Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa
File:                     3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa (raw, json)
Hash identifier:          4EXI6IhF6b+h9XIWEWi/dYO9UP3iN3BYJxfvEM4DG9Q=
Subject key identifier:   24:50:F3:50:4A:E8:05:80:6D:D4:3B:01:CF:C4:A8:C7:51:29:99:46
Certificate issuer:       /CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
Certificate serial:       1E85B481B2409E67C397AD4F65ADF9EB3152745E
Authority key identifier: 49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa
Signing time:             Thu 04 Apr 2024 01:17:30 +0000
ROA not before:           Thu 04 Apr 2024 01:12:30 +0000
ROA not after:            Thu 03 Apr 2025 01:17:30 +0000
asID:                     271336
IP address blocks:        177.71.100.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:85:b4:81:b2:40:9e:67:c3:97:ad:4f:65:ad:f9:eb:31:52:74:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Validity
            Not Before: Apr  4 01:12:30 2024 GMT
            Not After : Apr  3 01:17:30 2025 GMT
        Subject: CN=2450F3504AE805806DD43B01CFC4A8C751299946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:d6:85:12:88:ad:a9:5f:c8:21:f2:33:59:
                    3c:42:34:ac:4d:f0:0f:c7:6a:dc:1b:3c:7e:91:fb:
                    c7:82:a4:a7:0c:0d:5a:7d:05:d6:26:b1:be:a2:69:
                    f1:90:f9:e0:2f:35:82:45:92:9d:f7:5b:37:14:ef:
                    1e:62:82:50:ab:80:f1:9e:9a:7a:0e:c2:b7:b8:e2:
                    51:f5:1c:7a:91:71:f2:c3:23:3f:60:72:1b:e1:69:
                    66:d6:c8:b1:78:6a:8e:93:ef:69:c9:b6:df:97:5e:
                    6d:64:fb:9c:1c:12:4f:a3:a7:93:0b:75:5c:78:b9:
                    3b:c9:0c:ad:98:d7:8e:7e:47:ca:d1:80:bf:45:c6:
                    17:61:7e:48:ed:cc:e9:3a:7f:3c:e0:52:c4:ba:c6:
                    2e:b2:45:f3:07:9c:d7:93:da:7c:3b:15:93:e7:77:
                    19:03:19:d2:4f:60:4f:06:ab:03:32:b9:f0:21:ee:
                    6f:db:3b:a6:25:26:f0:64:01:51:d7:82:91:1a:91:
                    1b:a8:8d:8a:62:28:4f:22:75:12:0c:30:e1:fb:a8:
                    a3:d4:56:c9:5f:16:11:60:a9:cd:02:56:47:62:4f:
                    a5:10:17:c6:cb:b8:b6:db:68:df:57:a8:2f:a1:cf:
                    11:07:d2:6e:ae:15:2c:a2:04:5f:0d:94:dc:6c:13:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:50:F3:50:4A:E8:05:80:6D:D4:3B:01:CF:C4:A8:C7:51:29:99:46
            X509v3 Authority Key Identifier:
                keyid:49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:b1:32:df:2f:95:3a:39:bd:80:a7:32:0d:05:0a:68:09:
         1a:9a:c4:0c:a8:9a:14:01:6c:68:69:0e:03:84:ea:8c:f6:7e:
         47:04:d7:c1:b5:94:fc:5f:f5:75:bf:21:dd:28:00:77:20:aa:
         5c:2c:18:94:ea:b6:25:1e:21:9c:ab:a4:fb:79:a0:8c:b2:18:
         0c:ee:7d:2e:2b:99:1e:fb:bc:c3:90:41:29:0a:e6:88:9a:5b:
         b7:04:00:04:f3:c3:78:6e:8e:97:ff:a7:78:0e:f9:a6:bc:bf:
         19:65:6e:ce:eb:dd:e8:f6:1d:59:3a:37:cd:cf:fd:76:06:52:
         9e:27:a1:40:a8:81:80:22:bf:a1:00:e3:67:47:82:9e:80:08:
         a9:29:c7:42:ce:b1:87:66:84:11:79:0b:d7:00:fa:9c:d6:18:
         8e:bf:aa:48:a8:f1:fc:f2:b2:72:5d:36:c6:98:c3:34:53:9d:
         05:32:a3:d1:18:9c:4c:a1:3f:d9:5b:74:98:c1:7c:5f:48:ea:
         e7:c2:57:8a:1a:04:15:9e:0e:7c:61:74:75:13:65:47:07:98:
         84:fe:b7:c7:b9:92:e7:77:c6:69:ef:4b:95:5a:62:10:6a:d5:
         17:43:7c:4e:c7:ea:0f:84:93:9d:0c:58:10:cb:80:f4:65:28:
         19:e1:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 14:54:10 2024 by rpki-client on console-fra.rpki-client.org