Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa
File:                     3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa (raw, json)
Hash identifier:          osjTCzMMtNFcoAmXIT129OUAkowy0niFPCkKVoOwpOo=
Subject key identifier:   62:23:7F:7C:EE:B6:26:D7:3F:0E:C7:C4:C6:9C:16:10:A4:8D:89:46
Certificate issuer:       /CN=A003ECD97A78942862A75B3FD6339EE84C8298A2
Certificate serial:       04B82E125E1B96F6247CA255641F9678527BB836
Authority key identifier: A0:03:EC:D9:7A:78:94:28:62:A7:5B:3F:D6:33:9E:E8:4C:82:98:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa
Signing time:             Wed 03 Apr 2024 19:14:32 +0000
ROA not before:           Wed 03 Apr 2024 19:09:32 +0000
ROA not after:            Wed 02 Apr 2025 19:14:32 +0000
asID:                     263623
IP address blocks:        177.185.240.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b8:2e:12:5e:1b:96:f6:24:7c:a2:55:64:1f:96:78:52:7b:b8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A003ECD97A78942862A75B3FD6339EE84C8298A2
        Validity
            Not Before: Apr  3 19:09:32 2024 GMT
            Not After : Apr  2 19:14:32 2025 GMT
        Subject: CN=62237F7CEEB626D73F0EC7C4C69C1610A48D8946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:80:ca:f7:e8:54:55:1e:2a:6a:53:7c:21:
                    b7:ce:fd:99:34:fc:b9:02:e1:4e:49:e5:c9:3f:55:
                    4f:3f:71:70:e9:72:89:c0:9f:bc:1e:d7:b9:00:24:
                    6b:a3:ae:2f:52:79:c8:02:ca:99:1a:b7:ac:16:15:
                    a9:51:88:f6:d6:55:d6:ba:f4:35:ca:fc:30:5d:db:
                    d1:c9:3f:eb:a7:73:e2:61:f0:81:22:ce:12:0f:9f:
                    c0:dd:9c:42:72:79:1a:38:94:82:03:dd:61:5e:59:
                    c5:cf:a1:fe:2d:06:ea:ec:62:f6:68:32:d4:87:59:
                    cd:92:46:d6:25:b7:da:a5:33:72:78:6b:5e:d8:2d:
                    c8:c8:ba:65:d6:f4:d9:d5:5e:dd:33:32:84:b0:f6:
                    7c:71:2e:3f:a6:84:c2:e2:fe:2c:3e:04:7f:bf:28:
                    0d:a1:ab:2a:9a:1c:85:d0:c7:40:41:b1:ec:93:d5:
                    f5:61:f9:ef:f2:fb:26:e3:e3:88:e5:19:46:5a:90:
                    e2:61:09:98:32:8b:b1:cc:5f:88:1c:e4:4c:1c:80:
                    75:64:c2:88:38:4b:87:c6:b3:06:d5:12:c8:5e:d2:
                    04:de:73:a8:28:1c:80:1f:f4:55:28:6f:7a:41:6c:
                    6f:de:7c:f9:e4:f4:6b:13:50:1f:9d:98:41:c6:39:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:23:7F:7C:EE:B6:26:D7:3F:0E:C7:C4:C6:9C:16:10:A4:8D:89:46
            X509v3 Authority Key Identifier:
                keyid:A0:03:EC:D9:7A:78:94:28:62:A7:5B:3F:D6:33:9E:E8:4C:82:98:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:df:5f:34:63:4e:99:56:be:95:d5:38:ef:61:bd:3c:66:
         17:4d:0a:f1:13:c4:0b:aa:d9:70:b7:b6:a3:73:98:22:30:b3:
         60:c1:fb:5d:78:0e:ab:f4:03:f2:65:24:67:0d:80:94:ef:3c:
         3e:45:fa:ac:82:b3:09:e9:ce:e9:ac:ee:22:dc:32:40:75:59:
         5a:a2:2a:57:b2:44:25:df:02:7f:f0:ae:60:db:64:c1:84:92:
         77:fc:b7:ca:43:72:28:13:5c:76:f1:35:7d:6b:4c:e6:03:41:
         41:44:d0:0a:0f:a5:8b:7b:11:05:cb:3a:52:49:fc:16:62:50:
         ce:8b:b8:f1:a1:77:76:27:fe:ee:57:df:3e:25:4e:fe:28:49:
         c9:eb:21:27:ca:ed:d2:32:7c:8d:82:ae:8b:77:8f:ab:91:6a:
         af:58:e6:80:ec:ca:52:01:fa:d9:d6:46:64:87:18:a0:48:d5:
         d9:8b:bc:3e:61:16:17:76:a6:62:e3:e3:26:38:59:a6:60:8b:
         7f:26:6d:e7:10:12:0b:b0:16:a1:53:de:a2:09:b8:58:0f:87:
         8c:cf:3b:f2:15:98:c2:43:6e:5f:e4:ac:8a:48:c8:1b:f2:4a:
         a6:5e:44:30:95:da:db:71:b2:0b:99:44:1b:0c:f1:28:bb:7a:
         24:0c:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:46 2024 by rpki-client on console-fra.rpki-client.org