Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3137312e302f32342d3234203d3e20323632333736.roa
File:                     3137372e3132382e3137312e302f32342d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          pWwK6l7nwzGtoYEtSlZ4LKhBgjmhbQ6dM+1IhYmeVIE=
Subject key identifier:   9C:A5:E5:DC:36:71:EE:24:48:54:00:FF:9F:6E:CB:EC:A9:5E:D6:FB
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       55D1F2DCDD888EE87A3DF7694FFBFD591AA5ADC6
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3137312e302f32342d3234203d3e20323632333736.roa
Signing time:             Tue 02 Jul 2024 14:03:52 +0000
ROA not before:           Tue 02 Jul 2024 13:58:52 +0000
ROA not after:            Tue 01 Jul 2025 14:03:52 +0000
asID:                     262376
IP address blocks:        177.128.171.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d1:f2:dc:dd:88:8e:e8:7a:3d:f7:69:4f:fb:fd:59:1a:a5:ad:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jul  2 13:58:52 2024 GMT
            Not After : Jul  1 14:03:52 2025 GMT
        Subject: CN=9CA5E5DC3671EE24485400FF9F6ECBECA95ED6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:07:1c:a0:00:4d:12:80:a8:15:0c:64:57:
                    d9:9e:7f:48:74:ef:e2:07:72:43:79:69:6b:55:21:
                    1e:79:b4:23:0b:c1:a1:b6:28:2e:b9:7f:1d:81:00:
                    d5:cf:2f:f5:1c:43:d9:77:f4:a5:36:cb:ab:cf:46:
                    06:5d:f8:4d:68:81:72:00:1f:3d:f4:fb:66:52:d3:
                    0d:a6:10:59:b5:4f:0c:bd:0f:c8:ca:cc:6e:68:6c:
                    bb:68:1c:d5:cf:a0:c8:36:96:06:74:fc:38:79:c1:
                    e5:8a:02:64:f5:43:f8:b1:4b:8a:f0:1a:ae:6a:61:
                    5c:56:9f:68:63:c2:a8:e2:00:7c:7d:aa:d6:62:16:
                    7a:31:72:5d:90:ab:f8:73:12:4a:00:1d:0a:f2:49:
                    d2:a4:ad:b2:35:ca:62:a6:8b:60:b2:0f:35:f7:de:
                    d6:90:fd:b3:2c:3f:cd:1f:e6:c7:e4:2b:72:43:86:
                    be:6e:65:70:e9:8c:20:d0:1c:8b:a7:62:50:e1:dc:
                    b4:68:a7:e3:cc:8b:26:7c:05:9e:8d:e7:59:1a:0f:
                    b4:f2:ce:61:fd:8b:c0:4b:52:77:46:ec:8d:da:aa:
                    86:55:c6:f3:96:ab:c0:b1:e7:1b:73:16:08:e8:96:
                    27:8a:a8:76:a8:e3:64:00:ed:31:08:9d:6c:6d:df:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:E5:DC:36:71:EE:24:48:54:00:FF:9F:6E:CB:EC:A9:5E:D6:FB
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3137312e302f32342d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:3c:c8:42:2b:d2:cb:40:98:2a:a4:1c:6b:99:22:f4:c8:
         e8:5a:51:7f:fe:91:77:79:b8:e3:c0:59:ef:d7:0e:b3:c4:d9:
         75:a0:2e:e2:8a:c7:c1:78:72:5a:05:0c:7e:a4:56:64:5b:dd:
         b4:80:31:94:48:58:54:10:68:e3:d0:e1:0c:72:10:43:27:5b:
         e9:74:49:bb:a4:81:8e:da:47:fe:1c:fe:8b:d4:27:fc:6d:1c:
         75:35:e2:2d:71:ad:69:a1:bd:6d:3a:04:cf:79:6b:a1:27:8f:
         12:98:4f:65:1b:28:7c:8c:17:66:67:d7:c1:a6:b7:93:52:dd:
         48:f6:d6:fd:39:18:66:7c:df:74:1e:66:a9:3a:03:eb:96:63:
         02:55:2d:64:75:21:97:8e:ab:a7:00:33:41:0c:1f:3d:b6:c6:
         eb:a0:cb:fe:1a:43:12:de:23:95:c1:51:7d:5e:a5:61:7c:f9:
         c2:4c:51:bd:d5:e3:0f:b4:15:c6:e1:34:98:6e:b2:e3:90:19:
         37:9e:5f:e3:d7:03:a7:e1:2e:d6:75:74:2c:ea:c8:32:eb:10:
         55:cf:b1:bc:c8:77:9a:b0:5e:bf:ca:58:97:07:8b:14:dd:01:
         f1:51:fc:64:bf:a4:32:01:bc:90:ce:2c:d8:fd:1b:c4:8b:8d:
         c0:00:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:39:20 2024 by rpki-client on console-ams.rpki-client.org