Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa
File:                     3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa (raw, json)
Hash identifier:          23OqvlcSzz598ahXIawzUZq0diUqSUHtAjhTsqSY3PE=
Subject key identifier:   7D:FD:9B:7C:55:A3:D7:00:CE:CE:F6:EA:43:58:77:BA:14:BB:6B:02
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       6258C52DAAA877083397E542FA61CBD8054FF6D8
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa
Signing time:             Thu 05 Sep 2024 17:39:51 +0000
ROA not before:           Thu 05 Sep 2024 17:34:51 +0000
ROA not after:            Thu 04 Sep 2025 17:39:51 +0000
asID:                     263035
IP address blocks:        177.20.179.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:58:c5:2d:aa:a8:77:08:33:97:e5:42:fa:61:cb:d8:05:4f:f6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep  5 17:34:51 2024 GMT
            Not After : Sep  4 17:39:51 2025 GMT
        Subject: CN=7DFD9B7C55A3D700CECEF6EA435877BA14BB6B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:ef:2d:49:ce:d7:8b:47:35:eb:82:d2:71:
                    23:c5:90:3e:cb:bb:d6:2e:0e:01:b4:c0:a3:b8:cc:
                    e6:56:db:0f:16:53:bf:68:01:86:0f:61:f2:13:46:
                    cd:88:72:bd:87:97:5b:07:37:98:b8:9e:ee:56:41:
                    63:a4:fb:ea:4e:70:40:ee:60:28:9d:c9:b4:bc:a3:
                    5b:1e:4a:b9:7c:70:81:3b:04:1b:d4:ec:7d:cc:2c:
                    37:21:50:17:df:c5:57:9f:3a:50:fb:d4:37:8b:74:
                    95:52:40:48:95:8a:60:ae:b9:0a:ff:be:63:38:dc:
                    56:65:c6:b4:8b:56:7e:8a:59:56:e6:e9:90:11:ec:
                    a5:b3:3c:eb:b5:84:45:7a:3a:2f:63:3a:3c:5a:78:
                    a7:6c:45:93:4b:08:42:f0:5c:87:23:e8:24:a3:b5:
                    0c:ae:e6:5b:f0:30:72:d8:b8:83:e0:0d:38:40:e2:
                    79:db:66:84:8c:19:63:5a:a1:bd:19:f9:55:11:f4:
                    da:53:6f:0a:9e:d6:52:8b:ae:f8:97:3b:35:50:29:
                    c3:c9:69:e6:ea:65:87:3e:9b:d8:be:13:76:e8:2e:
                    6a:af:f3:48:c4:6d:ac:ee:bd:8d:49:41:be:98:d3:
                    32:70:66:1e:b0:79:ed:e1:73:7f:bd:fc:28:1d:fb:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FD:9B:7C:55:A3:D7:00:CE:CE:F6:EA:43:58:77:BA:14:BB:6B:02
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:9f:d4:15:f8:c7:db:52:71:cf:82:5d:51:69:dd:9b:29:
         65:45:3d:87:2b:d0:85:fc:02:b1:a4:1f:eb:fc:2d:f9:63:e4:
         87:0a:1e:34:22:96:69:29:12:e0:94:60:15:87:bc:e9:7d:2f:
         16:a9:d2:60:54:90:7c:82:a1:38:87:84:26:af:47:e4:c6:e4:
         93:55:d7:61:8f:7a:0c:0f:9e:f9:9a:07:a9:b7:b5:70:8a:b7:
         0b:16:de:a2:42:34:c3:5b:d6:4f:dd:83:4d:69:e6:ec:93:81:
         ae:0e:b4:8f:54:0f:f4:38:9d:9e:5c:9d:e5:c5:ce:14:34:64:
         80:1c:6a:69:3e:2a:df:6b:c5:43:7d:c3:23:d2:26:47:9d:be:
         49:88:78:64:55:b4:d4:7a:25:42:6a:a1:97:bb:80:c1:53:c8:
         42:3f:f8:ed:40:e4:2e:a1:5b:fb:93:ca:86:5e:56:d6:06:38:
         fd:a4:b7:b1:ba:72:8d:b0:96:ec:4c:a4:83:57:67:9c:9d:e8:
         1a:43:84:74:04:5b:df:f0:62:43:a5:7a:37:b4:da:f7:5b:58:
         85:64:65:3e:d9:26:b5:ba:ba:58:3a:55:26:98:d1:e2:b9:aa:
         fc:8d:63:53:16:6f:e2:5e:d3:1b:83:4a:81:9f:46:8f:86:53:
         93:d2:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 02:46:02 2024 by rpki-client on console-ams.rpki-client.org