Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32332d3233203d3e20323632333736.roa
File:                     3137372e3132382e3136382e302f32332d3233203d3e20323632333736.roa (raw, json)
Hash identifier:          gBot50aVGL38cuVaLn9GYjbs0RzszUZmsmYjCntWPvE=
Subject key identifier:   D0:BC:2B:FE:6A:E3:46:0D:36:B5:92:53:14:65:EE:ED:A5:A7:F1:55
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       6A207A8776E1825583716319CF635077A08A3462
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32332d3233203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:35:25 +0000
ROA not before:           Tue 04 Jun 2024 17:30:25 +0000
ROA not after:            Tue 03 Jun 2025 17:35:25 +0000
asID:                     262376
IP address blocks:        177.128.168.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:20:7a:87:76:e1:82:55:83:71:63:19:cf:63:50:77:a0:8a:34:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:30:25 2024 GMT
            Not After : Jun  3 17:35:25 2025 GMT
        Subject: CN=D0BC2BFE6AE3460D36B592531465EEEDA5A7F155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:96:d5:a1:41:02:a2:87:01:1a:bd:e6:b4:
                    64:3c:fe:63:ca:6a:e6:f8:8e:9a:b3:44:4b:e5:86:
                    20:54:91:ae:06:6a:5e:be:5d:e4:aa:e1:32:35:4a:
                    e9:66:57:e1:62:26:b4:2f:1b:76:86:57:60:7c:a8:
                    6f:02:ab:c8:48:f8:60:53:9d:68:c6:ef:cb:18:93:
                    d5:54:89:4a:1a:a1:91:24:32:df:c3:67:97:2a:a6:
                    b1:04:f9:eb:74:94:58:83:39:7f:73:f7:35:15:d9:
                    5e:64:b5:f7:19:d8:02:c8:a2:95:7c:c6:a2:5c:c7:
                    91:2a:64:a9:f0:99:46:c7:67:35:3e:5f:2c:f3:cb:
                    de:b9:aa:37:e5:8b:d7:a5:13:cb:75:bb:75:d2:05:
                    bf:0f:51:24:ec:c6:80:7a:e7:1b:ef:28:de:71:31:
                    ae:58:65:d3:01:79:5a:5c:77:e0:13:da:c4:cf:9d:
                    8a:4c:c6:b2:9e:04:3b:cd:6d:27:0a:ec:6d:af:1e:
                    dc:25:05:f5:8c:8a:45:8d:d8:cc:b3:a9:58:ed:ba:
                    bc:fa:90:8e:54:ab:26:4f:6b:35:bf:cf:3e:de:5b:
                    e0:ea:21:a5:29:ff:02:90:eb:1f:ac:ac:6d:5c:c8:
                    08:23:ac:b9:fc:d3:07:e0:a5:78:7f:11:47:90:e5:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BC:2B:FE:6A:E3:46:0D:36:B5:92:53:14:65:EE:ED:A5:A7:F1:55
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32332d3233203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:65:12:87:56:63:c5:7d:29:5f:48:19:6d:cb:7a:d9:53:f0:
         9d:55:9d:04:b1:49:20:98:d9:7a:7f:ee:19:d2:8e:ce:63:45:
         91:c7:f8:2c:36:3f:82:a9:87:e5:fe:fc:d0:6d:80:0a:ca:5f:
         cf:93:2e:eb:7d:6a:d9:0f:2e:73:3f:a7:db:9f:69:87:04:46:
         92:bf:43:6b:6b:d7:12:f3:f1:45:3d:ed:bf:7e:21:c5:bf:76:
         19:b5:74:2b:e8:f0:95:88:62:50:03:b2:4b:b7:a6:92:ab:ed:
         89:ff:79:30:a7:bc:2d:e3:3e:1f:eb:c5:ff:fa:fe:40:e6:24:
         dc:94:b5:50:3b:0f:3c:92:8f:4e:f4:5a:2b:3a:99:65:50:a1:
         f5:d1:b0:a7:b6:47:95:c3:d6:3a:49:9b:0e:8d:91:c4:a9:f0:
         b6:e4:b3:8c:5e:4e:b6:05:d5:72:dd:85:82:5b:c3:a0:bf:16:
         34:2e:67:8e:06:a8:d6:c2:4c:d9:d3:ae:6f:f2:1b:9f:50:6c:
         6c:2a:e6:06:41:6a:3d:5c:de:7a:c4:15:b6:c4:db:83:ef:56:
         84:88:de:83:f7:39:46:19:fa:1c:27:0d:5c:93:ba:4a:c9:aa:
         e7:01:71:49:d5:58:a5:16:55:c1:d0:43:e9:40:ff:a7:10:51:
         6d:aa:4c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:19:05 2024 by rpki-client on console-fra.rpki-client.org