Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa
File:                     3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa (raw, json)
Hash identifier:          F0fcM0vp1IFFUaRHtwXL6sTiNn27EyLR8hzvJH3LWFo=
Subject key identifier:   55:32:A4:EA:B6:C7:9D:36:41:B3:D9:28:DF:F7:5D:10:DF:0E:A3:B4
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       2E3A6F7262AFA687B9BA03EF91132A5E17940AEB
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:46 +0000
ROA not before:           Mon 29 Jul 2024 15:53:46 +0000
ROA not after:            Mon 28 Jul 2025 15:58:46 +0000
asID:                     263652
IP address blocks:        177.74.228.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3a:6f:72:62:af:a6:87:b9:ba:03:ef:91:13:2a:5e:17:94:0a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:46 2024 GMT
            Not After : Jul 28 15:58:46 2025 GMT
        Subject: CN=5532A4EAB6C79D3641B3D928DFF75D10DF0EA3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:79:69:57:08:81:2a:d0:9b:94:b2:79:d1:
                    50:3d:6f:d8:1a:08:86:b2:53:26:b6:be:2c:39:9f:
                    f5:09:99:d8:a8:58:7d:cd:2a:77:a3:ce:88:c2:8c:
                    24:48:c5:44:41:c7:70:18:d3:5e:36:2f:da:e6:9e:
                    d2:bd:a8:e8:6f:df:bb:aa:07:53:92:94:8b:17:08:
                    01:8b:7e:82:6d:79:eb:7e:f6:d4:73:11:a3:ed:be:
                    b8:27:27:e2:d0:4a:4f:ed:86:5d:22:6b:9a:4e:91:
                    db:d9:ed:07:64:79:84:72:58:05:8d:17:86:7f:95:
                    d0:3c:fd:f3:a1:bd:cb:a9:42:96:53:04:28:d5:e5:
                    b7:85:b6:bc:fd:ea:94:1a:c1:ed:f5:76:83:c5:a6:
                    8d:b0:59:8f:fc:94:26:b7:48:85:05:56:dc:6e:37:
                    81:bc:f9:88:b7:e3:8f:c5:dd:85:ee:46:5b:f0:57:
                    b1:3f:da:8f:dd:55:e3:e2:03:9f:20:f0:48:42:ca:
                    01:b7:7c:d8:b4:aa:f4:ec:cb:62:ab:60:e1:dd:02:
                    54:2c:b8:46:fd:4d:73:52:c9:07:d1:53:57:c4:0e:
                    a0:18:ac:c6:67:08:b4:ea:3b:67:06:3d:d1:9f:50:
                    90:0f:ec:c9:63:81:4e:a8:28:1d:2d:96:00:b1:77:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:32:A4:EA:B6:C7:9D:36:41:B3:D9:28:DF:F7:5D:10:DF:0E:A3:B4
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232382e302f32322d3232203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:35:04:36:b6:10:76:9e:1d:a4:57:4c:2e:9f:d3:e5:da:a3:
         72:3e:8b:4a:2c:bc:59:70:00:cc:55:61:27:c6:6e:aa:e7:52:
         2b:af:65:bb:82:2c:66:d3:a9:0b:ec:70:5d:85:12:f3:40:2b:
         57:c4:f5:be:6d:fa:5f:61:3a:59:e2:3c:5e:6a:8d:49:29:b9:
         04:85:fe:ed:5e:e0:4b:ce:f1:b5:eb:50:af:a8:55:4f:0b:5e:
         f8:ba:b6:bc:93:b9:9f:4c:05:8d:71:43:5a:b0:64:70:b7:3e:
         82:69:68:6a:82:9a:68:d4:d0:e9:fd:c1:18:03:91:d6:d8:0d:
         12:cf:15:a1:46:f0:55:43:b5:af:58:e4:3f:54:26:7e:ef:d0:
         28:bc:1b:e4:72:e4:6c:47:60:c3:df:44:db:20:53:24:cc:c8:
         c2:cf:71:d9:71:3f:5e:e8:dc:25:22:b3:73:99:44:2a:6b:ba:
         e3:da:9e:79:85:a6:17:f8:47:ea:eb:3c:05:c3:4e:e8:39:80:
         80:58:80:22:92:ed:88:a6:0e:75:98:8e:7a:99:b6:a6:ff:c5:
         0c:42:52:ee:5c:07:96:e1:a5:78:2b:da:da:86:c8:24:64:dd:
         35:81:fb:bb:7d:5a:fd:69:3e:6c:c1:f0:58:34:b6:2e:e3:26:
         35:a3:c7:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULjpvcmKvpoe5ugPvkRMqXheUCuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGNUI4MzFFQjc3Q0Y5NkJDMUNFOTM3NTVGMUE0M0ZC
NjhBNDdGNzAeFw0yNDA3MjkxNTUzNDZaFw0yNTA3MjgxNTU4NDZaMDMxMTAvBgNV
BAMTKDU1MzJBNEVBQjZDNzlEMzY0MUIzRDkyOERGRjc1RDEwREYwRUEzQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6knlpVwiBKtCblLJ50VA9b9ga
CIayUya2viw5n/UJmdioWH3NKnejzojCjCRIxURBx3AY0142L9rmntK9qOhv37uq
B1OSlIsXCAGLfoJteet+9tRzEaPtvrgnJ+LQSk/thl0ia5pOkdvZ7QdkeYRyWAWN
F4Z/ldA8/fOhvcupQpZTBCjV5beFtrz96pQawe31doPFpo2wWY/8lCa3SIUFVtxu
N4G8+Yi344/F3YXuRlvwV7E/2o/dVePiA58g8EhCygG3fNi0qvTsy2KrYOHdAlQs
uEb9TXNSyQfRU1fEDqAYrMZnCLTqO2cGPdGfUJAP7MljgU6oKB0tlgCxd3b1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVTKk6rbHnTZBs9ko3/ddEN8Oo7QwHwYDVR0j
BBgwFoAUS/W4Met3z5a8HOk3VfGkP7aKR/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMC80QkY1QjgzMUVCNzdDRjk2QkMxQ0U5Mzc1NUYxQTQzRkI2OEE0N0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRjVCODMxRUI3N0NGOTZC
QzFDRTkzNzU1RjFBNDNGQjY4QTQ3RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzAv
MzEzNzM3MmUzNzM0MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSuQwDQYJKoZIhvcNAQELBQADggEBAGg1BDa2
EHaeHaRXTC6f0+Xao3I+i0osvFlwAMxVYSfGbqrnUiuvZbuCLGbTqQvscF2FEvNA
K1fE9b5t+l9hOlniPF5qjUkpuQSF/u1e4EvO8bXrUK+oVU8LXvi6tryTuZ9MBY1x
Q1qwZHC3PoJpaGqCmmjU0On9wRgDkdbYDRLPFaFG8FVDta9Y5D9UJn7v0Ci8G+Ry
5GxHYMPfRNsgUyTMyMLPcdlxP17o3CUis3OZRCpruuPannmFphf4R+rrPAXDTug5
gIBYgCKS7YimDnWYjnqZtqb/xQxCUu5cB5bhpXgr2tqGyCRk3TWB+7t9Wv1pPmzB
8Fg0ti7jJjWjxzs=
-----END CERTIFICATE-----
Generated at Sat Aug 17 20:21:28 2024 by rpki-client on console-ams.rpki-client.org