Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          j13owdC/3nM5EbG9WYGe9nrTKwNrCKi2yXN8+CnsP9A=
Subject key identifier:   D1:8A:26:22:83:C6:0E:19:88:E9:F6:E5:36:48:4A:E8:1B:85:86:5F
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       23D5F11DF788A8CC577E4EC3FFD001E26A05C021
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:47 +0000
ROA not before:           Mon 29 Jul 2024 15:53:47 +0000
ROA not after:            Mon 28 Jul 2025 15:58:47 +0000
asID:                     263652
IP address blocks:        177.74.236.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d5:f1:1d:f7:88:a8:cc:57:7e:4e:c3:ff:d0:01:e2:6a:05:c0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:47 2024 GMT
            Not After : Jul 28 15:58:47 2025 GMT
        Subject: CN=D18A262283C60E1988E9F6E536484AE81B85865F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:32:2a:ac:e2:49:3d:c9:5d:f4:1a:03:46:
                    8b:51:77:29:e4:48:08:1a:60:07:ff:6a:9f:2a:ce:
                    a7:15:d0:9b:7e:2e:ac:75:5c:2c:d3:e2:af:00:a9:
                    fc:8f:74:ad:fc:8a:82:b9:1a:b9:85:e5:f4:89:45:
                    b8:d4:7a:28:9c:84:c9:e9:42:65:01:9f:8c:d7:83:
                    a2:e5:5e:b2:17:79:fe:60:84:20:52:bb:7c:da:37:
                    50:ab:ec:32:ff:22:25:45:d6:c7:c0:06:ea:4f:60:
                    c3:c1:a8:75:05:94:ab:0f:59:3e:5f:16:50:f4:7e:
                    0f:11:8b:0b:27:88:7c:e3:14:91:29:ce:9b:77:f2:
                    7c:49:ec:82:66:88:14:ba:e3:68:d3:56:e7:5e:0a:
                    b8:bd:46:07:14:53:d8:a4:ae:90:7b:ad:27:a6:a0:
                    96:aa:c5:cf:08:2d:9e:12:be:90:12:38:0f:7c:07:
                    43:c5:05:77:98:cb:78:0a:3c:2c:c4:0e:cf:17:0a:
                    ad:15:9e:3c:d9:5d:1c:16:01:2b:b3:6d:d4:46:f5:
                    6c:08:ad:cc:bf:14:ca:74:f2:fc:b2:5e:4f:7a:eb:
                    42:a4:51:3c:14:cb:bb:03:ba:7d:7b:c5:57:e5:a4:
                    dd:98:8f:1c:2c:f8:72:7b:4f:1d:a9:50:17:ad:4e:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:26:22:83:C6:0E:19:88:E9:F6:E5:36:48:4A:E8:1B:85:86:5F
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233362e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:ec:15:d8:df:48:d1:f3:70:8c:f5:8f:0d:a6:f1:c5:75:b0:
         bc:dc:0a:61:41:37:76:6f:45:06:b1:b0:71:0d:ee:af:6c:53:
         a8:4a:7f:52:a7:b9:62:c5:8c:55:01:e8:e8:d5:45:fa:d3:13:
         9e:c4:49:e2:40:fd:bc:d5:85:c9:e9:2a:98:fa:3a:81:55:4a:
         f4:50:9e:e6:e3:6f:eb:3a:fd:c4:5e:2e:ae:e7:58:84:5c:c0:
         23:27:e9:f8:96:0f:0a:36:a1:be:b1:24:b6:54:54:f3:14:56:
         de:a0:db:be:9f:34:8d:da:ab:11:3e:c8:41:86:68:88:ff:c7:
         8a:12:03:50:db:8a:f4:30:67:f7:a5:ab:0a:07:09:32:08:0c:
         e0:13:6e:d2:a2:c6:df:31:eb:c2:7e:9b:60:ba:b7:32:f8:a5:
         b8:76:45:7e:17:17:21:45:ae:21:3d:57:8d:9f:22:50:32:2e:
         a7:a5:16:f7:23:30:7a:aa:28:8e:67:e4:5a:b9:92:d0:83:d6:
         55:7e:13:96:27:59:02:89:ba:ed:f2:cb:a8:d9:1f:30:99:39:
         08:6c:c4:78:6d:c3:0e:aa:f5:ac:77:9f:1d:bb:57:70:df:29:
         a3:17:15:d2:97:c7:10:d3:38:57:73:cd:0b:78:24:5c:80:74:
         21:48:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org