Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3332203d3e20323730363330.roa
File:                     3137372e37302e3234342e302f32332d3332203d3e20323730363330.roa (raw, json)
Hash identifier:          STz8lVkrkQ+Y83dE79TC4nlTjKkVC9xT5F3CoVevT0o=
Subject key identifier:   25:AE:B2:16:97:21:05:E3:92:11:A9:E3:B8:08:97:C6:A6:66:69:60
Certificate issuer:       /CN=08476912059F2AC593011419116914BCC2250DEF
Certificate serial:       78FB8DBC83CE7786BE369D6F46E607A67AD3DE80
Authority key identifier: 08:47:69:12:05:9F:2A:C5:93:01:14:19:11:69:14:BC:C2:25:0D:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08476912059F2AC593011419116914BCC2250DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3332203d3e20323730363330.roa
Signing time:             Thu 22 Aug 2024 17:57:04 +0000
ROA not before:           Thu 22 Aug 2024 17:52:04 +0000
ROA not after:            Thu 21 Aug 2025 17:57:04 +0000
asID:                     270630
IP address blocks:        177.70.244.0/23 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fb:8d:bc:83:ce:77:86:be:36:9d:6f:46:e6:07:a6:7a:d3:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08476912059F2AC593011419116914BCC2250DEF
        Validity
            Not Before: Aug 22 17:52:04 2024 GMT
            Not After : Aug 21 17:57:04 2025 GMT
        Subject: CN=25AEB216972105E39211A9E3B80897C6A6666960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:50:0b:7a:54:8f:d9:c1:11:8e:64:fc:1c:
                    15:84:fb:dc:d5:98:91:da:b5:f2:0c:8c:8e:fb:20:
                    97:73:75:3f:93:de:bf:82:ca:f9:65:28:05:19:58:
                    c9:20:f9:f7:e3:9b:83:79:6f:cd:0c:a5:42:43:de:
                    2f:10:ba:c9:07:31:62:8b:76:2d:3f:3b:c5:ff:1b:
                    dc:40:e6:a6:df:c3:97:08:cf:de:82:74:e4:bf:97:
                    34:8c:5c:a2:c6:fa:a7:1e:a9:35:8a:5a:16:c2:b1:
                    54:44:1d:2a:d3:f4:d1:a5:b4:b4:fc:81:f5:f0:98:
                    89:8a:54:4e:b1:94:22:8f:0c:3a:5c:55:6f:1c:2d:
                    35:1d:c8:3f:be:df:0b:a7:3a:ec:68:e3:47:db:a3:
                    fb:0b:0e:d0:f3:44:ea:cc:e7:7e:11:63:df:54:fa:
                    77:ef:67:f3:9e:24:eb:de:bf:77:4b:35:07:24:7f:
                    8c:8a:86:34:6a:4f:2d:12:32:64:32:90:85:ca:85:
                    d6:93:60:2c:b0:21:8e:ed:b8:d2:4b:31:df:1b:a9:
                    49:42:ef:d9:af:71:08:2e:88:6a:c7:0f:65:c3:0d:
                    cc:47:1b:8c:87:a1:e0:33:ee:bc:0d:37:f7:87:e3:
                    f6:9c:83:4b:4a:42:57:e9:d0:f9:20:cc:89:8b:b4:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:B2:16:97:21:05:E3:92:11:A9:E3:B8:08:97:C6:A6:66:69:60
            X509v3 Authority Key Identifier:
                keyid:08:47:69:12:05:9F:2A:C5:93:01:14:19:11:69:14:BC:C2:25:0D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/08476912059F2AC593011419116914BCC2250DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08476912059F2AC593011419116914BCC2250DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3332203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:f9:aa:78:bb:c0:31:87:e5:d0:80:f6:d9:a8:2f:5d:5b:e4:
