Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130322e302f32342d3234203d3e20323731333336.roa
File:                     3137372e37312e3130322e302f32342d3234203d3e20323731333336.roa (raw, json)
Hash identifier:          2C2OoFXrFUKHYlbMUbU8m6+v0gmjh5Ex2Dun4nrma5c=
Subject key identifier:   0D:FF:66:8A:C1:93:0E:43:89:03:3C:BF:20:D4:CE:62:A1:84:1A:7F
Certificate issuer:       /CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
Certificate serial:       113879D1932EA258B6F7ECA09ED273BEE13E5FD7
Authority key identifier: 49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130322e302f32342d3234203d3e20323731333336.roa
Signing time:             Thu 04 Apr 2024 01:17:31 +0000
ROA not before:           Thu 04 Apr 2024 01:12:31 +0000
ROA not after:            Thu 03 Apr 2025 01:17:31 +0000
asID:                     271336
IP address blocks:        177.71.102.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:79:d1:93:2e:a2:58:b6:f7:ec:a0:9e:d2:73:be:e1:3e:5f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Validity
            Not Before: Apr  4 01:12:31 2024 GMT
            Not After : Apr  3 01:17:31 2025 GMT
        Subject: CN=0DFF668AC1930E4389033CBF20D4CE62A1841A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:da:ea:52:16:34:e2:79:dd:dc:b1:bd:0f:
                    16:a7:6a:9c:a1:d5:c4:e3:b8:70:aa:b0:62:20:b1:
                    42:a7:5b:22:93:0a:a7:22:71:dd:03:79:01:b5:93:
                    ca:b7:71:b1:48:b6:74:f2:59:6e:68:ef:96:9e:58:
                    b7:50:a3:5d:ad:62:7f:51:f0:0c:60:b2:6f:99:d1:
                    8c:e6:6d:53:21:11:49:5d:47:f1:1a:c5:bc:66:30:
                    e5:6d:51:1f:1f:11:ad:ba:1b:87:4d:8a:8a:91:e3:
                    91:f7:4e:d5:77:bb:2e:69:25:67:c7:73:22:3f:d7:
                    4f:de:5f:a7:74:f0:64:e2:b2:b7:27:0b:fb:06:84:
                    db:68:5a:9b:d4:83:4d:77:00:1c:a2:e2:64:25:f1:
                    f9:20:eb:f1:ed:d2:77:e0:59:23:62:7b:ac:8a:dd:
                    91:3d:46:90:de:31:09:03:14:51:bd:60:e5:6a:32:
                    49:a5:c7:4e:c8:e0:e6:bb:63:57:9d:b7:53:14:a2:
                    2b:57:6c:a3:78:6d:fb:38:8f:ac:ae:af:3e:af:46:
                    82:93:d2:42:5b:0f:98:95:4e:54:f7:73:31:f9:c2:
                    b1:49:2b:a4:db:53:ba:3f:c0:3f:67:64:f5:4a:fe:
                    82:fa:d3:28:ca:e7:69:0d:17:3f:97:16:a0:2b:e8:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FF:66:8A:C1:93:0E:43:89:03:3C:BF:20:D4:CE:62:A1:84:1A:7F
            X509v3 Authority Key Identifier:
                keyid:49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130322e302f32342d3234203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:23:a3:9f:75:b8:41:a9:99:e2:9a:87:11:e6:80:db:6f:
         bd:17:2c:bb:98:61:c4:f3:d7:d1:31:a1:b4:43:5b:d2:7d:ef:
         65:eb:aa:6e:8a:d1:69:c4:20:af:ac:6b:7d:fb:6d:1d:a9:03:
         0c:bd:e9:11:60:ea:e5:e9:b9:c1:6c:6b:f3:ff:a6:1e:cf:a1:
         c8:c5:a5:98:80:e1:5c:08:74:92:59:65:d6:cd:98:2b:29:7b:
         7e:a5:6a:2b:68:8a:46:4e:80:bf:5f:1e:d5:87:e9:21:73:c0:
         8c:19:c5:52:f5:45:89:2d:e9:b8:74:cd:32:95:40:e9:21:13:
         03:af:2a:c5:6a:f1:e7:53:23:93:b2:33:4d:3b:fc:4c:44:74:
         4d:a6:1d:2d:53:09:31:67:a0:fe:0e:f3:66:1c:9f:05:3c:37:
         93:90:09:e7:07:0d:fa:c3:06:46:2d:c9:88:18:34:25:e6:bd:
         30:f8:24:5e:b8:2d:62:cb:8b:a3:05:fb:67:af:40:ec:71:6b:
         a2:78:92:f0:d9:ee:bc:5a:dc:17:7d:b1:24:f4:13:7b:a1:d3:
         c1:6e:59:2c:ca:d7:e6:b9:b1:39:f3:e7:09:8d:fd:de:b7:82:
         f6:c8:19:97:66:ec:f5:8b:40:f7:fb:82:1b:0c:ff:36:bc:27:
         d2:57:1f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org