Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130332e302f32342d3234203d3e20323731333336.roa
File:                     3137372e37312e3130332e302f32342d3234203d3e20323731333336.roa (raw, json)
Hash identifier:          RhMAG1h0eu5urPrcYl1PpSg9CSATgX/MbU1FBgQIGts=
Subject key identifier:   F9:C5:2A:49:45:09:F0:E6:26:C5:87:E8:97:AE:E0:91:57:95:5E:70
Certificate issuer:       /CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
Certificate serial:       2C600751145DC5EE4E3D42C548EA9FF4558C45DB
Authority key identifier: 49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130332e302f32342d3234203d3e20323731333336.roa
Signing time:             Thu 04 Apr 2024 01:17:30 +0000
ROA not before:           Thu 04 Apr 2024 01:12:30 +0000
ROA not after:            Thu 03 Apr 2025 01:17:30 +0000
asID:                     271336
IP address blocks:        177.71.103.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:60:07:51:14:5d:c5:ee:4e:3d:42:c5:48:ea:9f:f4:55:8c:45:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Validity
            Not Before: Apr  4 01:12:30 2024 GMT
            Not After : Apr  3 01:17:30 2025 GMT
        Subject: CN=F9C52A494509F0E626C587E897AEE09157955E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:a4:07:f9:08:ca:84:4f:db:92:71:a6:5f:
                    21:88:2f:9f:9d:ac:4c:0e:b1:cf:a3:2c:8b:92:74:
                    ca:b5:ca:df:1c:7d:96:6e:6e:06:05:85:54:84:b6:
                    db:5b:f4:3f:c4:f1:dc:87:3e:c8:06:9a:43:5e:1a:
                    dc:d5:35:54:d5:27:a0:4f:d8:34:c8:4e:f1:1b:fe:
                    22:1e:a2:a5:57:5d:f9:4e:19:73:6a:b3:e9:10:40:
                    ee:eb:c7:6f:aa:11:ca:b3:81:40:50:ae:b6:ef:01:
                    ea:2a:82:68:a2:8c:34:a4:dd:c1:5f:80:bf:4d:a4:
                    4b:32:f6:56:8e:d0:8d:53:0f:6a:24:86:38:81:f0:
                    91:72:47:3d:30:18:06:01:a7:23:b8:63:8d:13:e7:
                    01:0d:1b:c0:6b:d3:1a:15:a2:06:59:1d:5a:ed:a3:
                    7d:19:ba:26:6d:87:ca:4b:67:56:79:51:36:34:08:
                    dc:54:49:a6:e9:f4:68:93:91:0b:27:df:c5:e2:f4:
                    71:cd:22:d6:46:0c:af:9f:99:7c:18:ab:1b:03:0f:
                    d4:0e:15:41:06:07:e5:fd:92:bf:51:41:a6:02:62:
                    9c:20:f4:7a:3f:4c:ed:b4:63:d5:03:97:20:cb:2d:
                    c9:0f:c8:75:c1:5e:3d:60:d7:43:bb:da:2a:1e:2b:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C5:2A:49:45:09:F0:E6:26:C5:87:E8:97:AE:E0:91:57:95:5E:70
            X509v3 Authority Key Identifier:
                keyid:49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130332e302f32342d3234203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:72:2e:fc:c1:da:5f:b2:7f:76:b5:49:d1:49:16:fa:a1:eb:
