Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa
File:                     3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa (raw, json)
Hash identifier:          T9wozdftvdfVBPGOTT3dFgNp01tL24Oh6HglRe0XuFg=
Subject key identifier:   01:AD:9D:DA:4C:8C:75:2C:67:C4:60:C7:FC:3C:FE:C7:68:3E:C7:CC
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       212F35A7B37673A3CDD3BFD5CDB5508302AA3466
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     263652
IP address blocks:        177.74.236.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2f:35:a7:b3:76:73:a3:cd:d3:bf:d5:cd:b5:50:83:02:aa:34:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=01AD9DDA4C8C752C67C460C7FC3CFEC7683EC7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:51:65:7f:4c:61:20:55:16:12:20:46:7d:
                    33:00:b4:55:25:62:c4:57:b5:80:7b:d0:20:2b:34:
                    3e:b9:93:ef:dc:52:e9:a4:c0:8f:e7:24:82:dd:0d:
                    50:3c:9d:55:f5:ec:02:55:1e:81:c0:a7:8a:71:f3:
                    89:c9:11:61:e2:a1:ec:8f:21:e0:45:36:4b:56:52:
                    21:ed:e0:a1:d0:8c:f2:ef:46:f5:a2:c5:ec:dc:f4:
                    2d:48:23:1c:27:fd:ef:9a:bd:f3:de:7c:68:d7:b8:
                    e7:cf:a9:aa:b0:1e:8d:3a:b1:77:b5:46:d4:87:dd:
                    27:b7:51:33:91:15:cb:ed:8f:08:17:ae:b5:1a:8f:
                    c8:03:7c:4f:4c:5b:16:61:09:36:16:f8:0c:ef:1e:
                    de:be:e8:74:dc:a7:47:5c:9f:42:9f:58:2f:51:e1:
                    a3:af:e7:0f:e9:5f:21:57:14:6b:67:0f:d2:9a:63:
                    99:13:39:0e:70:f9:f8:44:ca:9f:a9:2e:77:0b:3d:
                    f8:cc:0c:fd:fc:d4:54:59:8b:4b:d4:9d:65:b6:3e:
                    49:3e:66:23:cb:29:45:de:01:cf:8e:16:17:6b:b8:
                    b9:74:3e:1d:7c:91:0a:21:06:ed:88:34:26:ba:65:
                    aa:24:eb:f5:b6:1f:18:ea:37:f9:8c:6e:96:d3:82:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AD:9D:DA:4C:8C:75:2C:67:C4:60:C7:FC:3C:FE:C7:68:3E:C7:CC
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32322d3232203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:01:5f:09:cb:53:46:18:f7:c7:da:43:89:3f:28:3a:7e:09:
         f3:38:db:e4:b3:00:a1:8e:55:ff:65:8b:1e:55:10:f3:18:e9:
         20:ce:b4:38:d2:1a:6d:9c:1c:af:4e:96:d6:27:fb:ab:05:6a:
         5d:f1:8c:90:85:96:e8:aa:4c:a4:bf:80:b1:10:87:7f:43:20:
         a2:d6:bb:20:26:ff:bf:24:aa:d9:12:8d:c5:e9:83:42:35:46:
         8e:6e:d3:f6:66:71:3b:28:80:18:84:57:2e:01:36:3e:d8:f3:
         59:9a:cd:de:1d:34:55:ed:d4:fb:e4:ec:46:8f:bd:aa:94:5c:
         e3:9a:59:e5:3b:89:87:85:a4:a8:f5:97:83:53:aa:63:54:89:
         94:15:d9:49:bb:b4:52:c1:05:b8:3d:c4:21:00:ce:07:86:67:
         4e:d0:2c:f4:2a:93:e5:49:58:b4:96:90:f5:ea:7a:89:ab:dc:
         96:69:04:67:2e:bb:4c:ad:9b:95:77:5c:1f:c5:22:ab:01:ee:
         88:77:3c:f4:07:ff:3f:c9:6d:96:fa:4b:fc:4c:25:d9:57:94:
         29:61:12:4b:81:c4:9a:ec:c5:34:42:d0:e5:ec:4c:41:cf:3e:
         bd:11:e7:89:d4:cc:ca:a3:4c:55:60:04:15:46:39:4f:fb:87:
         d9:b4:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 20:21:28 2024 by rpki-client on console-ams.rpki-client.org