Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          s8hW+FCZ+NbMtMv3GRJLRtOTY7jvdsw7lIWt7XkBW9w=
Subject key identifier:   68:B8:E6:46:0B:2B:FC:9D:06:5D:B5:8C:32:CA:16:EA:8F:B4:C4:0F
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       563ADE28D5B2FD7B7F0AB5B7A8A3DD17F6195433
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     263652
IP address blocks:        177.74.232.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3a:de:28:d5:b2:fd:7b:7f:0a:b5:b7:a8:a3:dd:17:f6:19:54:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=68B8E6460B2BFC9D065DB58C32CA16EA8FB4C40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:c9:eb:b6:f4:6d:f5:b8:de:12:1d:c1:f9:
                    73:f7:46:91:0a:9c:9c:57:0f:3f:a7:bf:d4:27:3c:
                    6c:31:9f:fe:bf:5d:84:13:76:e2:84:4a:63:79:7d:
                    ab:a1:43:34:b0:58:b5:84:07:31:b7:c6:40:7f:96:
                    a7:33:77:c0:17:19:33:81:c0:42:bb:72:3c:6a:e4:
                    64:07:05:aa:6c:ac:cb:49:fa:42:f0:5a:60:b1:b8:
                    47:9d:25:ba:c0:f8:cd:1e:17:e4:ce:28:58:ee:6e:
                    7f:30:bc:92:41:2a:4b:b8:f0:ef:01:39:63:24:8a:
                    30:38:9c:dc:55:8d:6d:89:27:8c:0e:4f:0c:79:52:
                    a0:a1:43:f4:9c:cc:a8:c6:a4:fc:7b:c9:d4:bf:6c:
                    20:b9:db:72:21:04:08:cc:a1:77:dc:2e:f3:f6:0e:
                    9b:72:c9:80:5f:dd:2f:7a:a9:37:6c:07:f5:00:1c:
                    86:8e:e9:32:44:30:f7:4d:4b:6a:c0:c7:e3:6b:0f:
                    84:9c:10:f0:d9:d5:f2:70:a0:34:57:01:5e:22:ea:
                    63:45:4d:a6:f6:ff:1c:8b:4a:de:3d:cf:21:e1:d7:
                    77:fd:20:cd:45:da:1e:8d:f8:27:65:72:ef:f4:92:
                    90:ee:8c:df:e0:2e:f7:c3:62:03:93:27:6a:2a:22:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B8:E6:46:0B:2B:FC:9D:06:5D:B5:8C:32:CA:16:EA:8F:B4:C4:0F
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:46:ed:a8:66:a5:b0:5b:2b:48:e5:b9:89:d9:38:37:88:
         db:67:e1:a1:8d:0c:4e:37:9f:6f:1b:6d:3a:45:5d:06:9a:2e:
         17:d5:b5:83:2a:33:45:27:4e:22:ec:b9:1f:4b:62:ca:ed:25:
         03:ca:c7:ff:fa:a8:43:17:c5:bb:29:8b:61:f0:b1:3c:a7:5c:
         93:ed:74:9e:2d:b7:68:fd:59:ba:aa:5b:8d:6b:34:ed:9b:25:
         c3:1f:45:b4:3b:c1:c9:08:a8:d4:d7:00:0e:39:51:ef:3e:fe:
         0d:7e:08:b5:9f:c6:6d:18:c6:96:3e:e8:29:90:45:b2:53:df:
         e1:45:74:b1:d4:ee:71:3b:ff:60:ff:82:63:96:83:9b:cf:fe:
         4d:3f:fe:d0:19:46:f2:49:f2:02:e4:5b:a0:de:df:ea:a0:52:
         19:41:23:f1:57:91:ea:64:6b:4e:73:8e:87:f7:3c:ad:fe:8f:
         8e:91:79:11:4d:98:6d:45:c8:dc:ce:b2:c9:58:81:21:aa:82:
         19:37:1c:75:9a:c7:94:aa:b0:b1:8a:d3:a2:05:1c:31:3c:16:
         1b:37:6b:5e:c8:85:03:fa:1e:36:ce:b3:40:61:13:79:4c:2d:
         ef:4c:ad:84:17:e5:66:38:be:0b:8b:b8:a9:23:21:be:6b:d7:
         ea:9a:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 20:21:28 2024 by rpki-client on console-ams.rpki-client.org