         55:e0:6c:de:e2:96:d2:c2:27:60:1c:f4:a5:9f:0c:03:ac:a6:
         c2:64:7a:6b:bd:e5:b9:62:2c:a2:76:4b:90:39:5f:08:d7:c8:
         c7:80:2f:8b:00:86:8c:84:f8:80:ff:54:51:ea:49:68:84:09:
         f5:13:63:8f:c0:7e:19:a2:59:ce:0d:88:ea:cd:56:62:59:7c:
         4e:96:48:49:c4:47:5d:ba:08:74:82:4b:47:9a:ac:ac:b0:c2:
         fd:73:f3:5e:5f:58:ce:8a:fa:06:92:ee:06:5d:31:cc:e3:95:
         8b:6d:b2:a2:b1:85:b1:8e:72:50:1d:dd:45:67:18:b8:ba:b4:
         73:e9:6b:91:0b:5d:43:d3:d6:a2:d9:36:fa:40:bc:ce:5f:5c:
         37:39:44:0d:1a:4f:f7:fb:5f:8d:7e:ad:c2:50:8d:f3:be:c9:
         1f:94:9f:04:98:a3:3b:a8:c2:62:43:4f:3b:51:da:8b:0a:84:
         50:2f:21:ff:f9:e5:d3:74:10:7f:35:40:79:4f:57:1e:1f:e5:
         30:6c:f3:30:a3:86:d8:a6:e5:a0:ff:f3:e6:78:e6:23:fa:d5:
         7f:85:42:bd:2b:d8:80:17:ea:86:71:64:8e:3f:bf:fa:17:57:
         11:5f:14:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULGAHURRdxe5OPULFSOqf9FWMRdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDNkU1REM3MjZBOTc0MzYzNkRDRkVBRTgxMDY5QjVF
Qzk3REVGQzAeFw0yNDA0MDQwMTEyMzBaFw0yNTA0MDMwMTE3MzBaMDMxMTAvBgNV
BAMTKEY5QzUyQTQ5NDUwOUYwRTYyNkM1ODdFODk3QUVFMDkxNTc5NTVFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqzqQH+QjKhE/bknGmXyGIL5+d
rEwOsc+jLIuSdMq1yt8cfZZubgYFhVSEtttb9D/E8dyHPsgGmkNeGtzVNVTVJ6BP
2DTITvEb/iIeoqVXXflOGXNqs+kQQO7rx2+qEcqzgUBQrrbvAeoqgmiijDSk3cFf
gL9NpEsy9laO0I1TD2okhjiB8JFyRz0wGAYBpyO4Y40T5wENG8Br0xoVogZZHVrt
o30ZuiZth8pLZ1Z5UTY0CNxUSabp9GiTkQsn38Xi9HHNItZGDK+fmXwYqxsDD9QO
FUEGB+X9kr9RQaYCYpwg9Ho/TO20Y9UDlyDLLckPyHXBXj1g10O72ioeK03/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+cUqSUUJ8OYmxYfol67gkVeVXnAwHwYDVR0j
BBgwFoAUScbl3HJql0Njbc/q6BBpteyX3vwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG03aXdiY1JSeVA5am5aWFo5a1Fpc2ljTEVwNXhHRGE5VzVGc0hqc0du
S2EvMS80OUM2RTVEQzcyNkE5NzQzNjM2RENGRUFFODEwNjlCNUVDOTdERUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5QzZFNURDNzI2QTk3NDM2
MzZEQ0ZFQUU4MTA2OUI1RUM5N0RFRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RtN2l3YmNSUnlQOWpuWlhaOWtRaXNpY0xFcDV4R0RhOVc1RnNIanNHbkthLzEv
MzEzNzM3MmUzNzMxMmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxR2cwDQYJKoZIhvcNAQELBQADggEBAEtyLvzB
2l+yf3a1SdFJFvqh61XgbN7iltLCJ2Ac9KWfDAOspsJkemu95bliLKJ2S5A5XwjX
yMeAL4sAhoyE+ID/VFHqSWiECfUTY4/AfhmiWc4NiOrNVmJZfE6WSEnER126CHSC
S0earKywwv1z815fWM6K+gaS7gZdMczjlYttsqKxhbGOclAd3UVnGLi6tHPpa5EL
XUPT1qLZNvpAvM5fXDc5RA0aT/f7X41+rcJQjfO+yR+UnwSYozuowmJDTztR2osK
hFAvIf/55dN0EH81QHlPVx4f5TBs8zCjhtim5aD/8+Z45iP61X+FQr0r2IAX6oZx
ZI4/v/oXVxFfFE0=
-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org