Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          8uQRs8C6lJYDLaZJgYCnWZqUeqqXxvNmWYdXlgEUhhU=
Subject key identifier:   94:C5:6C:1F:CC:0F:52:4D:D5:9B:87:A1:D5:B5:86:0D:49:F8:18:65
Certificate issuer:       /CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
Certificate serial:       27FE8D57D44A5B07ED9FD2DB3EEF9B238FA1221D
Authority key identifier: AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
Signing time:             Fri 26 Jul 2024 22:08:16 +0000
ROA not before:           Fri 26 Jul 2024 22:03:16 +0000
ROA not after:            Fri 25 Jul 2025 22:08:16 +0000
asID:                     28587
IP address blocks:        177.128.190.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fe:8d:57:d4:4a:5b:07:ed:9f:d2:db:3e:ef:9b:23:8f:a1:22:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Validity
            Not Before: Jul 26 22:03:16 2024 GMT
            Not After : Jul 25 22:08:16 2025 GMT
        Subject: CN=94C56C1FCC0F524DD59B87A1D5B5860D49F81865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:9c:7b:8c:df:49:18:1c:d8:3b:8f:be:9d:
                    62:01:67:1b:61:8f:56:d0:e1:cf:fb:cd:70:da:b8:
                    85:42:1b:c5:15:da:f7:0b:5e:ca:47:72:bc:63:2e:
                    93:29:f0:b5:f3:db:0b:ba:8a:02:0a:af:a1:52:d6:
                    af:c0:a9:6f:e3:d7:4f:76:b1:34:9b:2b:0c:7a:d8:
                    2e:74:3a:59:2b:19:e6:cd:66:d7:7e:5c:b2:20:d8:
                    74:de:0c:fe:65:63:eb:ce:29:cd:28:19:8f:94:5f:
                    44:ca:cb:6a:73:43:67:08:63:6e:c0:bd:1e:bb:aa:
                    b6:c1:42:0c:89:1a:ef:6a:c6:b9:d3:d7:d0:7b:51:
                    94:e2:31:5f:cf:99:ed:ab:2e:e4:0e:32:7e:91:3b:
                    1d:f0:0c:87:df:0e:6d:f9:06:aa:92:9d:8c:74:f6:
                    e7:6c:36:27:20:34:a0:50:c3:c5:d7:ee:fc:cf:3c:
                    ac:c4:52:43:35:fc:f1:43:bc:fb:ef:f8:71:22:a5:
                    c9:de:44:ce:bd:9a:9a:31:06:23:66:32:8b:b9:8c:
                    60:c5:4d:37:b3:12:c8:20:6e:97:e0:5d:79:97:72:
                    dc:11:61:8e:ab:e1:ba:b0:ec:92:83:69:d9:b1:04:
                    08:2e:91:ee:41:09:b0:98:8b:d9:95:37:fc:ac:c8:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C5:6C:1F:CC:0F:52:4D:D5:9B:87:A1:D5:B5:86:0D:49:F8:18:65
            X509v3 Authority Key Identifier:
                keyid:AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:6c:3e:29:d9:c0:a2:46:37:65:31:e6:4a:54:31:24:9d:
         c6:93:f4:76:95:73:f2:b6:76:50:ff:9f:1f:11:41:9b:4d:95:
