Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32332d3233203d3e20323731333336.roa
File:                     3137372e37312e3130302e302f32332d3233203d3e20323731333336.roa (raw, json)
Hash identifier:          lDIL3j5/q73SgR3+oiBep4+puOpWVjUVWYRcO7F6k38=
Subject key identifier:   54:70:9A:C6:4C:EC:47:BB:24:95:9B:BA:F6:D7:B4:CA:CC:EF:69:0E
Certificate issuer:       /CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
Certificate serial:       08AE709C71901EE8168DACCBFD9DD69CCC89EEFE
Authority key identifier: 49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32332d3233203d3e20323731333336.roa
Signing time:             Thu 04 Apr 2024 01:17:30 +0000
ROA not before:           Thu 04 Apr 2024 01:12:30 +0000
ROA not after:            Thu 03 Apr 2025 01:17:30 +0000
asID:                     271336
IP address blocks:        177.71.100.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ae:70:9c:71:90:1e:e8:16:8d:ac:cb:fd:9d:d6:9c:cc:89:ee:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Validity
            Not Before: Apr  4 01:12:30 2024 GMT
            Not After : Apr  3 01:17:30 2025 GMT
        Subject: CN=54709AC64CEC47BB24959BBAF6D7B4CACCEF690E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:af:d1:c9:16:57:e1:b1:53:58:0e:a7:3e:46:
                    80:7d:f6:f1:7d:70:6f:17:9b:5c:b3:db:33:f6:df:
                    46:67:09:76:0b:3f:82:4c:46:da:3b:3e:e5:73:89:
                    90:18:4d:71:76:d7:94:18:62:54:89:88:3b:51:d8:
                    ae:dc:25:47:8f:88:6a:28:99:08:de:cc:13:34:4f:
                    8c:06:41:d1:87:b9:7b:90:a7:19:57:47:28:b1:5d:
                    7f:1d:15:fb:49:87:c2:bf:ed:39:45:0d:92:ad:ed:
                    85:54:57:55:cb:ec:cc:78:d2:ec:25:03:84:ad:4e:
                    29:c7:02:0d:68:20:16:c3:3a:45:36:87:d6:c5:b7:
                    ab:46:f7:c9:de:e6:4a:d4:df:b9:87:fe:89:f2:fa:
                    74:a8:8b:1f:f0:f9:ac:db:56:d4:c7:50:5c:4b:e3:
                    9f:a9:96:fa:20:a8:b5:ea:f6:21:6b:d0:3c:50:71:
                    68:b6:c6:a8:a5:66:82:65:52:91:65:f7:3c:b5:21:
                    59:2d:3b:9b:e8:76:a8:e6:ce:86:f6:42:8b:63:ba:
                    77:be:0d:96:5c:a4:c1:64:57:48:2d:e5:d7:c6:cf:
                    43:4d:5a:7e:d5:28:06:41:b9:de:7a:9a:b7:24:e5:
                    f4:3c:76:a3:35:b9:9a:8a:47:88:ac:b7:a8:02:05:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:9A:C6:4C:EC:47:BB:24:95:9B:BA:F6:D7:B4:CA:CC:EF:69:0E
            X509v3 Authority Key Identifier:
                keyid:49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32332d3233203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:ec:a1:e8:1a:8a:12:3a:66:49:6a:92:88:31:5b:4d:96:19:
         ae:e7:ad:7f:d7:f7:8b:d4:7a:08:5a:65:03:7d:e1:9b:25:f4:
         6e:7b:65:fa:0d:f5:db:4c:7c:73:f4:e8:67:84:ce:61:12:0a:
         e3:d6:e8:0f:95:36:70:39:16:88:ac:f4:e2:b1:84:19:88:b5:
         83:0c:ed:27:26:df:60:7e:e3:cf:70:64:6b:50:4b:bb:fe:38:
         73:95:6e:09:1e:80:89:df:24:8f:2e:ca:0f:c0:de:6e:5c:9d:
         d9:cc:8f:c8:04:41:a7:45:0c:d1:ff:fe:df:81:36:c6:6d:84:
         47:95:b2:16:4d:47:fe:6d:92:d4:b0:e8:4a:fc:b2:55:b2:20:
         5e:8d:5b:20:15:df:9b:df:93:83:ee:59:68:43:ee:a5:61:24:
         f1:18:33:6e:4f:47:e8:23:18:8b:b1:70:22:b3:bc:92:cd:71:
         94:59:af:67:46:b2:e5:37:5f:e5:b0:69:ce:b1:43:08:c7:9d:
         fe:c1:b4:4e:6d:59:15:4a:7f:28:c1:2c:85:da:a3:27:87:e2:
         96:4a:66:71:03:d2:c2:a0:43:7a:4a:97:3a:05:76:18:26:10:
         1b:62:ae:83:5a:9f:d1:05:8e:9d:4f:a3:f3:60:e2:51:92:5b:
         dd:ee:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:22:15 2024 by rpki-client on console-ams.rpki-client.org