Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/1/3137372e33362e32362e302f32342d3234203d3e20323732373133.roa
File:                     3137372e33362e32362e302f32342d3234203d3e20323732373133.roa (raw, json)
Hash identifier:          fMBDEu5vGav/5pC8icJVom+2WYxPhx5mSle5f/Lwn6I=
Subject key identifier:   2A:22:98:E9:CA:A0:38:86:E0:10:17:11:9A:43:F7:AE:D5:CC:87:16
Certificate issuer:       /CN=E5DCB6B4A224C75F482DB1F5216AE99A28159D9E
Certificate serial:       01C0D068F7CEC522F2A243805466B43492D5C755
Authority key identifier: E5:DC:B6:B4:A2:24:C7:5F:48:2D:B1:F5:21:6A:E9:9A:28:15:9D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DCB6B4A224C75F482DB1F5216AE99A28159D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/1/3137372e33362e32362e302f32342d3234203d3e20323732373133.roa
Signing time:             Mon 07 Oct 2024 17:02:56 +0000
ROA not before:           Mon 07 Oct 2024 16:57:56 +0000
ROA not after:            Mon 06 Oct 2025 17:02:56 +0000
asID:                     272713
IP address blocks:        177.36.26.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c0:d0:68:f7:ce:c5:22:f2:a2:43:80:54:66:b4:34:92:d5:c7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DCB6B4A224C75F482DB1F5216AE99A28159D9E
        Validity
            Not Before: Oct  7 16:57:56 2024 GMT
            Not After : Oct  6 17:02:56 2025 GMT
        Subject: CN=2A2298E9CAA03886E01017119A43F7AED5CC8716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:27:0b:1f:c2:d7:56:78:96:24:53:f5:5a:18:
                    59:a0:0a:87:d1:ba:28:2c:05:8a:71:06:91:7d:77:
                    06:ce:a5:f6:1a:2e:98:14:1b:7e:3c:06:bf:a1:3e:
                    7b:11:da:d9:3b:e7:ce:a7:05:91:67:e1:c2:ae:59:
                    6f:ca:dc:87:71:c5:bf:98:7e:10:96:64:59:6e:55:
                    9b:e9:ad:d4:72:bb:88:4a:6e:c4:09:7f:65:34:49:
                    96:fa:23:93:b0:4e:41:0d:1a:e8:fd:e0:ff:bc:20:
                    b9:4e:2d:cc:d1:3c:be:b4:f3:9e:86:fd:1e:bf:4b:
                    0b:61:51:02:c6:6d:db:35:11:ea:23:fc:a7:85:6c:
                    e4:a1:03:6e:44:8d:94:54:87:bd:9f:3c:28:94:09:
                    9f:be:79:c5:24:35:9d:7c:88:c4:ba:50:62:06:8a:
                    96:12:01:e3:cd:83:0c:40:ab:64:cf:a5:a1:28:47:
                    59:17:02:d6:fc:36:69:96:f3:54:d7:89:e6:fe:3c:
                    ac:e1:fb:b1:5b:77:06:8b:8a:5e:e5:77:be:0d:71:
                    2d:88:18:20:96:9a:fa:65:8d:c8:be:24:fd:7c:19:
                    4b:9e:18:2f:e5:c3:81:24:be:68:56:c8:1d:26:03:
                    33:1d:7a:23:30:39:5f:d2:3b:af:3b:9a:b2:9d:ec:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:98:E9:CA:A0:38:86:E0:10:17:11:9A:43:F7:AE:D5:CC:87:16
            X509v3 Authority Key Identifier:
                keyid:E5:DC:B6:B4:A2:24:C7:5F:48:2D:B1:F5:21:6A:E9:9A:28:15:9D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/1/E5DCB6B4A224C75F482DB1F5216AE99A28159D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DCB6B4A224C75F482DB1F5216AE99A28159D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/1/3137372e33362e32362e302f32342d3234203d3e20323732373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:32:72:a4:62:61:31:3b:e4:0d:ae:2d:51:9d:b2:39:b6:
         0c:d3:ab:80:13:09:ca:75:ec:b1:70:05:db:f7:64:90:55:42:
         22:12:26:90:22:31:94:b4:e1:f2:8a:5b:8e:d3:0a:06:19:85:
         50:2e:a7:f5:98:22:db:f2:7f:ad:0d:77:5f:63:6a:5c:7e:9c:
         a5:ad:34:49:9b:69:2b:a7:51:b9:67:00:58:e7:ee:86:58:fe:
         be:0f:d9:eb:40:f7:a9:38:51:a1:34:7e:e0:d8:c7:37:96:20:
         ca:e5:80:e8:c7:f8:95:c2:22:05:6a:7f:2e:63:06:8c:69:08:
         5e:af:d4:82:e2:5c:6c:0c:51:f8:73:d3:f0:17:8f:29:c9:9e:
         c4:6b:49:ff:5b:09:f6:de:8e:6f:e3:99:0f:66:67:38:e4:e2:
         3c:98:18:8b:b2:00:ef:ce:ce:0b:98:05:3d:46:f5:08:ca:fe:
         db:e9:51:ff:7a:f9:ab:eb:13:a9:4e:20:52:31:c8:89:3e:e1:
         de:cc:8e:99:71:16:76:76:8c:e3:4d:e2:dd:ed:f9:5f:a9:9e:
         15:aa:19:ac:c9:5e:2d:6a:d7:1d:10:11:1a:84:58:c3:c7:b6:
         04:ec:48:91:32:6d:ae:e8:14:ee:bf:18:20:27:8d:b5:10:de:
         77:ee:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 17:39:21 2024 by rpki-client on console-fra.rpki-client.org