Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          Ycdl762G+UMBlIcYaollzVX1Z7eEsk3xfbwrjBGEt58=
Subject key identifier:   13:A1:A5:3D:11:DA:FA:23:74:13:EF:4C:07:17:2A:BD:53:EB:E9:0F
Certificate issuer:       /CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
Certificate serial:       2404284244AF0F5C8BD3BBE895B55032754E4227
Authority key identifier: CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
Signing time:             Thu 27 Jun 2024 20:12:46 +0000
ROA not before:           Thu 27 Jun 2024 20:07:46 +0000
ROA not after:            Thu 26 Jun 2025 20:12:46 +0000
asID:                     262550
IP address blocks:        177.72.168.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:04:28:42:44:af:0f:5c:8b:d3:bb:e8:95:b5:50:32:75:4e:42:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
        Validity
            Not Before: Jun 27 20:07:46 2024 GMT
            Not After : Jun 26 20:12:46 2025 GMT
        Subject: CN=13A1A53D11DAFA237413EF4C07172ABD53EBE90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:aa:97:54:7e:c8:1e:84:25:c6:69:c3:5d:
                    40:4e:ac:30:3b:32:78:76:c0:19:3e:6b:d0:71:dd:
                    ce:65:4c:f2:ec:c7:56:0b:a1:c7:3b:b1:89:1f:91:
                    4a:00:82:0b:b0:60:ac:50:cd:d6:fa:34:d7:f6:cf:
                    f7:11:e7:98:ec:89:81:74:08:37:4c:20:0b:e0:7e:
                    c7:f1:9c:2f:e3:3e:00:03:86:17:ea:83:85:c6:0f:
                    2d:71:15:e7:f3:34:1d:2b:66:a2:af:1f:09:e6:49:
                    b2:39:d9:51:d2:32:d4:d4:38:c7:f3:6f:7e:65:54:
                    b0:27:c9:df:25:ad:c8:7c:b1:b4:b2:7c:1c:dc:9b:
                    04:d1:a6:3b:cf:19:a3:e5:ac:06:f0:8c:fc:2c:5a:
                    4f:f9:0a:84:33:40:1c:5f:bb:8f:7f:80:af:9f:3b:
                    73:44:17:90:8a:3f:dc:e2:0b:e0:a3:e4:56:8a:b2:
                    be:67:06:5c:8c:05:e0:54:b9:bc:c0:7c:88:9c:af:
                    31:ba:d0:ac:83:62:7a:55:a2:0b:77:e6:84:a7:4e:
                    0e:e9:b2:d2:fa:9a:7b:23:47:f9:87:64:b1:97:ab:
                    1d:7d:7a:5c:a8:d8:7f:51:24:7e:16:d6:c2:ac:a3:
                    dc:c4:63:c2:22:b1:21:fd:b7:d4:92:55:ee:a9:1b:
                    0f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A1:A5:3D:11:DA:FA:23:74:13:EF:4C:07:17:2A:BD:53:EB:E9:0F
            X509v3 Authority Key Identifier:
                keyid:CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:c5:b3:85:38:9f:f6:a3:63:3e:8b:fa:a2:65:f3:85:af:
         e4:b0:57:08:4b:6f:e5:17:27:8a:97:76:8a:bd:34:dc:7a:b3:
         32:7c:6d:b6:4e:ce:7c:05:2f:06:77:0e:c0:55:ad:a9:33:40:
         cd:cf:c0:77:6d:62:ff:27:18:17:93:15:18:fc:44:14:dc:48:
         51:47:25:03:2a:cc:af:ca:0d:ac:36:51:48:8a:28:ca:f4:a0:
         da:26:b2:2c:21:70:0d:23:7d:2b:68:14:aa:0c:ae:93:fa:30:
         47:54:c4:bb:54:a7:9b:16:a1:64:94:19:46:ac:b2:4a:9e:fa:
         1b:5c:0f:6e:b1:22:09:9d:b6:45:f9:2a:26:81:74:7d:27:1a:
         17:76:2e:e2:63:51:fd:ae:d7:df:2a:59:5a:5c:3b:64:ea:b5:
         e2:3d:1a:7b:c8:ee:f1:64:41:bb:ff:7d:9a:0f:b2:0b:fa:50:
         c0:ea:43:3a:aa:ef:c1:aa:2a:a8:26:af:f0:28:ed:35:01:ca:
         f1:ce:fc:69:39:ec:30:eb:0d:0a:40:98:08:e8:6b:7c:70:a9:
         02:76:9f:e8:2d:eb:28:9b:d7:a4:bc:57:4a:ef:ff:c9:3a:13:
         ef:b0:8c:b6:91:71:98:e4:b8:e1:e5:58:6d:19:62:80:98:2e:
         d0:69:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:41:55 2024 by rpki-client on console-ams.rpki-client.org