Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
File:                     3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          FyXMltw7h+0vXDSMUfgtT73Dl9qxGijl4L3Mda5cokM=
Subject key identifier:   FA:9E:FF:AA:9E:AA:F8:F5:28:62:D8:B2:8E:32:E8:3D:9B:EA:84:C2
Certificate issuer:       /CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
Certificate serial:       6DCFF8A34DCB1188BFD2076C0630B9673B8EEDD6
Authority key identifier: CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
Signing time:             Thu 04 Apr 2024 09:33:08 +0000
ROA not before:           Thu 04 Apr 2024 09:28:08 +0000
ROA not after:            Thu 03 Apr 2025 09:33:08 +0000
asID:                     262550
IP address blocks:        177.72.172.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cf:f8:a3:4d:cb:11:88:bf:d2:07:6c:06:30:b9:67:3b:8e:ed:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
        Validity
            Not Before: Apr  4 09:28:08 2024 GMT
            Not After : Apr  3 09:33:08 2025 GMT
        Subject: CN=FA9EFFAA9EAAF8F52862D8B28E32E83D9BEA84C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:86:1a:e0:56:cb:e7:bd:c8:6d:ef:66:ae:
                    d3:25:5f:94:ba:b1:df:bf:71:2e:c6:70:63:6c:03:
                    41:cc:51:ac:a6:39:d3:44:64:1f:8e:a9:80:d7:5a:
                    64:44:82:9b:6e:e8:1b:4a:db:d1:a2:65:1e:50:1c:
                    22:fa:42:d2:0c:82:30:a4:1a:ac:73:2e:5e:04:3e:
                    70:6d:a9:ad:ce:f2:ea:02:a0:76:94:7a:ae:6c:35:
                    53:9d:6d:1c:5a:27:2f:b5:c6:4c:cd:68:83:de:35:
                    29:fe:cb:27:b4:c2:f6:6e:e9:d2:2e:29:55:ea:6d:
                    61:e9:3c:26:36:f0:03:42:ea:19:8f:23:da:53:d2:
                    ac:b5:90:78:45:55:dd:0f:a7:00:fe:04:73:e5:09:
                    58:b0:4e:eb:7d:54:38:8b:9c:39:de:97:51:73:2e:
                    14:3b:0c:38:b8:52:10:d3:44:20:1e:b2:12:a9:5a:
                    50:63:f6:6b:50:e8:14:2d:48:f3:d8:39:ab:e2:4a:
                    55:c6:5a:5f:31:e6:51:26:3f:d8:07:8b:43:92:8e:
                    21:20:59:3b:77:29:34:ef:7f:69:bb:8d:ba:41:63:
                    6f:e7:05:fc:2e:5a:4b:5b:e1:81:66:26:6a:22:a7:
                    19:3a:72:a4:0a:a3:48:87:ae:1d:92:e9:14:18:5b:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9E:FF:AA:9E:AA:F8:F5:28:62:D8:B2:8E:32:E8:3D:9B:EA:84:C2
            X509v3 Authority Key Identifier:
                keyid:CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:52:f5:5f:44:5e:96:b9:5d:34:8f:d4:f4:fa:5b:0e:76:43:
