a:
         eb:55:51:57:7a:56:21:95:d7:d6:0e:1b:b2:04:d5:58:e2:36:
         48:dd:37:82:fb:45:bf:4b:80:96:7d:9f:cd:9f:98:90:dd:e1:
         76:a8:0e:10:bf:3e:dc:b1:22:32:14:ed:e4:66:fd:e3:f9:df:
         a8:38:f3:dc:a4:76:c6:1c:da:e7:d6:fd:09:87:e5:73:af:04:
         18:ef:6a:88:5d:b5:2e:e9:c4:9b:7d:2f:7e:8d:b4:53:a2:e4:
         da:3e:ad:02:79:32:45:44:31:99:98:27:66:02:b9:8f:30:e9:
         d2:31:4a:45:80:10:c7:c6:6c:01:b1:5e:d8:d8:ed:82:f3:94:
         e3:36:ca:95:ec:77:c7:b1:70:e5:71:0f:76:33:bd:8c:4f:c4:
         bc:6a:04:1b:f9:bb:bd:8f:80:4a:a3:a9:09:c2:07:c3:b1:ba:
         e8:3a:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 06:38:32 2024 by rpki-client on console-ams.rpki-client.org