Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa
File:                     3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          /f2CXZwPqu6VPEjRVfZNkyzPr2BE3WTQIvkziGiTK/k=
Subject key identifier:   B9:85:E6:77:2E:F6:D8:64:5F:FF:37:92:DA:B2:1E:46:B0:CE:D8:A8
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       3B8FC7D6B148268BDA3253907779CF4393900E53
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa
Signing time:             Fri 09 Aug 2024 17:31:55 +0000
ROA not before:           Fri 09 Aug 2024 17:26:55 +0000
ROA not after:            Fri 08 Aug 2025 17:31:55 +0000
asID:                     270814
IP address blocks:        177.223.96.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8f:c7:d6:b1:48:26:8b:da:32:53:90:77:79:cf:43:93:90:0e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:26:55 2024 GMT
            Not After : Aug  8 17:31:55 2025 GMT
        Subject: CN=B985E6772EF6D8645FFF3792DAB21E46B0CED8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:4e:25:e9:42:55:1c:4d:c3:80:51:64:66:
                    4a:71:ad:27:d6:3b:10:83:cf:cf:71:72:b1:a1:0a:
                    17:7a:d0:42:dd:61:f0:49:e9:33:bf:e3:5d:48:bc:
                    63:54:2d:04:61:fb:bc:cd:fd:4d:4f:97:cf:a4:10:
                    80:f1:84:ef:68:6e:5c:d4:27:8b:71:2e:c9:4f:8e:
                    2d:3c:f5:9f:43:fc:6e:9c:b4:37:f0:d5:a2:49:53:
                    86:94:90:e9:cc:35:f9:0e:99:84:10:b6:5d:ca:92:
                    f4:b4:bc:a0:bf:78:99:07:15:d7:71:91:1b:9b:7c:
                    02:73:45:2e:2f:8e:bd:0a:3a:2e:02:f4:5a:53:28:
                    2e:22:f4:d5:da:ab:dc:d1:c4:e7:b3:4e:c7:cb:cc:
                    ab:37:26:9d:98:42:73:74:8e:25:6b:0b:ea:0f:c6:
                    cb:70:dd:59:a1:59:d4:64:f5:d4:2f:c5:51:47:4c:
                    de:35:c4:58:b3:e4:0d:61:94:7f:51:97:67:f7:2f:
                    00:62:ef:e3:32:20:33:29:b6:90:9d:df:c5:88:70:
                    42:3c:04:15:e0:9c:e2:3c:8b:f9:d8:f5:3f:8c:12:
                    c2:bf:f1:5d:5f:4d:60:b9:7c:b3:e6:8f:70:5e:9b:
                    f3:6c:07:57:ec:19:16:c2:a4:7e:71:28:ca:6e:db:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:E6:77:2E:F6:D8:64:5F:FF:37:92:DA:B2:1E:46:B0:CE:D8:A8
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:bc:75:6c:4a:4e:33:c1:c9:ad:88:38:7e:c6:06:58:bd:8f:
         73:07:65:54:8e:06:e5:84:e0:07:29:ce:22:e2:79:85:5e:f9:
         03:9e:b2:d9:5c:e5:06:a8:71:a8:cb:68:3d:4b:f3:5b:81:8b:
         45:34:e8:ce:19:71:64:75:43:d8:81:a5:d6:b4:0d:59:a4:1e:
         d9:57:ec:c7:d0:b6:66:76:cf:92:ad:51:0d:65:1a:fe:8a:45:
         ae:0d:68:a0:d9:d7:3b:a6:cf:69:85:56:a2:0b:ee:7c:b3:7c:
         a8:6b:7a:fb:19:04:ab:c3:c0:de:76:a4:e0:0b:98:ab:72:25:
         cf:d3:4d:f6:34:4e:5c:9d:6d:5f:3a:b9:50:be:3a:0a:08:d5:
         09:36:a0:74:77:b0:88:f2:f8:ed:7f:dc:07:a3:8f:09:cc:20:
         f4:3e:fb:a2:6d:86:0c:9d:ad:4c:65:55:23:be:e4:9a:fa:fb:
         ef:c6:0a:78:32:f4:1b:74:3d:80:2f:03:04:64:25:31:b5:c4:
         eb:77:b4:72:a1:52:73:b4:e5:1e:f2:37:c0:be:88:c6:11:f8:
         1b:79:d3:15:eb:2c:20:da:fe:57:f6:86:81:f9:5f:9c:e5:e5:
         a1:d7:f9:c5:9d:23:58:ac:f6:b1:fa:2f:cd:35:8b:14:b4:ff:
         b2:47:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org