Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138312e302f32342d3234203d3e20323633303335.roa
File:                     3137372e32302e3138312e302f32342d3234203d3e20323633303335.roa (raw, json)
Hash identifier:          S8QeZBOuJOXYFdJFqjlku4mQ88ZD5VJhgo8rv5VszII=
Subject key identifier:   AC:A9:B5:D8:93:C4:B7:BB:78:81:20:AA:F5:3B:C2:4F:60:CB:53:AD
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       0F8E98D4832C9CA081D101C47AC991D7194E1ABF
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138312e302f32342d3234203d3e20323633303335.roa
Signing time:             Thu 05 Sep 2024 17:39:48 +0000
ROA not before:           Thu 05 Sep 2024 17:34:48 +0000
ROA not after:            Thu 04 Sep 2025 17:39:48 +0000
asID:                     263035
IP address blocks:        177.20.181.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8e:98:d4:83:2c:9c:a0:81:d1:01:c4:7a:c9:91:d7:19:4e:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep  5 17:34:48 2024 GMT
            Not After : Sep  4 17:39:48 2025 GMT
        Subject: CN=ACA9B5D893C4B7BB788120AAF53BC24F60CB53AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:84:e1:33:30:8a:19:5a:03:4b:f5:49:e9:
                    f2:39:71:22:53:32:ac:35:60:ff:49:06:ea:c0:90:
                    73:2b:6e:c1:71:ea:78:74:1d:46:02:e8:c5:76:64:
                    79:69:16:f4:29:17:b7:0a:69:57:af:c5:5e:8d:4a:
                    75:4b:8a:a3:77:3f:bf:9a:72:79:3b:c8:df:93:0a:
                    8c:f4:aa:8e:d6:2d:47:95:75:8f:3c:6e:2d:67:83:
                    79:07:33:36:11:84:10:96:5f:26:e2:5b:50:2b:f0:
                    e2:9a:41:d4:7c:92:41:04:69:f4:ba:3c:5c:f6:0f:
                    c9:59:c9:f2:86:8a:96:0a:9e:41:ba:f1:e8:9d:9b:
                    cf:21:39:73:b5:20:69:f8:98:08:a6:e9:b3:fa:a5:
                    16:53:5e:68:ec:59:95:31:7f:96:c7:9a:14:b0:9a:
                    f6:4c:3f:0a:4c:d0:24:72:a9:3c:1a:ab:31:73:cc:
                    91:99:aa:54:a2:c3:08:09:6b:39:01:d1:d9:6a:eb:
                    f0:65:32:a6:8a:8a:53:74:1f:98:a9:eb:a8:04:82:
                    12:b8:cd:a2:35:cb:9c:4c:e7:b3:d3:2a:75:34:81:
                    d6:98:e0:8d:8e:e1:45:2b:9a:55:cb:fc:41:f9:82:
                    3e:f2:74:f4:79:09:9d:b6:c6:26:c9:d1:a4:66:5e:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:B5:D8:93:C4:B7:BB:78:81:20:AA:F5:3B:C2:4F:60:CB:53:AD
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138312e302f32342d3234203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:98:0f:28:0e:c9:a2:ca:68:51:e9:75:22:c1:47:6f:59:29:
         2f:5d:14:a4:85:d3:09:9a:2c:59:78:2a:00:ca:51:7e:cf:88:
         94:2a:99:45:e2:53:c9:47:b1:e3:be:19:44:f2:0c:82:eb:6f:
         d7:d5:38:b7:19:df:2b:66:51:c2:8b:95:cf:5c:5a:af:14:55:
         24:4e:31:43:db:e9:73:96:7a:76:47:0b:c3:2c:19:1c:21:dd:
         d2:f5:12:dd:a6:74:bf:30:f1:0d:36:9c:d6:de:e3:e4:f7:1b:
         8a:c3:73:95:db:a1:81:2f:f1:65:4b:45:ed:c3:7b:74:43:f2:
         da:08:77:60:81:8e:bc:c4:74:83:e7:70:ec:87:b4:87:89:1f:
         f4:c1:d6:6b:0f:a8:24:6b:40:40:ea:46:f5:d1:f9:5b:ab:28:
         b0:37:5b:d7:19:ec:b1:f5:0d:86:3f:17:2f:c7:da:71:c4:68:
         45:10:e0:a0:a2:44:c7:3f:5d:c2:fa:80:81:d6:d5:c5:e3:34:
         2f:68:03:5e:4f:50:a5:b4:a9:1d:78:0c:bc:84:b9:0f:4f:e6:
         ed:bf:80:aa:d6:d3:25:26:b7:16:3b:d7:08:5e:77:66:43:6d:
         42:36:f6:75:0f:09:40:d8:a6:8e:66:f1:a8:71:59:51:fe:9a:
         48:a0:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 02:46:02 2024 by rpki-client on console-ams.rpki-client.org