         cd:31:b6:39:df:49:70:c5:6e:ec:52:40:84:80:a1:63:6a:79:
         a2:d6:61:84:ac:fe:cd:5d:3d:cd:17:6a:7c:e9:6b:a2:ec:09:
         ee:c1:44:07:fc:81:05:f3:14:4e:f0:4b:a5:9f:dd:79:b2:11:
         a8:73:b8:fd:c7:4c:2f:4e:b7:05:16:ae:a9:46:19:47:c1:6a:
         6f:9f:c6:80:5c:33:58:9e:e5:7f:0b:6d:19:72:84:42:a4:7d:
         b0:18:c8:87:1e:28:b5:7c:d5:5c:8f:aa:50:84:62:85:37:cf:
         69:95:31:de:92:a4:54:3a:f5:f1:af:ee:9b:ea:1c:18:66:66:
         84:96:b8:29:17:1c:34:a3:30:19:7e:54:a9:6f:36:1a:0e:60:
         c2:4e:c2:2c:c8:11:f0:d0:67:82:c9:6a:74:cf:10:bf:e0:b6:
         7d:55:8e:5a:cc:07:19:75:a7:9f:f1:63:d6:8f:8b:aa:73:c0:
         51:6a:39:0d:0d:b8:5b:9b:8d:b8:8d:7e:0f:22:00:ac:a9:5b:
         4b:b1:ef:8f:21:d1:ee:25:cf:88:1e:98:a1:77:5c:d6:ae:53:
         63:3b:20:92:c1:41:2c:88:92:57:ca:1b:a2:0b:c8:19:08:53:
         8c:f9:40:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUePuNvIPOd4a+Np1vRuYHpnrT3oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NzY5MTIwNTlGMkFDNTkzMDExNDE5MTE2OTE0QkND
MjI1MERFRjAeFw0yNDA4MjIxNzUyMDRaFw0yNTA4MjExNzU3MDRaMDMxMTAvBgNV
BAMTKDI1QUVCMjE2OTcyMTA1RTM5MjExQTlFM0I4MDg5N0M2QTY2NjY5NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNlALelSP2cERjmT8HBWE+9zV
mJHatfIMjI77IJdzdT+T3r+CyvllKAUZWMkg+ffjm4N5b80MpUJD3i8QuskHMWKL
di0/O8X/G9xA5qbfw5cIz96CdOS/lzSMXKLG+qceqTWKWhbCsVREHSrT9NGltLT8
gfXwmImKVE6xlCKPDDpcVW8cLTUdyD++3wunOuxo40fbo/sLDtDzROrM534RY99U
+nfvZ/OeJOvev3dLNQckf4yKhjRqTy0SMmQykIXKhdaTYCywIY7tuNJLMd8bqUlC
79mvcQguiGrHD2XDDcxHG4yHoeAz7rwNN/eH4/acg0tKQlfp0PkgzImLtHX1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJa6yFpchBeOSEanjuAiXxqZmaWAwHwYDVR0j
BBgwFoAUCEdpEgWfKsWTARQZEWkUvMIlDe8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VYQ2N5TVlITmZ4SHFCOEtTTFV5bllyemFqdjJVVHdqcEM1aFU4UDZN
dG4vMC8wODQ3NjkxMjA1OUYyQUM1OTMwMTE0MTkxMTY5MTRCQ0MyMjUwREVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NDc2OTEyMDU5RjJBQzU5
MzAxMTQxOTExNjkxNEJDQzIyNTBERUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1WENjeU1ZSE5meEhxQjhLU0xVeW5ZcnphanYyVVR3anBDNWhVOFA2TXRuLzAv
MzEzNzM3MmUzNzMwMmUzMjM0MzQyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM3
MzAzNjMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxRvQwDQYJKoZIhvcNAQELBQADggEBAJH5qni7
wDGH5dCA9tmoL11b5M0xtjnfSXDFbuxSQISAoWNqeaLWYYSs/s1dPc0Xanzpa6Ls
Ce7BRAf8gQXzFE7wS6Wf3XmyEahzuP3HTC9OtwUWrqlGGUfBam+fxoBcM1ie5X8L
bRlyhEKkfbAYyIceKLV81VyPqlCEYoU3z2mVMd6SpFQ69fGv7pvqHBhmZoSWuCkX
HDSjMBl+VKlvNhoOYMJOwizIEfDQZ4LJanTPEL/gtn1VjlrMBxl1p5/xY9aPi6pz
wFFqOQ0NuFubjbiNfg8iAKypW0ux748h0e4lz4gemKF3XNauU2M7IJLBQSyIklfK
G6ILyBkIU4z5QOM=
-----END CERTIFICATE-----
Generated at Sat Nov 2 07:33:20 2024 by rpki-client on console-fra.rpki-client.org