Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32332d3233203d3e203532363031.roa
File:                     3137372e3132342e37322e302f32332d3233203d3e203532363031.roa (raw, json)
Hash identifier:          EqBPdKQvycsNX8TGy5b0+qA9A6pIx4eoGhqratDyC1M=
Subject key identifier:   E2:87:54:CA:19:D6:1C:08:2F:94:D6:13:F0:43:25:82:AF:8D:4A:78
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       4F67E184F7BDCCB567FB6DCB8ABD423E83E5ADD1
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32332d3233203d3e203532363031.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     52601
IP address blocks:        177.124.72.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:67:e1:84:f7:bd:cc:b5:67:fb:6d:cb:8a:bd:42:3e:83:e5:ad:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=E28754CA19D61C082F94D613F0432582AF8D4A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:16:15:eb:0c:62:60:11:1c:7f:ee:32:14:
                    2f:cf:f7:09:f6:3f:a1:89:49:5f:92:b0:f6:19:6b:
                    82:4b:f3:27:fd:89:6e:11:5c:00:7a:b2:b1:2d:a9:
                    3d:19:f3:31:9f:a7:45:29:b7:da:e0:80:76:3a:1d:
                    c6:d6:06:1a:be:b3:c8:a1:38:90:83:9d:aa:d0:34:
                    4c:47:e8:3e:1e:30:98:33:9f:71:31:ac:db:a8:aa:
                    be:ad:24:c5:97:35:96:57:19:5b:e6:69:4d:4e:60:
                    e3:dc:b5:ee:a7:9b:35:66:99:cc:f8:d7:45:e1:33:
                    1a:98:63:81:de:8d:5c:62:ba:32:70:78:db:7f:9a:
                    60:4c:4e:de:7d:d0:8b:6e:71:fb:07:5d:59:14:2d:
                    79:e1:2b:6c:89:d8:f5:d8:d1:99:80:6b:16:a9:31:
                    47:4b:9a:03:18:22:ca:5f:f6:58:8b:82:76:8a:9f:
                    28:8c:a5:28:4b:c8:9d:c5:6b:aa:1d:c4:2a:af:02:
                    e8:c9:44:ae:fe:45:0a:ed:ab:e1:2d:ad:54:61:27:
                    cc:fa:80:e2:2c:3e:68:1b:64:44:fb:42:28:d3:5e:
                    c7:02:0a:f9:6a:82:f0:e4:a6:1f:cf:e9:ce:41:93:
                    cf:0a:48:e9:94:eb:cd:a4:61:12:a1:8d:be:0d:c1:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:54:CA:19:D6:1C:08:2F:94:D6:13:F0:43:25:82:AF:8D:4A:78
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32332d3233203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:44:57:c1:88:c8:b3:64:d2:0d:ee:aa:63:72:85:7a:98:d6:
         6a:ec:c7:4a:1d:0c:d2:e5:6e:f0:c7:ac:af:99:88:d5:bb:ed:
         1a:cf:f0:69:42:ba:c1:49:ef:c5:6f:06:3e:35:39:fe:9d:b1:
         47:2e:0c:40:66:65:a6:70:49:d3:18:06:15:e3:1e:c9:25:c4:
         12:46:3c:bc:cb:70:98:cf:ef:f1:e5:a7:4c:63:26:f8:b5:ab:
         8f:91:e6:36:be:1e:6a:0c:c3:fc:55:dc:d8:c1:b8:61:30:04:
         4c:7f:d3:e2:d3:c9:9d:15:b1:7c:d7:6b:1a:cf:2a:f8:2f:c8:
         bb:b2:77:41:3d:13:12:a8:63:0f:2c:bb:49:a0:93:4b:1d:c3:
         17:10:5f:54:a0:22:41:cf:ac:e3:1f:23:c7:85:f6:e7:ca:be:
         ee:b8:5c:de:d9:43:12:8f:71:e9:64:8a:a0:81:41:e3:5a:cb:
         f3:06:50:ec:d7:81:6e:f4:38:fa:44:be:11:6e:ae:5a:9d:62:
         4e:f1:d6:81:37:59:11:70:00:ce:b3:1f:5e:7e:2a:9e:ee:c6:
         cb:36:1b:65:66:12:3c:39:f0:15:6f:ad:c5:f9:11:89:d6:52:
         cf:d7:65:aa:8b:77:a3:74:0b:13:6b:02:48:56:93:4c:4d:3e:
         bf:09:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 20:21:28 2024 by rpki-client on console-ams.rpki-client.org