Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138302e302f32332d3233203d3e20323633303335.roa
File:                     3137372e32302e3138302e302f32332d3233203d3e20323633303335.roa (raw, json)
Hash identifier:          +/6Cc+qqNe5yDYIFwaGZWYRP42OZp2hm8PJXBlZEpQc=
Subject key identifier:   F7:64:5E:05:A9:7D:ED:B8:9E:51:B0:4A:03:08:FD:49:D0:17:94:52
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       61F2834F2DD43C469C317C1412BA8F0D8FF4C102
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138302e302f32332d3233203d3e20323633303335.roa
Signing time:             Thu 12 Sep 2024 16:59:26 +0000
ROA not before:           Thu 12 Sep 2024 16:54:26 +0000
ROA not after:            Thu 11 Sep 2025 16:59:26 +0000
asID:                     263035
IP address blocks:        177.20.180.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f2:83:4f:2d:d4:3c:46:9c:31:7c:14:12:ba:8f:0d:8f:f4:c1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep 12 16:54:26 2024 GMT
            Not After : Sep 11 16:59:26 2025 GMT
        Subject: CN=F7645E05A97DEDB89E51B04A0308FD49D0179452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b9:9c:f1:68:99:dd:9c:3b:c1:ca:cd:62:18:
                    19:13:35:5b:43:02:de:e1:3a:d0:0a:1c:16:b8:20:
                    9d:fe:51:ff:2b:4c:d0:3c:0f:ec:47:d2:68:2d:ce:
                    25:20:0a:43:a5:9a:d0:a6:db:a8:37:63:34:66:1d:
                    f7:3f:8a:16:bb:91:81:44:9a:ab:59:b7:34:9b:d3:
                    ba:e0:dd:b8:d8:ad:b4:5c:f1:50:d8:33:ab:b3:4e:
                    0e:a6:5c:e9:84:62:49:52:80:4d:4c:84:72:01:b4:
                    4d:9c:95:8f:52:09:1c:73:36:c2:9e:8e:0b:bf:74:
                    b8:a8:5a:19:03:1d:62:2e:f7:72:fa:c5:63:ec:4e:
                    fc:61:2d:a9:a5:53:0d:6d:f9:b4:60:a8:47:d7:b8:
                    02:b2:5f:5b:ff:b1:dc:2c:50:3c:ba:96:ec:3f:6c:
                    d3:0b:1f:f9:f5:4d:fb:a4:a3:ad:9c:22:7f:20:8a:
                    54:77:32:d5:c2:0c:10:06:a7:8d:4e:ff:e9:5b:96:
                    46:c4:0b:64:30:e3:16:42:1f:65:44:80:12:ed:34:
                    96:e5:da:0a:89:8c:6c:62:5d:c4:2f:33:87:dc:97:
                    87:41:15:0d:75:82:d2:a6:55:66:7d:8c:d0:f1:f9:
                    3f:74:ae:c6:75:8f:43:f6:7d:86:b4:8b:25:57:4c:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:5E:05:A9:7D:ED:B8:9E:51:B0:4A:03:08:FD:49:D0:17:94:52
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138302e302f32332d3233203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:7b:79:c9:b7:37:64:6b:ae:2a:b5:98:b1:8a:62:e4:da:
         b1:3d:f3:dd:15:cf:68:6e:b4:7c:57:dc:e3:73:9b:dc:cc:ba:
         0d:55:32:09:8d:e2:80:b3:d0:17:5a:80:63:4a:13:64:39:09:
         7d:58:3b:c1:2f:81:88:34:de:3a:21:7d:6e:e4:6e:e2:9f:42:
         7d:e8:28:b1:01:19:00:07:9a:80:35:75:f8:85:cf:33:2c:23:
         62:76:e9:6f:3f:c8:d7:78:79:69:a6:75:97:6d:df:42:1f:c2:
         99:ca:e8:3d:e2:0e:27:da:35:6e:43:bc:24:52:ac:9b:64:1c:
         24:62:b5:05:df:10:fc:ad:a2:32:df:8f:a0:5d:42:ad:55:d9:
         81:b0:ce:3c:1f:64:e1:d7:e6:11:99:39:33:44:07:ba:af:4c:
         f6:eb:27:52:0b:f7:4b:30:12:bf:1d:45:db:92:94:a4:d1:21:
         8b:e9:2b:c2:a1:9d:ec:4f:16:23:09:cf:82:b0:48:31:e1:4e:
         72:e0:3a:5c:69:3f:d6:74:cb:04:17:76:ec:82:3c:7f:68:fb:
         6e:f0:49:31:eb:3e:28:24:08:fd:7e:ac:8a:a1:51:0e:f5:e3:
         e1:fe:84:bc:c1:ec:ce:ca:12:53:96:47:40:37:32:76:d8:fe:
         b5:f8:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 00:21:44 2024 by rpki-client on console-fra.rpki-client.org