Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa
File:                     3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa (raw, json)
Hash identifier:          P3KmtGy/E8hf2cra5icjHWLEspGmAspF8Jp9Y7CFOPA=
Subject key identifier:   A6:84:87:CF:4B:B4:93:6F:6C:3E:52:CE:E6:B0:CE:16:12:9E:49:9C
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       72411794FBCBF7960B2B491D95A94B6F5F92C950
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:47 +0000
ROA not before:           Mon 29 Jul 2024 15:53:47 +0000
ROA not after:            Mon 28 Jul 2025 15:58:47 +0000
asID:                     263652
IP address blocks:        177.74.238.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:41:17:94:fb:cb:f7:96:0b:2b:49:1d:95:a9:4b:6f:5f:92:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:47 2024 GMT
            Not After : Jul 28 15:58:47 2025 GMT
        Subject: CN=A68487CF4BB4936F6C3E52CEE6B0CE16129E499C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:04:06:5c:ba:c4:1b:9e:03:c7:e2:f1:7a:58:
                    ad:e3:c0:81:9a:37:c1:78:b1:64:8d:59:b9:88:40:
                    a0:39:55:fd:a2:7a:8b:86:13:5d:64:0e:12:8b:62:
                    6d:ee:90:1b:aa:05:51:24:0d:e8:0a:f5:03:7c:3b:
                    20:7b:7b:0f:4d:06:89:4d:fa:e9:69:a2:0c:ff:57:
                    30:31:a5:86:b3:87:e8:08:59:9b:af:e7:c0:cb:19:
                    65:19:6b:e0:60:87:53:49:34:79:b8:47:e4:84:9b:
                    1d:83:2d:06:79:c3:dd:49:4e:bd:97:a2:2e:4b:a6:
                    89:32:91:06:a1:26:10:2a:8a:b9:7b:8b:50:f0:5d:
                    4f:96:cb:97:12:b5:8e:e5:bb:23:30:1a:98:1e:5d:
                    a3:50:e5:42:7f:b7:f5:54:46:d3:52:56:77:af:8c:
                    74:7c:ff:0d:2b:cc:47:9d:0b:6b:dd:80:bb:82:69:
                    a4:44:0a:7c:3d:ae:b4:85:ce:8c:00:39:c4:44:8a:
                    79:3c:ba:07:e8:3a:8a:9d:e7:f7:49:58:ba:f5:6e:
                    b3:95:98:bc:8c:10:b0:d0:33:d1:f5:ab:23:af:fe:
                    4b:31:6b:ee:9e:62:e5:43:06:b7:fd:3a:0d:91:e8:
                    dd:bd:f8:72:ee:21:32:2f:ca:90:f0:1d:49:fe:c1:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:84:87:CF:4B:B4:93:6F:6C:3E:52:CE:E6:B0:CE:16:12:9E:49:9C
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233382e302f32332d3233203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:83:91:51:d1:35:d8:94:4f:36:b8:be:20:2a:d5:61:7b:
         a2:c2:2b:a2:c4:d5:e9:89:a7:65:83:b9:a4:74:fa:d6:42:99:
         70:ed:54:d0:80:61:21:76:14:29:f6:c2:88:1c:fe:87:63:32:
         46:6a:59:ba:d1:07:99:1a:eb:a9:12:d8:5c:2f:d6:e9:46:c2:
         88:b1:e0:31:2d:bf:b2:fe:70:ce:fa:f8:8f:41:af:5f:ef:a7:
         e7:96:78:45:8a:9e:b6:e6:f4:de:86:a4:c7:21:c8:38:ac:31:
         c7:ed:de:8f:95:71:82:3c:ca:f7:41:e9:8a:51:28:c1:ce:4f:
         27:28:c9:6b:24:16:d6:7b:3a:f6:59:f5:de:69:1d:c5:3c:c9:
         8e:b8:50:e8:2b:81:91:11:1b:4e:f4:3c:ad:f2:cb:cf:db:8e:
         19:72:76:12:98:16:0b:ac:4a:93:d4:0d:af:64:31:1d:02:fb:
         bb:7f:30:d0:d7:50:01:fc:df:ed:20:f1:f2:76:74:0f:8c:3f:
         b6:de:77:fc:26:db:f4:42:12:52:0b:88:85:5a:76:c0:ee:c9:
         f6:00:2f:26:8a:2f:28:72:9d:ca:a4:fa:ef:35:03:23:72:c6:
         b1:01:b8:ad:05:72:c4:77:75:07:cc:f4:f0:e8:47:94:1b:e5:
         dd:c7:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org