Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa
File:                     3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa (raw, json)
Hash identifier:          F0HO/WV5BmjaNSlgeolhw8XFrhAOganPpFk0GxMHE1Q=
Subject key identifier:   61:E1:A4:A1:D1:2F:81:7C:28:84:F5:CE:64:42:22:FD:E7:30:63:65
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       51F6F052C1B3B23A2AF51F4D231C06A3F339C7A3
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:47 +0000
ROA not before:           Mon 29 Jul 2024 15:53:47 +0000
ROA not after:            Mon 28 Jul 2025 15:58:47 +0000
asID:                     263652
IP address blocks:        177.74.232.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f6:f0:52:c1:b3:b2:3a:2a:f5:1f:4d:23:1c:06:a3:f3:39:c7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:47 2024 GMT
            Not After : Jul 28 15:58:47 2025 GMT
        Subject: CN=61E1A4A1D12F817C2884F5CE644222FDE7306365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:01:95:f3:e3:a8:e1:d3:3f:e4:4d:8c:bc:
                    bb:ab:b8:92:7a:d8:ac:5f:52:9e:c1:19:58:c0:68:
                    84:62:dd:73:28:73:97:d2:21:e4:cc:38:29:1e:92:
                    5c:94:99:8e:fb:8d:a8:fe:c5:54:e7:56:fa:dd:2a:
                    fe:43:08:81:f3:cf:db:c1:86:56:4b:79:d7:b6:23:
                    b3:c8:17:f7:57:aa:7a:41:ab:3f:e1:45:d9:76:81:
                    d7:65:6e:cb:b0:09:c5:12:7e:a5:8b:21:26:89:63:
                    df:a2:36:9b:51:aa:ff:06:71:34:57:f4:ec:cb:0b:
                    cc:4f:5e:6f:6c:00:38:c1:0b:75:51:61:21:5a:ca:
                    ea:3b:33:9d:1f:6b:ef:ee:f8:38:f7:43:7c:b6:c7:
                    9c:f2:da:dd:fa:94:8b:83:b3:47:82:90:9e:29:29:
                    b2:de:a5:b4:ad:ff:f2:18:c8:b0:f5:42:0e:d5:6d:
                    e1:8d:e4:5d:b7:7b:28:ff:34:01:88:4a:6c:71:b7:
                    1b:15:85:7f:dc:d4:08:90:2f:c7:01:56:91:8c:6c:
                    26:e6:dc:d9:a3:9d:be:35:0b:e1:37:55:b8:8b:b4:
                    4b:b5:a1:6d:c9:fc:16:3c:80:f8:db:4f:d8:10:f9:
                    70:1b:b3:7b:bf:a4:bd:b6:c1:7f:10:52:e3:b6:49:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E1:A4:A1:D1:2F:81:7C:28:84:F5:CE:64:42:22:FD:E7:30:63:65
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3232203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:7b:90:9d:42:86:bc:47:52:5a:1a:ac:7c:59:97:5f:66:5e:
         e8:eb:19:e1:72:68:20:12:71:6a:2e:50:66:2e:0b:85:c8:e3:
         55:2a:79:f1:af:e5:5b:44:cc:c2:38:8a:f7:12:24:f0:34:fb:
         53:68:1b:bf:8e:c6:c8:ef:8a:78:0a:99:84:41:b4:c4:0c:f9:
         9b:24:8c:c2:63:04:62:b4:41:45:4a:15:67:92:25:cb:1b:e3:
         1d:49:26:87:90:cf:79:f4:a9:a9:eb:ff:aa:cb:22:de:f5:b9:
         1d:2e:14:40:35:e3:cc:cc:8d:78:9d:52:de:18:bc:7a:a1:a4:
         88:97:b4:c9:8e:54:05:e6:bb:17:f1:25:9d:df:1e:0a:6a:8f:
         8f:2d:64:9f:82:a2:d6:d9:e8:18:63:f9:de:06:fd:f8:31:e7:
         d8:1b:04:a0:b4:58:98:c8:fd:ee:ca:ec:13:45:b3:e4:60:52:
         74:61:75:3f:80:09:76:a0:fc:d5:16:9f:e2:d2:0b:97:7f:b1:
         05:8a:08:8d:66:2b:28:f8:a7:2d:54:41:81:99:9d:73:ec:b3:
         0f:44:e4:28:7a:99:86:c6:17:1f:ba:47:47:18:44:d0:9e:ce:
         d2:23:23:8c:98:6c:0b:3e:ca:59:22:4c:14:89:72:79:e5:a5:
         b8:aa:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org