Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/34352e3137372e3137352e302f32342d3234203d3e20323639303338.roa
File:                     34352e3137372e3137352e302f32342d3234203d3e20323639303338.roa (raw, json)
Hash identifier:          ZfMt5alQ94x5e6tKMag95FW5jfRMdPRTtxr+rFxH67M=
Subject key identifier:   1D:0E:D3:7D:32:3B:50:11:C6:64:FA:89:20:36:76:FB:1D:DE:EB:F9
Certificate issuer:       /CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
Certificate serial:       271A6BEA7444172F793FA7CD507441DC3A93569A
Authority key identifier: 3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/34352e3137372e3137352e302f32342d3234203d3e20323639303338.roa
Signing time:             Mon 05 Aug 2024 18:23:27 +0000
ROA not before:           Mon 05 Aug 2024 18:18:27 +0000
ROA not after:            Mon 04 Aug 2025 18:23:27 +0000
asID:                     269038
IP address blocks:        45.177.175.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1a:6b:ea:74:44:17:2f:79:3f:a7:cd:50:74:41:dc:3a:93:56:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
        Validity
            Not Before: Aug  5 18:18:27 2024 GMT
            Not After : Aug  4 18:23:27 2025 GMT
        Subject: CN=1D0ED37D323B5011C664FA89203676FB1DDEEBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:20:14:e1:55:64:68:40:2d:4c:4a:e9:c9:
                    99:23:15:b4:37:62:94:97:59:79:55:c1:ac:3f:6b:
                    9b:89:f6:ad:0f:51:a8:50:ae:3e:85:b6:03:f4:5a:
                    68:46:eb:32:8e:81:2f:24:c6:99:da:19:90:a9:aa:
                    3e:dc:6c:cd:f4:a0:fb:09:1d:38:a1:19:7e:59:cf:
                    3c:fb:1c:b9:1f:03:ff:1b:20:ff:60:70:06:e3:3a:
                    3b:ff:4e:dd:c5:5c:16:f7:d9:17:c5:ce:06:1e:de:
                    55:d6:72:1a:02:64:20:8f:26:9a:16:72:11:d3:b6:
                    3f:9f:06:81:ec:ef:f4:8e:5d:5f:86:af:78:f6:cc:
                    33:01:91:62:a0:ce:ca:79:dc:8b:b7:51:eb:bc:2a:
                    31:94:70:e0:d3:ed:2c:e6:0e:73:a6:a0:68:2d:75:
                    2a:3b:a2:e4:7e:f1:23:2b:93:10:10:3b:19:8c:c3:
                    b7:1f:f7:32:16:d6:de:ea:35:9b:f6:cd:71:60:09:
                    34:ee:8c:a0:15:f7:22:56:cf:91:44:8c:db:57:db:
                    9a:c4:88:13:4b:ab:39:95:30:69:24:a1:47:5d:60:
                    98:87:ad:43:cd:db:59:6d:91:95:28:f6:6f:28:95:
                    cc:a1:4e:1c:40:dd:cb:df:b5:ca:0c:b9:5e:23:1e:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0E:D3:7D:32:3B:50:11:C6:64:FA:89:20:36:76:FB:1D:DE:EB:F9
            X509v3 Authority Key Identifier:
                keyid:3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/34352e3137372e3137352e302f32342d3234203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:38:f3:39:4e:ed:fb:1c:ca:d7:c5:cc:17:ef:a8:d9:b3:89:
         70:52:fb:5e:93:77:28:77:4b:de:d6:eb:0d:d1:79:54:be:e5:
         86:c0:24:77:d0:7d:99:36:45:13:63:5b:49:18:8e:6f:20:4b:
         ed:03:82:70:61:e3:c3:2a:cd:72:56:17:00:d5:b8:e8:37:0c:
         16:5d:0e:e3:0e:52:9a:c3:a4:e3:3a:42:ee:19:f4:9d:8d:f9:
         49:3d:67:40:ab:4d:4a:3f:ec:0d:0b:8d:0e:d3:2a:51:83:15:
         49:e9:bb:53:94:44:bd:1d:ee:86:48:e6:f7:b8:3b:d7:0d:a0:
         c3:37:52:c8:3a:45:52:2a:16:f5:9e:3f:f4:bd:e0:aa:f1:02:
         f1:b8:6b:e0:ee:1a:5a:d8:7a:7e:e3:b5:03:55:5a:0b:89:e3:
         38:e4:c8:01:89:8d:dd:37:90:d0:fe:35:5d:2f:6a:98:71:a2:
         5c:31:47:dd:32:0e:04:ce:35:63:56:ff:47:a8:c7:66:c0:b4:
         84:de:63:5c:68:a8:2d:f5:64:02:0a:90:ae:fc:48:1f:16:61:
         ee:bc:dc:65:29:15:6b:61:51:d5:3e:8f:12:9d:d1:2b:0b:f1:
         1f:47:e9:1e:43:d7:8a:f2:bf:00:f0:ef:a3:25:64:91:53:ba:
         e4:78:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org