         a7:43:7e:d1:b3:aa:c9:b5:3b:b7:70:bd:8a:20:5c:51:da:9f:
         82:69:0c:85:23:36:b3:20:63:ac:6b:2a:8f:60:59:21:91:87:
         00:28:d5:cc:82:e8:c3:34:0f:51:f8:b0:5a:7f:62:f7:4c:d0:
         bd:60:7c:ef:d2:f0:12:7d:54:40:1f:32:0f:d4:1e:c9:76:d2:
         7f:ee:cb:13:68:13:ff:26:95:e7:4d:03:a8:87:dd:5b:10:b3:
         3a:7d:d9:df:3f:42:7e:96:83:18:53:8b:5c:49:7c:54:2a:ef:
         f5:84:84:da:28:45:bc:d2:7f:a5:fd:9a:a3:7a:51:bf:f5:1f:
         55:9b:b2:c6:c3:ff:56:c6:16:07:33:51:17:0f:df:6d:61:28:
         1a:90:78:ad:ad:52:62:24:e1:25:e5:11:49:ec:f8:fe:b2:6d:
         dd:0b:fb:8c:b3:c5:fe:fd:f2:14:71:93:8e:9c:16:8d:6e:d3:
         be:46:5b:18:a4:22:bb:e1:29:b9:ae:01:16:cd:5d:7f:5e:3b:
         27:d2:18:c3:65:f9:46:bc:ba:4a:56:34:bc:54:10:ab:3a:56:
         b5:ef:00:c1:48:fb:52:ca:29:d7:9e:47:ff:0a:a5:10:c3:74:
         c4:2a:82:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbc/4o03LEYi/0gdsBjC5ZzuO7dYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2RUI3OTEwNDg3NkVGRUNCRjFDRkVGMDdFQ0ZCM0Ew
NDhEMDU5ODAeFw0yNDA0MDQwOTI4MDhaFw0yNTA0MDMwOTMzMDhaMDMxMTAvBgNV
BAMTKEZBOUVGRkFBOUVBQUY4RjUyODYyRDhCMjhFMzJFODNEOUJFQTg0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLY4Ya4FbL573Ibe9mrtMlX5S6
sd+/cS7GcGNsA0HMUaymOdNEZB+OqYDXWmREgptu6BtK29GiZR5QHCL6QtIMgjCk
GqxzLl4EPnBtqa3O8uoCoHaUeq5sNVOdbRxaJy+1xkzNaIPeNSn+yye0wvZu6dIu
KVXqbWHpPCY28ANC6hmPI9pT0qy1kHhFVd0PpwD+BHPlCViwTut9VDiLnDnel1Fz
LhQ7DDi4UhDTRCAeshKpWlBj9mtQ6BQtSPPYOaviSlXGWl8x5lEmP9gHi0OSjiEg
WTt3KTTvf2m7jbpBY2/nBfwuWktb4YFmJmoipxk6cqQKo0iHrh2S6RQYWyG1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+p7/qp6q+PUoYtiyjjLoPZvqhMIwHwYDVR0j
BBgwFoAUym63kQSHbv7L8c/vB+z7OgSNBZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv
emQvMS9DQTZFQjc5MTA0ODc2RUZFQ0JGMUNGRUYwN0VDRkIzQTA0OEQwNTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNkVCNzkxMDQ4NzZFRkVD
QkYxQ0ZFRjA3RUNGQjNBMDQ4RDA1OTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFU3BmalFGb21KUThlRmhSUW1yQWhVMUNTN1BlSnNYTVdrSFJUYnNVb3pkLzEv
MzEzNzM3MmUzNzMyMmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSKwwDQYJKoZIhvcNAQELBQADggEBAHJS9V9E
Xpa5XTSP1PT6Ww52Q6dDftGzqsm1O7dwvYogXFHan4JpDIUjNrMgY6xrKo9gWSGR
hwAo1cyC6MM0D1H4sFp/YvdM0L1gfO/S8BJ9VEAfMg/UHsl20n/uyxNoE/8mledN
A6iH3VsQszp92d8/Qn6WgxhTi1xJfFQq7/WEhNooRbzSf6X9mqN6Ub/1H1WbssbD
/1bGFgczURcP321hKBqQeK2tUmIk4SXlEUns+P6ybd0L+4yzxf798hRxk46cFo1u
075GWxikIrvhKbmuARbNXX9eOyfSGMNl+Ua8ukpWNLxUEKs6VrXvAMFI+1LKKdee
R/8KpRDDdMQqgpk=
-----END CERTIFICATE-----
Generated at Fri Aug 30 21:07:17 2024 by rpki-client on console-fra.rpki-client.org