Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa
File:                     3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa (raw, json)
Hash identifier:          11nnyAvKWmY4RP6lIm/63pnUKK+b77D1UFJ6qY0tqkc=
Subject key identifier:   3B:B5:4B:64:A3:71:56:BD:BF:3E:77:01:6D:0F:40:4E:E0:87:DE:19
Certificate issuer:       /CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
Certificate serial:       7F2DCD0780D2D7448024AC4196CB6DB2930A56EF
Authority key identifier: 49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa
Signing time:             Thu 04 Apr 2024 01:17:30 +0000
ROA not before:           Thu 04 Apr 2024 01:12:30 +0000
ROA not after:            Thu 03 Apr 2025 01:17:30 +0000
asID:                     271336
IP address blocks:        177.71.100.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2d:cd:07:80:d2:d7:44:80:24:ac:41:96:cb:6d:b2:93:0a:56:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Validity
            Not Before: Apr  4 01:12:30 2024 GMT
            Not After : Apr  3 01:17:30 2025 GMT
        Subject: CN=3BB54B64A37156BDBF3E77016D0F404EE087DE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:b6:c6:49:64:a1:9b:8a:d7:61:82:be:26:
                    aa:6d:05:33:f5:dd:c8:f0:9b:77:e7:54:9b:88:8d:
                    2a:9d:1c:44:db:78:c6:c1:44:f6:02:cf:46:9a:d1:
                    40:ed:3c:26:d3:41:86:a0:3b:06:fd:2a:8f:f0:a7:
                    b3:1e:38:91:df:3f:2a:0d:8d:af:ad:2b:2a:60:82:
                    23:ed:8e:96:22:8a:94:c2:b9:f9:c7:a9:ea:0e:2b:
                    e1:5d:44:fc:ac:54:2e:21:f9:f0:0b:fd:6a:37:27:
                    f8:38:9f:03:1d:f5:75:78:89:48:39:c5:6b:20:91:
                    30:da:a9:a6:8b:a4:15:d4:9c:52:57:5a:b5:69:0d:
                    f5:fa:9c:2f:87:c1:6c:36:a2:e4:c0:d2:c2:27:ad:
                    20:7b:2f:cc:84:8f:e0:b5:d6:af:33:15:ab:5d:e3:
                    62:39:87:70:7e:24:5a:f3:e4:c4:11:f9:98:1c:fa:
                    74:5d:50:9a:bf:09:6e:04:33:88:a8:f3:67:bc:b0:
                    fa:0b:d9:31:ec:ca:03:23:43:b3:2c:f5:f9:70:ff:
                    9d:14:ad:8d:88:b1:2c:4f:bc:58:14:d5:e6:0c:d6:
                    23:8c:89:08:a9:a5:73:db:f3:6b:ff:09:c3:ca:22:
                    52:d2:a3:a5:cf:7b:2a:7b:26:48:0a:5a:9a:bd:11:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:4B:64:A3:71:56:BD:BF:3E:77:01:6D:0F:40:4E:E0:87:DE:19
            X509v3 Authority Key Identifier:
                keyid:49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:24:61:33:63:dc:f9:18:a7:7b:48:b2:a0:ec:a9:83:52:ab:
