Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3232203d3e203532363031.roa
File:                     3137372e3132342e37362e302f32322d3232203d3e203532363031.roa (raw, json)
Hash identifier:          e4GQ08E5fBVXMmqJL5u5r9CQNnMXdtOixiK+QUlUp0s=
Subject key identifier:   09:DA:35:5E:A9:8A:67:B4:B4:98:E5:75:1A:B6:EE:60:D2:2D:0F:7C
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       564FAC5F219D4A2D95E4E92C7EBD79E579DCD3BF
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3232203d3e203532363031.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     52601
IP address blocks:        177.124.76.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:ac:5f:21:9d:4a:2d:95:e4:e9:2c:7e:bd:79:e5:79:dc:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=09DA355EA98A67B4B498E5751AB6EE60D22D0F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:68:a7:2c:c4:da:44:30:b9:50:ac:fb:16:
                    52:11:4f:4a:44:5d:39:99:52:44:a0:44:7a:26:30:
                    15:ac:89:fd:60:46:e2:dc:85:42:cb:14:49:a5:76:
                    ae:5d:0b:5c:64:67:35:b6:92:ef:93:bd:ac:ff:23:
                    51:72:e1:87:4f:3c:8c:3f:b0:df:f7:8b:a5:8a:6f:
                    14:e4:14:ef:33:c2:45:bc:22:ce:d8:b5:7e:05:63:
                    d6:6a:86:f8:19:fc:25:74:6a:ff:54:47:d7:93:8e:
                    d1:6e:ef:6d:c6:50:18:70:9d:fe:79:05:71:1c:01:
                    4b:de:c6:aa:5a:03:4a:0d:ae:c5:9e:2c:f0:bc:d8:
                    df:04:3e:33:56:39:54:65:5c:78:d5:fc:dd:b3:94:
                    87:98:83:51:6d:bf:c5:80:7d:80:14:3c:6f:33:68:
                    ad:b8:21:e9:2b:8f:60:14:87:ab:2d:cc:06:58:8a:
                    28:b0:26:77:ff:7c:48:ea:cb:be:ae:22:6e:98:f8:
                    31:20:04:41:22:0f:3c:ea:de:b6:c1:1d:18:81:e8:
                    2d:2a:1f:15:99:a3:09:26:b2:a3:46:2d:cd:cb:e8:
                    53:52:16:84:08:55:32:68:a1:8f:16:c1:23:a7:b8:
                    4a:f8:d8:56:22:41:d6:da:2b:1a:9e:6f:07:d3:79:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DA:35:5E:A9:8A:67:B4:B4:98:E5:75:1A:B6:EE:60:D2:2D:0F:7C
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3232203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:a8:d2:0d:b9:93:7e:01:e9:3a:95:64:8b:bc:3f:58:35:
         f7:30:a0:d2:2c:99:73:dd:63:b0:a2:a5:ae:93:e2:fb:50:d7:
         65:e0:32:d2:13:27:e2:3d:16:7e:83:b8:e6:9c:6f:fa:dd:b1:
         6d:88:b8:e4:ae:c3:63:c2:c5:af:f8:77:08:a6:82:c7:cc:7d:
         7a:2d:12:ef:b0:24:c2:0e:b4:79:ab:d4:45:89:4b:cd:29:91:
         44:85:6a:e6:2a:f5:e1:25:e5:c6:29:a7:05:4a:9d:f1:8b:a1:
         db:67:a7:32:83:e0:93:fe:37:b4:6e:80:cc:53:59:0f:23:8e:
         76:52:4d:7f:b5:24:04:80:de:21:0e:18:13:13:53:a7:f1:39:
         5f:9f:ad:f0:e2:ad:59:b7:33:4f:68:87:a9:ec:a1:f8:25:16:
         41:50:09:6a:7e:0c:58:41:70:6a:62:69:c0:1b:af:f8:e8:ee:
         2e:38:89:a4:43:53:f9:c3:18:71:b8:6a:a9:d0:a4:36:8a:4e:
         0e:5b:d1:bf:3d:c4:a7:92:34:8c:c4:87:4d:75:dc:84:ab:fb:
         36:d5:de:25:f7:69:86:df:be:63:cd:36:5a:7a:0f:c5:b5:8b:
         f5:66:a3:26:b5:bd:d1:4b:69:d2:8d:e3:f3:4f:8b:ed:21:cd:
         5e:40:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org