Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33382e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          8dsF5SQwaXcTdJnfD350XNsmJrPwAU0Y0g71CP5916U=
Subject key identifier:   7E:EC:78:C0:30:9F:ED:07:60:CA:80:F0:92:DB:E6:FA:FB:F1:2F:8C
Certificate issuer:       /CN=8F131A9124F4505661427DA97FDEE05C46117F4A
Certificate serial:       339CE82EC545EBFE5D431344F1681C832AB2E286
Authority key identifier: 8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa
Signing time:             Thu 04 Apr 2024 08:07:06 +0000
ROA not before:           Thu 04 Apr 2024 08:02:06 +0000
ROA not after:            Thu 03 Apr 2025 08:07:06 +0000
asID:                     52861
IP address blocks:        177.124.38.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9c:e8:2e:c5:45:eb:fe:5d:43:13:44:f1:68:1c:83:2a:b2:e2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Validity
            Not Before: Apr  4 08:02:06 2024 GMT
            Not After : Apr  3 08:07:06 2025 GMT
        Subject: CN=7EEC78C0309FED0760CA80F092DBE6FAFBF12F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:49:02:41:65:4c:6f:d9:65:cf:9b:6a:a6:
                    73:ba:11:0d:e7:f5:94:fd:13:b2:c1:cc:18:d0:d2:
                    aa:57:92:1c:65:42:9b:15:0f:c2:14:6d:53:55:bf:
                    3c:b6:43:56:5b:9c:24:b7:ce:88:f3:02:3a:ac:c9:
                    2a:e1:43:b9:cf:ad:92:89:71:3c:fc:45:3a:40:28:
                    1a:8f:81:fc:52:a3:d0:be:d9:4c:3a:d9:41:85:bb:
                    60:6b:8f:f7:48:46:21:53:8f:c8:5b:5b:59:50:6d:
                    b1:ef:cf:a9:f4:db:53:19:ce:0a:61:44:bb:70:ca:
                    a5:8c:ea:2e:07:ef:8d:e0:5f:d6:c6:49:89:0b:91:
                    0f:58:de:5f:be:ce:e0:fa:ee:1f:7e:cb:fd:29:b9:
                    62:3c:64:a2:d7:1a:41:08:ed:1c:6f:20:63:32:f5:
                    59:77:32:45:53:4a:a0:14:cd:06:eb:e8:9a:b3:30:
                    e1:a6:cb:23:fa:b2:91:f3:33:d3:13:f6:d4:ac:3e:
                    c0:f3:2e:a0:7e:e5:8e:c9:f4:55:ab:98:6c:5a:86:
                    cf:42:c2:1f:9d:86:85:77:66:b3:a3:1b:85:6d:1d:
                    ca:b4:69:e8:fd:28:d7:1d:ea:84:99:50:05:e9:2c:
                    36:e9:f0:30:d7:e2:44:16:5f:75:af:d1:0b:d4:2a:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:78:C0:30:9F:ED:07:60:CA:80:F0:92:DB:E6:FA:FB:F1:2F:8C
            X509v3 Authority Key Identifier:
                keyid:8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:4b:e8:3d:9f:2c:a9:53:e5:60:06:32:f7:57:a0:69:7c:
         38:f2:d9:ec:a8:ad:d5:6d:e9:06:f3:b6:4a:fc:6a:a3:da:5c:
         47:24:27:53:01:95:3c:87:f1:ef:25:f8:61:5a:0e:3f:fa:f7:
         cc:f3:bb:a8:12:c3:20:2e:0f:d3:7f:96:ab:86:bd:0d:d1:76:
         26:d4:b4:8c:97:ae:0c:46:11:69:69:d9:93:f8:91:de:43:b9:
         97:d7:10:ec:b0:16:f4:e4:d1:70:26:0d:04:e6:d5:79:99:bd:
         75:2c:f4:54:59:15:d5:96:ff:7e:35:94:36:d6:fc:4a:d8:5c:
         50:5f:f7:3c:1b:da:74:94:b2:d5:04:2e:b5:10:9b:07:09:cd:
         42:c9:6c:c9:d6:7d:d4:c9:a0:5a:66:cf:5c:0d:ed:96:19:c8:
         58:2a:45:e3:f9:65:0f:51:87:5c:43:38:23:5e:7f:ec:c9:f6:
         51:9d:e1:b6:65:d7:ef:a9:6d:9f:b5:dd:ac:76:b2:ef:03:40:
         f9:11:7d:58:68:17:42:b6:87:4c:e5:24:19:a4:ce:50:81:44:
         a3:42:2a:3b:72:a8:32:2f:95:73:13:71:3a:b9:31:44:a8:ef:
         81:d7:20:42:3a:df:b6:a6:0f:9f:03:cc:6e:5e:f8:ac:59:39:
         a7:f5:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 14:05:45 2024 by rpki-client on console-fra.rpki-client.org