Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3134382e302f32332d3233203d3e20323632333736.roa
File:                     3137372e37342e3134382e302f32332d3233203d3e20323632333736.roa (raw, json)
Hash identifier:          tQcTch9fIUaeuWeNC2lpE19ZdR0woyNdDSdvYqAwRJQ=
Subject key identifier:   43:B6:AF:58:91:A6:FD:A8:28:54:F8:0C:1D:5D:80:2A:F4:AB:F1:7C
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       53F22B88843605F1BE52A867812D1505B4A941B7
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3134382e302f32332d3233203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:33:23 +0000
ROA not before:           Tue 04 Jun 2024 17:28:23 +0000
ROA not after:            Tue 03 Jun 2025 17:33:23 +0000
asID:                     262376
IP address blocks:        177.74.148.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f2:2b:88:84:36:05:f1:be:52:a8:67:81:2d:15:05:b4:a9:41:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:28:23 2024 GMT
            Not After : Jun  3 17:33:23 2025 GMT
        Subject: CN=43B6AF5891A6FDA82854F80C1D5D802AF4ABF17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:d5:34:20:2f:35:04:af:14:68:30:ea:f8:
                    e0:65:21:d4:d2:42:41:f3:13:93:ad:a7:ad:9b:12:
                    0c:89:df:07:5e:b0:a4:8c:88:14:d1:60:b9:de:b8:
                    e6:3d:98:66:c2:51:17:6b:c8:77:4b:fa:50:37:1c:
                    f8:14:bd:fd:25:68:a1:d6:2d:33:d2:67:93:9d:3b:
                    c4:e5:e2:6c:27:ad:2e:ab:2d:57:a1:0c:8e:eb:85:
                    ed:39:aa:ec:c0:26:28:83:8b:40:ca:5d:b7:cd:92:
                    24:1e:d0:1f:c5:49:d7:81:f6:28:19:a4:6d:0e:44:
                    b2:81:39:dd:9a:f4:3d:a1:ab:96:35:09:5e:d3:3f:
                    6d:ce:b2:ed:a6:a6:2e:a7:9d:b5:49:bf:f3:2a:0e:
                    c3:49:10:ec:2e:43:cf:66:70:8e:4a:96:8d:08:2d:
                    ce:79:8a:eb:74:33:c1:8a:b2:00:da:fa:e1:31:bb:
                    ee:89:08:3f:a7:95:2f:fe:6a:30:a4:27:f3:f6:d6:
                    f2:5c:28:7e:37:89:50:79:d2:98:6b:14:f0:31:b9:
                    93:a8:e1:d5:43:12:4f:ad:7b:54:19:5a:91:3c:ef:
                    f5:c2:35:19:e6:c2:87:0b:cb:99:a7:13:99:d2:48:
                    8b:b4:8b:0e:22:dd:86:5b:11:a9:00:b5:af:00:a9:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B6:AF:58:91:A6:FD:A8:28:54:F8:0C:1D:5D:80:2A:F4:AB:F1:7C
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e37342e3134382e302f32332d3233203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:84:2b:24:d7:43:13:3a:be:cb:d1:d1:55:b0:8b:b2:9d:
         9d:c0:2d:da:e9:36:ea:91:93:14:0c:88:34:70:ab:67:96:8c:
         03:bc:1e:0a:c4:61:4f:12:b0:aa:10:6d:9c:d5:b7:21:e3:37:
         24:d9:26:31:9a:75:5e:3f:b9:eb:b4:08:cc:27:ff:3e:72:37:
         a0:6d:5e:0f:52:93:80:31:7e:05:ca:87:49:74:70:e1:25:87:
         b8:5c:b4:6e:38:ed:8e:c6:87:f3:5b:e3:b1:0f:5c:8a:f6:80:
         a6:7c:c5:5c:e5:08:ed:ca:ac:d4:5a:8c:16:7b:5e:86:7a:4d:
         6c:5e:90:60:f4:fe:f6:c6:af:ec:92:63:45:a0:e1:aa:a0:34:
         5f:9d:47:6f:b9:ff:61:3e:67:c0:f3:ae:e9:95:bf:5e:4b:72:
         7f:ab:dd:c9:2e:ef:1d:85:7e:51:29:35:08:55:99:4a:45:14:
         be:cd:8a:a2:f1:2c:b1:97:a0:6a:b2:6b:1f:e8:bf:5c:86:ea:
         ca:f7:8a:0e:16:af:91:bf:56:e5:40:0a:3b:51:83:17:ef:b3:
         44:bc:4e:e3:63:ba:a0:d4:1b:d0:65:24:c1:bb:69:99:bf:7a:
         d4:48:b4:e8:7a:db:aa:47:d3:fd:50:73:17:17:44:8e:6e:7d:
         29:c0:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:19:05 2024 by rpki-client on console-fra.rpki-client.org