         96:c2:85:0f:fd:ac:d6:7f:2e:20:70:32:25:29:f8:98:ae:1d:
         c0:09:74:21:a5:85:7f:b6:7f:b8:c1:45:d5:e7:e1:04:45:19:
         0a:32:c2:a0:b6:61:00:f0:13:a5:fe:f5:06:1e:a8:1e:ae:3a:
         b7:f0:27:aa:df:8b:43:14:cd:b9:3f:fb:08:d1:12:92:f6:2f:
         97:01:a1:91:d3:a2:eb:11:a6:e7:6a:8d:58:ae:95:36:ba:63:
         01:fc:e8:3d:9a:42:59:61:4f:bd:2c:f3:d1:c5:99:b1:6b:89:
         9f:df:86:19:08:58:46:53:51:78:5b:58:aa:22:c4:12:d7:a7:
         6a:eb:7b:89:f3:f7:81:65:8a:6c:8d:7b:6f:87:f2:64:c8:68:
         bb:3b:dc:91:c8:12:53:ac:a5:4a:c2:b2:ed:a7:36:90:66:8a:
         ac:d5:87:3a:e9:58:6f:1a:86:7d:e8:1f:d7:70:e2:fb:5b:5e:
         6a:c2:e3:93:a9:8b:5b:82:bd:13:eb:c4:11:69:aa:2e:41:9d:
         05:f7:de:de:1b:9e:f5:a8:1e:5e:6a:df:53:54:20:88:a4:3e:
         40:55:59:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ/6NV9RKWwftn9LbPu+bI4+hIh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNDQzBGNURDRjA2RDA4NUZERkVENTIwRUIwMkY4NzA1
NDcyODE2NzAeFw0yNDA3MjYyMjAzMTZaFw0yNTA3MjUyMjA4MTZaMDMxMTAvBgNV
BAMTKDk0QzU2QzFGQ0MwRjUyNERENTlCODdBMUQ1QjU4NjBENDlGODE4NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX75x7jN9JGBzYO4++nWIBZxth
j1bQ4c/7zXDauIVCG8UV2vcLXspHcrxjLpMp8LXz2wu6igIKr6FS1q/AqW/j1092
sTSbKwx62C50OlkrGebNZtd+XLIg2HTeDP5lY+vOKc0oGY+UX0TKy2pzQ2cIY27A
vR67qrbBQgyJGu9qxrnT19B7UZTiMV/Pme2rLuQOMn6ROx3wDIffDm35BqqSnYx0
9udsNicgNKBQw8XX7vzPPKzEUkM1/PFDvPvv+HEipcneRM69mpoxBiNmMou5jGDF
TTezEsggbpfgXXmXctwRYY6r4bqw7JKDadmxBAguke5BCbCYi9mVN/ysyATXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlMVsH8wPUk3Vm4eh1bWGDUn4GGUwHwYDVR0j
BBgwFoAUrMwPXc8G0IX9/tUg6wL4cFRygWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0cySkZlcFhjMzlodXFQY3RkOHlxMVJrZHdlcHVYNXBGQlpGVFlHOXhT
MjUvMC9BQ0NDMEY1RENGMDZEMDg1RkRGRUQ1MjBFQjAyRjg3MDU0NzI4MTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDQ0MwRjVEQ0YwNkQwODVG
REZFRDUyMEVCMDJGODcwNTQ3MjgxNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHMkpGZXBYYzM5aHVxUGN0ZDh5cTFSa2R3ZXB1WDVwRkJaRlRZRzl4UzI1LzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgL4wDQYJKoZIhvcNAQELBQADggEBAI07bD4p
2cCiRjdlMeZKVDEkncaT9HaVc/K2dlD/nx8RQZtNlZbChQ/9rNZ/LiBwMiUp+Jiu
HcAJdCGlhX+2f7jBRdXn4QRFGQoywqC2YQDwE6X+9QYeqB6uOrfwJ6rfi0MUzbk/
+wjREpL2L5cBoZHTousRpudqjViulTa6YwH86D2aQllhT70s89HFmbFriZ/fhhkI
WEZTUXhbWKoixBLXp2rre4nz94FlimyNe2+H8mTIaLs73JHIElOspUrCsu2nNpBm
iqzVhzrpWG8ahn3oH9dw4vtbXmrC45Opi1uCvRPrxBFpqi5BnQX33t4bnvWoHl5q
31NUIIikPkBVWeo=
-----END CERTIFICATE-----
Generated at Sat Aug 10 06:22:27 2024 by rpki-client on console-fra.rpki-client.org