Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138322e302f32332d3233203d3e20323633303335.roa
File:                     3137372e32302e3138322e302f32332d3233203d3e20323633303335.roa (raw, json)
Hash identifier:          uwMtBQlOaDaDTSecTSMSJIRijcnn0AJGa5VUEakjjFc=
Subject key identifier:   D2:C2:FA:A6:36:8A:A4:D6:78:4E:4D:51:05:FD:6E:17:48:52:21:BD
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       7D09002B11CE3F0DF664130A09C58A4510D6D7C8
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138322e302f32332d3233203d3e20323633303335.roa
Signing time:             Thu 12 Sep 2024 16:59:43 +0000
ROA not before:           Thu 12 Sep 2024 16:54:43 +0000
ROA not after:            Thu 11 Sep 2025 16:59:43 +0000
asID:                     263035
IP address blocks:        177.20.182.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:09:00:2b:11:ce:3f:0d:f6:64:13:0a:09:c5:8a:45:10:d6:d7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep 12 16:54:43 2024 GMT
            Not After : Sep 11 16:59:43 2025 GMT
        Subject: CN=D2C2FAA6368AA4D6784E4D5105FD6E17485221BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cb:4d:e9:7b:eb:20:38:50:bb:2d:28:f5:5f:
                    10:8e:22:14:7b:c5:cb:53:1d:15:8d:23:0e:53:18:
                    9d:e5:01:8c:4b:07:e8:13:c0:39:1d:23:83:b8:45:
                    c4:79:46:e5:19:6a:fb:b2:25:b4:d7:3b:82:b3:54:
                    91:5d:67:3a:15:2c:67:cb:e5:94:0f:a7:a7:a8:8a:
                    9b:91:db:98:de:b6:18:1c:2d:6f:b9:e3:63:8d:32:
                    1b:7c:32:d6:f9:5b:36:fb:fa:47:d2:5c:63:ee:68:
                    df:fd:09:9c:dc:5a:dd:a5:43:f0:a1:16:3b:6e:ff:
                    61:d3:cb:ea:bc:9f:e6:59:3d:c1:df:ab:8d:0e:61:
                    c9:d8:a4:e9:94:0d:b8:ba:27:55:dc:e3:61:04:27:
                    90:13:0c:e4:e7:5d:69:ae:f0:03:c8:74:0b:69:d4:
                    65:5f:72:47:40:a3:be:2c:c8:99:27:5b:fe:d9:74:
                    e4:9e:af:dc:8e:b9:86:47:24:4c:75:6a:15:7a:66:
                    fa:b7:73:30:13:5b:00:4f:26:89:46:09:6b:db:a3:
                    a9:03:d1:2a:05:bf:32:f4:8b:7e:f4:a4:de:65:e7:
                    cd:e1:60:aa:ac:b4:43:6c:42:b5:f7:20:87:96:11:
                    6b:e8:91:64:e4:4a:18:13:10:8e:09:8b:cc:93:16:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C2:FA:A6:36:8A:A4:D6:78:4E:4D:51:05:FD:6E:17:48:52:21:BD
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138322e302f32332d3233203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:95:9f:aa:f0:d5:d1:fd:9d:e1:df:45:59:a4:09:59:20:ac:
         5d:e4:12:bb:5e:d5:b2:cb:5f:e1:1b:57:3e:c4:fb:4a:aa:dd:
         92:89:79:17:64:6c:32:88:86:5e:88:ee:9c:10:16:1f:41:8d:
         b9:51:b1:77:37:de:87:68:6e:b0:2f:5f:b0:cc:ba:46:96:4a:
         53:d0:63:41:28:fe:0c:6b:19:3f:2a:78:71:f5:6a:3d:90:f7:
         a6:ca:93:27:ab:9d:cc:64:cf:8b:1a:0c:81:c0:c5:60:7c:15:
         b8:1c:c1:00:a2:a6:77:d5:01:0f:73:a2:29:08:37:eb:c6:ea:
         99:d1:8f:79:78:19:18:9d:ce:22:0c:ae:f4:fc:6d:fc:5c:7e:
         72:de:fa:a3:80:3e:43:e4:20:3f:e0:67:4a:56:8c:3c:f1:76:
         11:2d:46:6c:09:90:e1:1b:8b:ec:59:e0:40:ce:c2:93:39:13:
         fc:03:8e:7a:1d:5e:6f:1f:1e:a5:38:8e:4c:d5:4a:e5:6f:c6:
         54:2f:35:a8:92:b7:5e:d4:c1:fd:fc:6a:ab:9a:fc:36:b2:7a:
         d8:af:c5:e2:37:1e:4d:85:df:8e:28:57:0c:06:f8:81:3c:99:
         e9:a0:6f:6e:9b:0f:6a:a3:65:33:9f:7a:01:9c:da:0a:36:2f:
         82:0a:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 00:21:44 2024 by rpki-client on console-fra.rpki-client.org