Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa
File:                     3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          SB6htxjokfBIRQ5Z13o1Dd6Qxr+LY8P2RU1yolQwPo4=
Subject key identifier:   54:DD:DF:65:15:91:9E:CB:E0:AF:35:D5:ED:C1:F2:D9:65:C8:81:32
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       57F35F7B49D0AAE2C77AF5723E7C9C11E91777B1
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa
Signing time:             Fri 09 Aug 2024 17:29:54 +0000
ROA not before:           Fri 09 Aug 2024 17:24:54 +0000
ROA not after:            Fri 08 Aug 2025 17:29:54 +0000
asID:                     270814
IP address blocks:        177.20.160.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f3:5f:7b:49:d0:aa:e2:c7:7a:f5:72:3e:7c:9c:11:e9:17:77:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:24:54 2024 GMT
            Not After : Aug  8 17:29:54 2025 GMT
        Subject: CN=54DDDF6515919ECBE0AF35D5EDC1F2D965C88132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:7c:f6:59:9d:49:15:66:f9:e0:53:9a:86:
                    bd:86:10:36:69:db:6c:85:5a:c8:16:96:12:e2:76:
                    1e:2a:ca:53:52:e8:c1:61:2b:a6:a1:ed:df:c1:2c:
                    46:d4:fc:1e:1b:f5:72:42:7f:1f:43:db:7c:c9:6c:
                    63:9d:7e:e0:47:e9:4c:e3:8f:c4:ce:56:90:b8:fb:
                    75:33:ef:fc:45:a2:70:53:15:57:06:c7:3d:a3:50:
                    84:e4:5c:bb:5f:0d:d1:ef:22:44:a1:d3:81:7d:46:
                    9e:36:f7:8f:93:2d:39:0f:79:84:11:5a:35:8f:99:
                    43:21:12:1a:38:69:e8:fe:09:cd:06:1f:08:57:6d:
                    c6:4e:bc:e2:ac:4b:07:09:df:d9:b3:de:34:96:98:
                    35:44:e3:23:8b:42:06:9b:95:41:ef:b8:6e:75:3e:
                    2c:bb:05:26:63:1f:88:bd:3d:80:f5:51:31:a8:1a:
                    3e:4a:12:c5:0b:c3:b8:7b:c0:6b:0b:a5:52:83:a6:
                    cb:1b:32:c6:ff:88:a7:fc:c2:ed:8f:ab:0d:a3:e3:
                    43:3e:d3:d4:80:57:fe:ee:c4:6d:1a:a0:12:25:c1:
                    20:16:51:b9:64:fa:e0:51:09:2e:95:5c:a8:94:37:
                    5f:3a:df:3d:51:12:55:bf:db:fe:bb:89:ad:39:cb:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DD:DF:65:15:91:9E:CB:E0:AF:35:D5:ED:C1:F2:D9:65:C8:81:32
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:8a:10:93:46:0b:16:18:18:1c:fc:a4:a9:47:ce:71:23:04:
         56:7e:b7:84:49:c3:cc:e9:f0:02:34:c0:36:ec:aa:eb:d0:b8:
         1b:4b:c3:5f:1f:a4:d4:dd:81:08:5f:40:fc:43:57:c6:6e:74:
         4a:f1:35:d2:1d:db:b9:73:25:a2:c7:26:c0:6c:9a:e8:e4:b0:
         e3:82:be:79:a2:19:1e:0b:f0:57:40:8e:22:5b:7d:05:6f:6b:
         f0:9c:cf:08:c3:3b:b2:28:50:fd:43:a1:57:0f:6f:24:c1:57:
         2e:33:bd:45:c9:7c:3e:8a:a1:c5:06:4c:68:8b:dd:3b:1e:7a:
         1e:49:62:cd:c5:38:31:78:cc:d9:4a:b8:be:de:13:c1:cf:d6:
         44:8b:0c:f9:45:a6:6d:d4:3d:17:58:21:be:6b:d9:8b:41:c9:
         fa:9a:cc:39:c8:b0:46:0a:66:02:2f:e0:36:51:12:18:8f:3f:
         67:dc:78:a2:2f:e8:e9:b5:80:d8:8f:e4:ae:4b:f1:71:e9:ee:
         bf:ce:44:75:eb:c1:54:0f:45:23:3d:e6:21:a1:64:2e:a8:b7:
         87:13:01:7e:c4:4d:c7:d2:60:2b:14:00:43:01:62:77:ad:04:
         ce:27:1c:d0:38:8b:ce:38:db:2d:9c:7b:6d:20:fa:d1:6f:04:
         0e:36:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:07:36 2024 by rpki-client on console-ams.rpki-client.org