Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233302e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233302e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          deaSYnyCgCmeIMsBLmGIY0bVdN+/BtdhZ2wf5jPPr6Y=
Subject key identifier:   A7:5B:00:06:EC:29:B6:A2:BB:35:B8:A6:A0:E2:34:4D:26:61:91:BF
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       699E3323898560638BBF94B993D4B1B40903020A
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233302e302f32332d3233203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     263652
IP address blocks:        177.74.230.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9e:33:23:89:85:60:63:8b:bf:94:b9:93:d4:b1:b4:09:03:02:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=A75B0006EC29B6A2BB35B8A6A0E2344D266191BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:84:cd:c7:66:12:ee:35:47:df:b8:f0:58:eb:
                    d4:54:d1:bd:6c:11:37:76:e5:83:5f:99:a9:54:fa:
                    05:5e:f6:8e:cb:70:da:83:19:49:8e:97:26:b9:1d:
                    d3:94:ec:4f:18:f8:46:b2:7f:6f:b2:68:33:10:28:
                    13:67:8c:53:b9:43:9a:78:54:b2:ff:d8:1d:a4:9f:
                    85:9a:5a:47:0a:38:29:99:bc:32:4f:8b:3c:75:b1:
                    d6:6f:48:3f:9f:95:93:56:8b:cb:21:b0:0d:aa:9a:
                    14:d8:f1:db:11:48:c7:0e:c8:d8:b8:35:22:fc:e7:
                    b9:a7:67:2f:97:90:f2:30:54:d1:4e:9e:f3:38:8a:
                    99:a0:3b:bd:28:0b:a4:46:f5:6d:b7:c2:2b:89:58:
                    10:56:60:e0:d5:53:29:26:c1:5a:d3:1b:54:0d:50:
                    0e:d2:ad:ec:6c:ec:46:b5:b3:f8:da:7e:a2:15:ba:
                    af:7b:e0:48:d0:37:4c:0f:21:a3:4f:15:ad:7e:1b:
                    47:ca:f3:d5:d3:8d:8d:77:14:80:75:8e:25:ab:08:
                    d5:5e:f2:eb:85:0c:3c:d3:5c:7a:69:83:9d:f3:b6:
                    3d:fd:3d:3e:56:9d:7c:02:a8:b3:8e:2e:9d:ea:d6:
                    e4:ac:30:3b:ac:b5:4c:07:8d:c0:9a:e7:a8:b2:a6:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5B:00:06:EC:29:B6:A2:BB:35:B8:A6:A0:E2:34:4D:26:61:91:BF
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233302e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:91:cb:26:4d:5b:f4:64:02:a4:89:6f:59:6d:a9:ad:43:9c:
         e3:c2:06:2e:73:46:29:8d:6f:3a:93:c5:d2:af:26:1c:3c:69:
         01:d4:9e:d6:b2:65:58:22:b4:c8:03:b8:c8:78:f4:b2:de:94:
         53:e3:6e:53:df:be:e8:54:8e:c0:f5:22:0e:45:07:08:c0:b4:
         d6:23:67:df:b7:6b:5d:59:f0:28:ff:7e:db:a5:14:e3:c3:e6:
         f5:88:94:92:eb:3b:d5:37:ca:b4:4c:88:b8:67:a5:3d:09:e3:
         2c:6c:56:5e:89:85:ba:8f:d2:a4:fd:d7:64:bc:7b:43:8c:c7:
         83:a8:6c:ae:ed:ce:84:ea:90:a0:e9:66:dd:41:c1:58:21:9b:
         29:a1:2e:af:60:49:a2:53:f0:21:c6:b3:f0:2e:51:ef:fe:fd:
         66:79:a5:8d:5b:18:9c:9a:28:39:c4:9b:ac:0d:43:df:92:38:
         c5:fe:8e:b6:eb:d0:66:9f:51:23:57:72:7b:7c:de:16:2f:18:
         5a:98:99:37:fa:60:14:52:05:fe:13:89:ab:cb:8b:5e:ef:b2:
         7b:38:56:70:e0:4a:cb:59:71:d8:a6:33:cf:6d:d5:ed:05:99:
         1e:2c:8b:4c:31:0d:6e:5e:46:57:6f:df:ed:f7:af:02:1c:9a:
         c4:ad:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org