Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3138352e3134342e302f32312d3234203d3e20323730383134.roa
File:                     3137372e3138352e3134342e302f32312d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          AHNDDM2lVM1OwBNfVpEM+3oXEkWBULSKUlyXAt9Sf+M=
Subject key identifier:   EE:1F:D0:12:A0:56:B5:2B:EA:26:06:D4:A6:CE:24:B0:35:7A:72:3E
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       2A182C74203C1CE99AA3898467278D0DA315BFDD
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3138352e3134342e302f32312d3234203d3e20323730383134.roa
Signing time:             Fri 09 Aug 2024 17:30:39 +0000
ROA not before:           Fri 09 Aug 2024 17:25:39 +0000
ROA not after:            Fri 08 Aug 2025 17:30:39 +0000
asID:                     270814
IP address blocks:        177.185.144.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:18:2c:74:20:3c:1c:e9:9a:a3:89:84:67:27:8d:0d:a3:15:bf:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:25:39 2024 GMT
            Not After : Aug  8 17:30:39 2025 GMT
        Subject: CN=EE1FD012A056B52BEA2606D4A6CE24B0357A723E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:51:af:a7:88:87:58:4b:43:b4:4d:4d:0e:0d:
                    51:5e:39:fb:8d:98:ac:4f:2d:b9:73:f4:5e:43:70:
                    8b:42:e6:c9:9a:de:56:57:9d:43:39:63:1c:ad:6f:
                    16:7f:82:ab:b9:61:71:35:92:7b:a6:13:58:8a:ce:
                    a7:1a:4e:ea:41:06:7d:b5:71:1e:f6:32:39:a1:e3:
                    01:84:ce:9c:b8:ff:e1:f9:5a:f4:1d:f5:56:86:12:
                    f2:e3:d2:e4:8c:89:2f:20:86:05:d3:e2:10:1b:64:
                    f9:14:5a:99:6d:59:7b:40:51:92:c0:5e:4e:07:72:
                    68:9c:85:20:cb:96:c4:58:a8:8d:fc:13:0d:01:26:
                    fd:67:d8:52:c6:88:4c:bb:ac:67:db:8c:9b:77:15:
                    a8:12:ee:a3:26:f7:e5:cc:eb:35:b8:f6:2a:5d:85:
                    6f:41:37:55:6e:72:7e:da:4f:80:65:d0:5f:bb:66:
                    91:6c:16:e5:d9:1c:d1:a2:95:c7:66:18:38:4a:fd:
                    f1:f4:bd:18:98:b0:10:dc:5b:6a:cf:af:02:5c:fb:
                    f3:a4:f7:cb:bc:49:98:1a:21:fd:a3:67:95:c4:c9:
                    71:5a:ee:1b:58:94:5d:ba:64:17:d5:c2:6a:c7:10:
                    b3:c6:e2:54:8d:0a:c7:9e:a9:48:60:7c:cd:32:94:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1F:D0:12:A0:56:B5:2B:EA:26:06:D4:A6:CE:24:B0:35:7A:72:3E
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3138352e3134342e302f32312d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:cf:ab:26:3c:0c:4f:75:30:d2:9f:72:a8:ed:c3:63:bb:
         90:a0:a6:fd:be:7a:df:1c:f2:73:28:38:92:a3:bd:94:ce:b4:
         bf:a2:bb:6b:c2:7f:2d:ee:69:0c:b5:c8:be:0c:a7:0d:87:c5:
         9c:b5:34:d3:6d:7d:aa:25:48:ad:37:f0:e2:9c:7d:45:b4:83:
         df:41:68:5b:5a:81:98:5f:d1:8c:dd:06:03:5f:d1:4d:cb:5e:
         1b:cb:f4:ee:1d:e0:df:cc:f5:c0:05:c6:2f:0c:b0:87:78:c9:
         98:81:1a:66:11:a2:c1:05:85:b8:af:a3:23:a9:34:7f:2a:50:
         cd:45:87:b5:72:1a:a8:00:8d:c0:1d:a8:79:52:a6:7e:dc:00:
         7b:b8:62:96:4a:a2:dc:1d:2c:93:20:ad:a7:82:02:5d:c9:14:
         25:aa:52:34:4b:50:0f:59:2e:28:4e:92:2a:2c:11:42:81:d0:
         24:7c:0d:48:18:25:a4:01:2b:89:aa:e9:91:82:f1:a6:c8:c5:
         36:5b:ab:95:4e:e7:b0:f8:29:c5:50:9f:e6:ca:83:c9:21:3b:
         4a:46:55:f4:5a:04:36:a4:9f:9e:a8:6d:06:ce:5f:41:3d:1c:
         68:96:28:d6:75:e0:9b:68:30:60:47:73:12:c9:09:fd:d0:43:
         70:63:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:07:36 2024 by rpki-client on console-ams.rpki-client.org