Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138302e302f32322d3232203d3e20323633303335.roa
File:                     3137372e32302e3138302e302f32322d3232203d3e20323633303335.roa (raw, json)
Hash identifier:          a9NRypSGNFcgMrIxBBlGvMA6KPL2Y1ooyerOkCgLMvE=
Subject key identifier:   FA:2C:46:A2:A4:AD:A3:42:69:B5:03:67:4A:64:BB:64:1B:02:26:F7
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       71A1F950A3AAA1B97D64CDF468913E5CFBA6277A
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138302e302f32322d3232203d3e20323633303335.roa
Signing time:             Wed 11 Sep 2024 17:35:14 +0000
ROA not before:           Wed 11 Sep 2024 17:30:14 +0000
ROA not after:            Wed 10 Sep 2025 17:35:14 +0000
asID:                     263035
IP address blocks:        177.20.180.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a1:f9:50:a3:aa:a1:b9:7d:64:cd:f4:68:91:3e:5c:fb:a6:27:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep 11 17:30:14 2024 GMT
            Not After : Sep 10 17:35:14 2025 GMT
        Subject: CN=FA2C46A2A4ADA34269B503674A64BB641B0226F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:66:48:01:18:b5:32:93:bf:52:ba:df:2e:
                    f8:e4:60:5e:20:b8:77:45:4f:35:2a:ad:79:a1:67:
                    ce:b0:8d:e0:da:7a:46:ce:b2:dd:29:36:a7:d1:a1:
                    28:11:78:a6:f6:b3:66:5a:3b:0a:4e:9d:01:cf:71:
                    a9:2e:e8:80:f7:8d:48:c0:c3:35:32:46:db:26:05:
                    60:2d:f3:70:19:f6:65:5d:90:b2:7d:b2:6b:f5:4f:
                    94:23:bc:62:71:32:e5:30:13:b0:51:04:00:43:5e:
                    35:78:f0:1b:88:fa:b1:40:da:a5:51:c3:ff:92:ca:
                    46:f9:a6:f9:44:a3:f3:d6:f8:5c:1d:73:e8:68:b4:
                    17:6f:db:0c:8e:9b:49:23:1b:e4:2b:5e:ed:73:ac:
                    fd:41:91:02:11:d4:7f:42:6e:2d:31:f7:40:95:dc:
                    b6:8d:54:8a:22:b8:2c:86:93:6f:80:0d:9b:5f:42:
                    ec:cb:44:92:84:a6:38:9c:29:f3:34:b7:87:a9:1b:
                    31:35:5c:42:38:a8:cb:74:a1:a2:a6:96:ac:be:ba:
                    92:b2:a3:9d:02:fe:a4:36:51:35:7a:72:b7:8e:88:
                    d5:99:3f:b1:15:9f:3b:dc:09:5d:36:06:21:39:ae:
                    88:5b:7e:df:57:27:6b:e6:00:da:ef:79:1d:7f:f1:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2C:46:A2:A4:AD:A3:42:69:B5:03:67:4A:64:BB:64:1B:02:26:F7
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138302e302f32322d3232203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:38:18:c2:d2:2e:51:5e:5b:01:2d:e2:bb:11:49:57:f2:7e:
         1c:6a:2d:97:bf:81:79:ce:61:aa:2c:bb:c7:d9:9d:6c:19:40:
         05:08:b1:47:e0:ef:b2:8c:b1:e6:32:f7:36:34:da:96:97:2f:
         59:44:6c:97:7b:52:3f:c8:3d:ae:e1:b8:b5:f6:b9:96:3c:1f:
         e2:36:9f:ce:20:16:76:bb:47:af:cf:64:a8:c7:4d:60:e6:bd:
         97:1c:b0:d7:a3:83:d4:f2:5f:af:4e:b3:f3:41:d2:12:d2:e0:
         20:fe:1a:84:aa:11:91:19:fe:77:24:81:9b:d3:e0:e4:38:92:
         14:84:ab:fd:65:45:8f:d6:85:e9:9f:40:fd:93:e3:97:c1:36:
         9a:c9:17:ef:53:69:2a:fb:1b:40:f1:d3:a7:42:d3:51:01:38:
         26:a3:ec:28:c0:65:d6:e0:fa:b9:63:68:7c:b4:ae:ca:95:5f:
         13:81:87:89:53:cf:83:7f:fc:e9:44:f8:44:b7:56:cf:b2:15:
         28:85:ac:28:a6:15:72:0c:62:f6:9a:bd:0f:2c:9c:2a:39:3a:
         a9:83:d2:6e:c3:08:6a:e2:55:8a:8e:d4:ba:9a:50:87:5b:d7:
         33:90:32:cd:04:05:13:ae:48:e7:d5:8a:7e:fb:41:dc:53:4e:
         06:34:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 00:21:44 2024 by rpki-client on console-fra.rpki-client.org