Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          RA0530e8D1Ogcg980i5S1bqra+12OqcFxKNa+jmAdkI=
Subject key identifier:   F1:77:AF:CF:EC:1F:48:60:8A:B2:BD:6F:31:87:03:A1:10:1F:77:82
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       2EF7D11B4DEBB4E1B04A390699B5F92F310067E4
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:47 +0000
ROA not before:           Mon 29 Jul 2024 15:53:47 +0000
ROA not after:            Mon 28 Jul 2025 15:58:47 +0000
asID:                     263652
IP address blocks:        177.74.224.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f7:d1:1b:4d:eb:b4:e1:b0:4a:39:06:99:b5:f9:2f:31:00:67:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:47 2024 GMT
            Not After : Jul 28 15:58:47 2025 GMT
        Subject: CN=F177AFCFEC1F48608AB2BD6F318703A1101F7782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:1f:f2:55:a8:0c:5c:66:55:21:b5:a9:50:
                    cf:03:28:9c:a0:56:58:3a:88:cd:d0:62:14:3e:ba:
                    ef:73:e0:ca:72:71:c3:e7:d5:01:ae:fa:aa:d3:48:
                    44:49:b4:51:b0:4b:ce:3b:ae:b6:b1:bc:2b:89:27:
                    2c:a3:81:ef:44:9e:ab:cd:51:ed:4a:d6:a4:d9:d4:
                    12:a3:a4:0a:fb:fb:d2:9f:90:c7:a9:ef:02:63:3f:
                    be:26:a4:9b:8a:89:9d:ad:b2:9d:e3:8f:41:56:44:
                    03:8f:3d:ed:e2:e6:95:47:9a:b0:ff:ea:de:a4:e4:
                    86:b1:4b:ed:7d:4b:62:37:b4:70:77:4d:40:6c:f1:
                    91:f8:86:77:3e:4e:49:fe:ce:5c:8c:e3:83:89:6e:
                    15:33:47:9c:2f:e7:b1:17:fd:45:42:47:6c:32:aa:
                    9e:f4:b2:dc:b8:ae:2c:c6:e8:eb:38:e0:11:7e:ae:
                    70:1f:9f:4d:88:0f:c8:4c:3a:cb:8f:fe:6c:37:eb:
                    7b:28:3d:d8:58:be:74:6f:ec:f3:94:38:67:6e:87:
                    1a:57:f1:b6:e3:38:51:f1:83:d1:ec:c2:79:99:c4:
                    1d:e8:f1:ee:40:dd:47:9c:aa:5f:f7:03:ad:ca:53:
                    ba:7c:38:0a:92:bd:9c:a3:78:de:f5:f6:68:38:75:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:77:AF:CF:EC:1F:48:60:8A:B2:BD:6F:31:87:03:A1:10:1F:77:82
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:74:54:40:62:f4:d5:fc:ce:5c:24:f4:99:55:1a:c4:33:57:
         a4:89:ed:94:3b:d7:5b:07:59:bd:da:4a:71:6e:8e:12:58:bb:
         40:96:9d:ae:78:0a:90:fe:6d:83:0f:33:d7:08:63:c8:c9:da:
         67:3d:29:a7:f7:72:83:57:c9:ad:8e:2b:0f:0e:a6:67:a0:dd:
         01:14:86:34:f0:0c:cc:74:71:cf:06:cf:44:76:07:65:90:9c:
         c5:e2:62:f7:e0:0b:37:f3:1d:15:2a:7a:37:7b:10:1c:57:b7:
         fc:3c:58:36:40:a2:f3:3f:32:30:29:72:07:01:ba:d2:17:f5:
         65:80:d9:66:8f:38:5b:71:39:e5:d5:09:14:6b:27:f5:bb:b7:
         77:34:5e:db:32:d3:f1:d5:a7:85:65:cf:65:bc:54:d4:1a:17:
         12:0a:06:bd:7a:93:af:b0:a3:01:ab:39:93:80:35:ea:6b:d1:
         5e:c9:36:c4:80:b3:4f:cd:46:28:98:2d:8c:c2:2f:f2:b5:62:
         9f:54:bc:99:c2:f7:5b:e6:12:69:e4:ec:b5:39:f3:6d:d5:c8:
         4c:03:ac:70:a2:73:fb:f7:6b:5d:91:16:7b:ea:43:ad:ab:85:
         2a:20:e7:99:77:6b:71:d5:86:3f:f3:67:68:f5:6a:06:03:16:
         7b:72:cd:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULvfRG03rtOGwSjkGmbX5LzEAZ+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGNUI4MzFFQjc3Q0Y5NkJDMUNFOTM3NTVGMUE0M0ZC
NjhBNDdGNzAeFw0yNDA3MjkxNTUzNDdaFw0yNTA3MjgxNTU4NDdaMDMxMTAvBgNV
BAMTKEYxNzdBRkNGRUMxRjQ4NjA4QUIyQkQ2RjMxODcwM0ExMTAxRjc3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTR/yVagMXGZVIbWpUM8DKJyg
Vlg6iM3QYhQ+uu9z4MpyccPn1QGu+qrTSERJtFGwS847rraxvCuJJyyjge9EnqvN
Ue1K1qTZ1BKjpAr7+9KfkMep7wJjP74mpJuKiZ2tsp3jj0FWRAOPPe3i5pVHmrD/
6t6k5IaxS+19S2I3tHB3TUBs8ZH4hnc+Tkn+zlyM44OJbhUzR5wv57EX/UVCR2wy
qp70sty4rizG6Os44BF+rnAfn02ID8hMOsuP/mw363soPdhYvnRv7POUOGduhxpX
8bbjOFHxg9HswnmZxB3o8e5A3Uecql/3A63KU7p8OAqSvZyjeN719mg4db8RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8Xevz+wfSGCKsr1vMYcDoRAfd4IwHwYDVR0j
BBgwFoAUS/W4Met3z5a8HOk3VfGkP7aKR/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMC80QkY1QjgzMUVCNzdDRjk2QkMxQ0U5Mzc1NUYxQTQzRkI2OEE0N0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRjVCODMxRUI3N0NGOTZC
QzFDRTkzNzU1RjFBNDNGQjY4QTQ3RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzAv
MzEzNzM3MmUzNzM0MmUzMjMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxSuAwDQYJKoZIhvcNAQELBQADggEBAHV0VEBi
9NX8zlwk9JlVGsQzV6SJ7ZQ711sHWb3aSnFujhJYu0CWna54CpD+bYMPM9cIY8jJ
2mc9Kaf3coNXya2OKw8Opmeg3QEUhjTwDMx0cc8Gz0R2B2WQnMXiYvfgCzfzHRUq
ejd7EBxXt/w8WDZAovM/MjApcgcButIX9WWA2WaPOFtxOeXVCRRrJ/W7t3c0Xtsy
0/HVp4Vlz2W8VNQaFxIKBr16k6+wowGrOZOANepr0V7JNsSAs0/NRiiYLYzCL/K1
Yp9UvJnC91vmEmnk7LU5823VyEwDrHCic/v3a12RFnvqQ62rhSog55l3a3HVhj/z
Z2j1agYDFntyzfQ=
-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org