         88:12:86:bf:2a:ea:c5:a2:47:fb:80:c8:c9:38:43:4f:71:30:
         d1:b8:86:14:6e:2c:3d:90:ee:9c:2b:f3:20:40:75:90:88:5a:
         8b:41:2b:0f:8a:5e:eb:e9:06:08:c8:c0:19:d8:42:a3:41:fd:
         e8:af:7d:88:3f:a3:3a:f4:50:bd:ee:d2:34:50:85:0c:2a:7b:
         c9:ce:02:02:83:ee:7a:48:6e:1b:14:51:c9:94:36:2a:93:e6:
         99:d2:75:7c:2c:e3:6f:f5:ba:1e:ac:8f:03:88:d0:85:8f:10:
         c4:16:76:98:f6:80:f3:8b:ae:e1:8a:c0:e5:0a:99:2f:44:cf:
         ca:44:98:bd:80:b3:df:d3:7d:04:2a:c6:9e:39:e3:17:50:f3:
         38:f4:b4:c5:dd:31:7c:64:5e:35:36:99:2d:b5:4a:fc:b0:9a:
         e1:ee:7d:89:ca:3d:ad:b1:1c:1b:8f:48:1f:ac:7a:56:60:94:
         48:61:81:2b:b3:1a:be:48:ed:9e:e7:df:9c:d8:2c:2e:89:3f:
         10:3e:96:87:a1:a9:c1:d2:2c:30:65:fb:cc:2f:19:b4:aa:d1:
         5a:b5:09:58:8d:69:59:71:29:37:51:77:38:22:ed:70:1f:71:
         08:0e:91:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfy3NB4DS10SAJKxBlsttspMKVu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDNkU1REM3MjZBOTc0MzYzNkRDRkVBRTgxMDY5QjVF
Qzk3REVGQzAeFw0yNDA0MDQwMTEyMzBaFw0yNTA0MDMwMTE3MzBaMDMxMTAvBgNV
BAMTKDNCQjU0QjY0QTM3MTU2QkRCRjNFNzcwMTZEMEY0MDRFRTA4N0RFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkrbGSWShm4rXYYK+JqptBTP1
3cjwm3fnVJuIjSqdHETbeMbBRPYCz0aa0UDtPCbTQYagOwb9Ko/wp7MeOJHfPyoN
ja+tKypggiPtjpYiipTCufnHqeoOK+FdRPysVC4h+fAL/Wo3J/g4nwMd9XV4iUg5
xWsgkTDaqaaLpBXUnFJXWrVpDfX6nC+HwWw2ouTA0sInrSB7L8yEj+C11q8zFatd
42I5h3B+JFrz5MQR+Zgc+nRdUJq/CW4EM4io82e8sPoL2THsygMjQ7Ms9flw/50U
rY2IsSxPvFgU1eYM1iOMiQippXPb82v/CcPKIlLSo6XPeyp7JkgKWpq9ERGxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO7VLZKNxVr2/PncBbQ9ATuCH3hkwHwYDVR0j
BBgwFoAUScbl3HJql0Njbc/q6BBpteyX3vwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG03aXdiY1JSeVA5am5aWFo5a1Fpc2ljTEVwNXhHRGE5VzVGc0hqc0du
S2EvMS80OUM2RTVEQzcyNkE5NzQzNjM2RENGRUFFODEwNjlCNUVDOTdERUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5QzZFNURDNzI2QTk3NDM2
MzZEQ0ZFQUU4MTA2OUI1RUM5N0RFRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RtN2l3YmNSUnlQOWpuWlhaOWtRaXNpY0xFcDV4R0RhOVc1RnNIanNHbkthLzEv
MzEzNzM3MmUzNzMxMmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxR2QwDQYJKoZIhvcNAQELBQADggEBAGEkYTNj
3PkYp3tIsqDsqYNSq4gShr8q6sWiR/uAyMk4Q09xMNG4hhRuLD2Q7pwr8yBAdZCI
WotBKw+KXuvpBgjIwBnYQqNB/eivfYg/ozr0UL3u0jRQhQwqe8nOAgKD7npIbhsU
UcmUNiqT5pnSdXws42/1uh6sjwOI0IWPEMQWdpj2gPOLruGKwOUKmS9Ez8pEmL2A
s9/TfQQqxp454xdQ8zj0tMXdMXxkXjU2mS21SvywmuHufYnKPa2xHBuPSB+selZg
lEhhgSuzGr5I7Z7n35zYLC6JPxA+loehqcHSLDBl+8wvGbSq0Vq1CViNaVlxKTdR
dzgi7XAfcQgOkZw=
-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org