Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa
File:                     3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          MfUve8EDrZyME/8rB/ZA4LClAZuO9UcPXOTJsEMldGE=
Subject key identifier:   E2:B4:82:8A:43:C5:91:63:51:91:50:4F:D7:2D:54:1E:4C:62:65:A3
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       7672A511355ECEFF20DD27C920AF95E17C6DF3D2
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     262420
IP address blocks:        177.84.176.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:72:a5:11:35:5e:ce:ff:20:dd:27:c9:20:af:95:e1:7c:6d:f3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=E2B4828A43C591635191504FD72D541E4C6265A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:08:ee:e3:3e:a4:e0:13:3e:54:16:1c:40:
                    59:2e:4e:28:97:9e:8a:3a:96:c7:5e:bc:2c:a0:78:
                    b5:18:4f:78:79:f8:7b:92:52:a1:3b:32:6d:fc:64:
                    87:17:0a:a3:91:5a:d7:fd:c4:1b:4c:99:6b:f8:4e:
                    2d:73:3b:8d:26:a2:ba:eb:5a:ff:28:fd:b7:f4:2d:
                    88:f6:ba:a9:90:a4:a8:8d:9a:84:ce:7e:37:10:42:
                    93:04:cc:de:f8:bf:6d:d8:f4:5b:fd:51:75:dd:a2:
                    6b:94:96:46:0e:d8:f8:62:5c:6b:58:14:3e:f9:77:
                    9b:58:a8:62:d0:1d:a9:ae:64:fe:2c:92:bd:c5:1b:
                    66:6f:e5:23:8c:42:c6:67:39:c9:74:e7:6d:c6:b4:
                    e1:46:72:c0:f8:c2:82:eb:b8:56:94:4d:d1:b7:7c:
                    05:e0:0e:96:a0:95:47:9f:72:8c:13:41:91:68:61:
                    29:22:cb:01:bc:b2:5c:5b:0a:a3:e9:bc:44:86:53:
                    8c:c4:1d:68:24:54:05:59:f2:a0:cd:c3:de:90:4b:
                    18:19:e0:ff:5d:72:dd:76:5f:13:10:24:31:00:77:
                    c1:d0:bb:72:84:dc:c2:51:61:73:67:8f:2c:94:98:
                    9c:50:46:27:99:c6:4a:3f:c0:3b:48:98:95:64:df:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B4:82:8A:43:C5:91:63:51:91:50:4F:D7:2D:54:1E:4C:62:65:A3
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:f1:fc:86:67:c6:82:7c:75:fe:5f:57:3e:2a:07:e7:e8:63:
         16:89:c8:e2:7b:dc:f8:a4:5d:1d:71:07:51:93:56:24:33:ec:
         19:0d:c4:bf:8e:35:f2:dc:89:2c:b1:fb:76:7b:89:79:55:d7:
         05:ec:77:58:35:c7:eb:8d:38:a0:ef:a0:37:08:23:ef:8e:4f:
         21:07:46:9c:98:33:3f:57:26:b1:45:61:f1:cd:5b:e4:2d:79:
         62:25:86:f1:b9:99:e5:96:77:7e:93:09:4d:ec:94:27:31:ed:
         a0:1e:c0:63:b7:76:c1:e0:5b:e5:b5:ae:17:01:73:e8:e8:5b:
         28:be:75:f7:6b:ff:8e:cd:fd:4e:70:7d:b7:27:dd:aa:36:c3:
         65:74:3c:36:73:c6:e8:52:cc:2f:17:fe:56:c8:65:33:e1:c7:
         93:fb:91:7a:a4:cc:09:e8:59:c9:be:51:3f:09:f4:55:bd:23:
         86:21:ea:c8:0f:d2:01:b1:b2:0e:46:a2:29:c6:35:c5:d2:23:
         08:82:7a:73:30:65:86:3c:09:3a:dc:b4:ac:cc:c9:02:ae:41:
         7c:a2:f9:7e:66:07:1a:5c:5f:30:24:b5:4b:ca:92:3a:c2:64:
         74:ce:63:80:ef:a3:2c:7c:88:2f:98:9f:e7:76:4c:e6:6b:16:
         65:11:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org