Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32342e302f32322d3234203d3e20323731303532.roa
File:                     3137372e33362e32342e302f32322d3234203d3e20323731303532.roa (raw, json)
Hash identifier:          TvcVgzB98hbn0ipOnp2Bl/MFlYBZh7yT3bSnV86Nro0=
Subject key identifier:   C5:2B:48:D8:13:57:AA:D5:C2:C1:31:00:4D:BB:82:5A:A0:F6:E7:A0
Certificate issuer:       /CN=B04A452EB38A02D7F3654B584B9EB5D982A399BE
Certificate serial:       48A3C458D8953A3C2C3D4F89B2338F43726F461C
Authority key identifier: B0:4A:45:2E:B3:8A:02:D7:F3:65:4B:58:4B:9E:B5:D9:82:A3:99:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04A452EB38A02D7F3654B584B9EB5D982A399BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32342e302f32322d3234203d3e20323731303532.roa
Signing time:             Tue 02 Jul 2024 16:40:42 +0000
ROA not before:           Tue 02 Jul 2024 16:35:42 +0000
ROA not after:            Wed 02 Jul 2025 16:40:42 +0000
asID:                     271052
IP address blocks:        177.36.24.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a3:c4:58:d8:95:3a:3c:2c:3d:4f:89:b2:33:8f:43:72:6f:46:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04A452EB38A02D7F3654B584B9EB5D982A399BE
        Validity
            Not Before: Jul  2 16:35:42 2024 GMT
            Not After : Jul  2 16:40:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:8e:fc:26:ea:bb:35:3b:a8:92:dc:d7:11:
                    31:2b:ff:b0:af:55:e9:9c:2a:67:58:08:e8:81:0f:
                    18:d9:4b:c9:a2:f5:c8:76:fa:11:d6:40:0f:a8:63:
                    9d:23:71:2c:9e:5a:51:e0:ee:af:9e:39:e9:d3:aa:
                    aa:86:96:02:5d:22:34:c2:d5:f6:31:fc:8d:c8:1c:
                    ce:e8:76:8d:db:c3:ab:cf:17:67:c5:33:b9:de:2d:
                    55:d2:93:ed:0e:b6:0f:3f:5e:73:c4:bb:f6:02:75:
                    2f:cd:bf:5e:cb:74:d9:c0:eb:0a:d0:db:7c:7b:a5:
                    c1:7a:03:72:5c:6f:43:c5:4f:93:20:a3:11:eb:77:
                    90:44:44:3d:5b:64:7c:a6:e1:57:a9:3b:86:eb:13:
                    6f:49:9b:c2:47:f7:97:5a:33:a7:d9:00:cf:9e:0c:
                    f9:0f:b4:f7:6b:e0:ed:7c:0d:43:a7:3f:ba:c0:b6:
                    9a:d1:ba:2f:bd:aa:4b:f8:b2:02:3b:6a:c3:e6:de:
                    93:44:7a:02:90:f0:4b:ac:9d:bc:38:ae:1f:ea:d4:
                    b0:50:d8:2c:d1:52:d9:d4:d9:64:4a:0d:47:4e:6b:
                    58:10:a3:83:97:39:0e:d8:d8:9b:25:bf:fd:33:cf:
                    0e:73:8e:1a:fc:3a:40:46:7a:e5:71:88:09:83:60:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:48:D8:13:57:AA:D5:C2:C1:31:00:4D:BB:82:5A:A0:F6:E7:A0
            X509v3 Authority Key Identifier:
                keyid:B0:4A:45:2E:B3:8A:02:D7:F3:65:4B:58:4B:9E:B5:D9:82:A3:99:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/B04A452EB38A02D7F3654B584B9EB5D982A399BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04A452EB38A02D7F3654B584B9EB5D982A399BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32342e302f32322d3234203d3e20323731303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:c3:ca:f4:26:d5:08:51:51:b0:1f:3e:40:94:19:17:06:
         68:9a:7d:24:55:f1:b3:8c:6b:c8:27:77:ad:2e:4a:06:fd:b4:
         87:46:c5:7e:55:3a:87:2e:6a:bd:b9:ad:0b:63:0e:cd:91:fe:
         fa:fe:65:d9:6d:fe:c8:cf:2b:36:bf:65:96:81:7f:ed:b5:05:
         39:6d:ee:e1:7e:d7:92:ba:13:90:61:c5:87:ad:d2:e2:0d:73:
         dd:9d:62:84:98:44:f1:9c:76:3c:53:a8:93:c4:66:e5:99:fd:
         c9:77:f7:83:e0:3d:fa:f5:0c:e9:27:e2:21:57:20:30:3e:e2:
         f6:94:3c:21:37:c2:cc:8e:23:12:24:22:66:af:38:0f:c3:4e:
         05:80:69:63:65:5d:8e:0f:e9:3c:23:1f:5f:93:27:92:bc:a6:
         47:56:e2:92:f3:8a:99:10:19:80:f5:78:4e:84:b3:76:03:d0:
         45:62:25:fa:b4:17:1c:b4:2e:c5:01:1b:29:c9:a7:f6:b1:45:
         49:9f:24:69:8d:78:f0:06:29:b4:a8:50:0b:27:3a:21:0c:2a:
         68:52:35:50:62:c8:c3:f6:69:54:28:4d:90:e5:88:91:7d:d0:
         34:cf:bf:fc:f7:a2:e9:c1:c8:ae:50:36:ca:23:d4:91:c3:04:
         ad:31:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:52 2024 by rpki-client on console-fra.rpki-client.org