Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138342e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          AIhaB1hjr1ebRWEZxMNCC+mKPEwtYr3aYIIzl794kEI=
Subject key identifier:   AD:56:FB:DE:DE:25:25:6C:2A:DA:3C:B1:CF:ED:46:D7:2D:AA:D9:FE
Certificate issuer:       /CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
Certificate serial:       3C39BF804F4363FF51337674EAE4FDBDFABE8F7B
Authority key identifier: AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32342d3234203d3e203238353837.roa
Signing time:             Fri 26 Jul 2024 22:08:23 +0000
ROA not before:           Fri 26 Jul 2024 22:03:23 +0000
ROA not after:            Fri 25 Jul 2025 22:08:23 +0000
asID:                     28587
IP address blocks:        177.128.184.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:bf:80:4f:43:63:ff:51:33:76:74:ea:e4:fd:bd:fa:be:8f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Validity
            Not Before: Jul 26 22:03:23 2024 GMT
            Not After : Jul 25 22:08:23 2025 GMT
        Subject: CN=AD56FBDEDE25256C2ADA3CB1CFED46D72DAAD9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:69:fb:e6:4a:13:14:89:89:1f:e9:61:84:
                    0a:5f:61:71:98:5e:b4:0d:11:06:7d:24:4a:00:f4:
                    8f:6e:a8:97:5f:6c:12:fd:d9:6a:8a:2c:9d:b7:97:
                    c4:d4:f0:1d:48:e6:02:6d:79:3d:2f:25:cb:0e:2c:
                    a7:62:f0:f4:a8:36:bb:32:45:a1:ed:d3:1f:88:78:
                    3d:fb:d8:b7:1e:e1:c2:da:49:74:ab:80:e1:76:57:
                    57:59:17:9f:be:0f:d6:e5:c1:94:9c:27:ad:b0:36:
                    7f:87:fc:17:36:73:ec:37:30:74:3e:ec:cc:56:70:
                    34:71:84:19:0d:95:ab:88:f0:df:07:35:e8:9f:52:
                    e1:7c:8b:29:eb:61:ce:33:90:64:42:c4:a9:53:86:
                    2a:4e:a2:cf:01:66:57:c2:a8:c0:60:b5:f1:98:3e:
                    79:0d:45:af:7b:e3:f7:a2:a3:0a:2c:ba:78:51:2f:
                    34:b4:52:43:36:64:bd:5b:75:0b:59:c2:85:a1:f9:
                    57:96:f7:86:28:06:a6:bc:e7:72:f8:27:52:6a:59:
                    5f:e7:1c:17:b7:fc:3e:41:b8:97:69:39:f2:e0:f9:
                    af:f8:61:c2:da:85:45:c4:a9:36:dd:25:00:83:47:
                    b2:18:f7:ce:9e:4f:d1:5f:d6:fb:4a:3f:36:9d:86:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:56:FB:DE:DE:25:25:6C:2A:DA:3C:B1:CF:ED:46:D7:2D:AA:D9:FE
            X509v3 Authority Key Identifier:
                keyid:AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:75:28:3e:a2:39:ee:03:2d:b0:e7:4b:5e:e6:25:6c:39:e3:
         8d:30:38:40:8c:61:d1:5b:a2:2a:e3:26:25:d3:dd:97:ce:eb:
         10:0f:5e:8c:bd:c8:fc:01:a2:87:ed:b9:71:f7:54:95:c8:4e:
         49:4d:38:75:ad:27:64:d0:b7:81:b0:3d:ec:07:7b:79:f9:94:
         af:6c:51:6f:9b:a9:58:04:f7:93:e2:6b:69:20:df:be:7b:ad:
         c2:50:b9:65:9b:bb:f8:91:fb:08:e6:06:da:68:62:84:8c:16:
         8e:58:9d:82:fe:c7:f1:7c:c7:e0:17:56:a3:27:41:58:d3:d3:
         5a:8f:3c:5e:9e:bc:16:d0:c9:07:83:b5:5e:11:e2:54:07:0a:
         fb:80:e3:0d:8a:3b:80:6c:39:f4:19:7a:85:9b:78:bf:7e:fc:
         43:04:72:e6:13:80:ea:57:6b:44:7a:46:b5:e5:ac:1b:62:36:
         9f:01:47:20:db:28:e2:0c:fa:ca:61:4c:57:3e:19:3a:ff:d8:
         b1:7e:75:f0:ea:ee:1c:c8:77:85:c3:44:05:1b:20:13:d8:6b:
         ff:5d:53:d7:a2:b8:b7:55:80:96:10:43:e5:f4:71:cb:f9:9f:
         26:94:a8:a1:18:f5:db:e3:da:a9:9a:10:e0:fa:ff:2c:dc:72:
         a0:ac:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 07:44:21 2024 by rpki-client on console-ams.rpki-client.org