Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133322e302f32322d3234203d3e20323730373832.roa
File:                     3137372e3133312e3133322e302f32322d3234203d3e20323730373832.roa (raw, json)
Hash identifier:          cDK/51JQ0C+KA+/vIxjzqkhxFpMUhmEap2Uv5jFAMoA=
Subject key identifier:   37:B1:EC:58:EE:14:84:01:8E:C5:45:DD:0B:71:17:EE:B4:C2:DF:2F
Certificate issuer:       /CN=30FCF6B95C13532FFA68FBDE06398E532B394F31
Certificate serial:       3D977F6BAA33FD9529167E468A0E953F0DC7F214
Authority key identifier: 30:FC:F6:B9:5C:13:53:2F:FA:68:FB:DE:06:39:8E:53:2B:39:4F:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FCF6B95C13532FFA68FBDE06398E532B394F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133322e302f32322d3234203d3e20323730373832.roa
Signing time:             Fri 02 Aug 2024 17:51:18 +0000
ROA not before:           Fri 02 Aug 2024 17:46:18 +0000
ROA not after:            Fri 01 Aug 2025 17:51:18 +0000
asID:                     270782
IP address blocks:        177.131.132.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:97:7f:6b:aa:33:fd:95:29:16:7e:46:8a:0e:95:3f:0d:c7:f2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FCF6B95C13532FFA68FBDE06398E532B394F31
        Validity
            Not Before: Aug  2 17:46:18 2024 GMT
            Not After : Aug  1 17:51:18 2025 GMT
        Subject: CN=37B1EC58EE1484018EC545DD0B7117EEB4C2DF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:39:64:73:34:ff:76:ad:fe:d0:0d:78:f8:
                    d4:c4:03:99:de:23:a1:aa:5d:91:93:94:96:4e:ba:
                    2d:8d:b2:07:13:dd:d2:cc:c0:9b:41:c3:97:3b:6a:
                    6c:61:ae:77:39:ae:4b:e2:f7:13:4a:db:da:d3:1a:
                    86:dd:f5:06:91:cd:15:fd:b1:ca:94:c5:e2:f4:4e:
                    a3:d3:f3:da:ac:0f:be:98:d9:56:4b:e8:e7:2c:f8:
                    28:8d:e3:7e:95:4a:b9:e7:88:6f:d9:45:50:66:48:
                    f0:3d:6e:97:eb:3d:6e:cd:96:a1:ac:74:cd:ce:b4:
                    fe:90:f2:27:ee:e8:51:8c:a9:30:46:14:fb:8e:20:
                    f6:14:e2:6d:9e:d0:29:ef:90:ad:82:bb:8d:1a:b6:
                    e5:d2:9f:1e:1a:f7:f0:07:8c:df:09:1b:b2:be:3f:
                    e8:ae:96:3d:18:ec:3d:37:a4:eb:97:e5:99:4c:20:
                    a9:5c:d3:7d:79:02:ae:ca:41:e5:f6:2d:3c:14:21:
                    fb:dd:36:64:46:3b:17:12:c6:48:db:b9:10:cd:f0:
                    74:d8:20:5e:41:f4:d2:29:c3:3d:86:af:81:24:36:
                    1c:51:7f:62:ce:ef:b0:1a:fa:1b:ca:01:56:80:c3:
                    b0:7c:0e:b7:d5:ca:52:b1:03:f0:4f:e9:2c:7b:8e:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B1:EC:58:EE:14:84:01:8E:C5:45:DD:0B:71:17:EE:B4:C2:DF:2F
            X509v3 Authority Key Identifier:
                keyid:30:FC:F6:B9:5C:13:53:2F:FA:68:FB:DE:06:39:8E:53:2B:39:4F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/30FCF6B95C13532FFA68FBDE06398E532B394F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FCF6B95C13532FFA68FBDE06398E532B394F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133322e302f32322d3234203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:18:c3:c2:78:d4:b6:b6:15:fb:a8:bb:9b:22:29:b4:74:
         3a:0e:79:9c:c4:d7:53:3c:d4:b2:3a:80:f3:de:4f:cf:fb:0b:
         e8:ca:b4:a1:d5:88:9d:a7:64:a9:d9:68:e8:25:62:cd:1d:3a:
         d7:63:00:3b:3e:6f:6e:6b:7a:b7:aa:87:e2:ed:89:6c:d9:6f:
         36:79:d6:84:5f:f7:c8:29:57:e2:d9:86:f1:52:25:43:33:02:
         4a:3f:f1:0c:a2:05:9c:c3:81:3a:42:bd:b1:c8:dd:53:5d:4b:
         a4:9f:8a:0c:2b:15:96:5a:91:3d:70:b2:83:6b:c3:ca:50:20:
         cf:fb:34:27:8b:7f:8f:a4:c6:8f:a7:9d:f1:aa:5f:7a:d1:86:
         61:0d:e1:fe:02:75:17:aa:ec:a9:69:df:d3:d1:14:31:dd:a4:
         cd:d6:8a:54:ef:76:db:0d:7b:5b:b0:44:38:79:3f:1a:5a:af:
         e3:c7:f4:90:4a:f2:fb:e2:e6:ba:d0:fe:58:b2:84:4e:ea:0d:
         70:e9:94:95:7b:b1:67:3d:0b:1b:bf:8b:87:e8:4d:f8:00:c6:
         69:7e:84:89:29:2a:3c:ee:50:4f:58:91:11:da:96:4b:46:e3:
         37:22:1a:43:ba:cd:88:78:30:94:1a:2d:5b:16:6c:eb:f3:92:
         51:4b:6a:1b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPZd/a6oz/ZUpFn5Gig6VPw3H8hQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBGQ0Y2Qjk1QzEzNTMyRkZBNjhGQkRFMDYzOThFNTMy
QjM5NEYzMTAeFw0yNDA4MDIxNzQ2MThaFw0yNTA4MDExNzUxMThaMDMxMTAvBgNV
BAMTKDM3QjFFQzU4RUUxNDg0MDE4RUM1NDVERDBCNzExN0VFQjRDMkRGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl6DlkczT/dq3+0A14+NTEA5ne
I6GqXZGTlJZOui2NsgcT3dLMwJtBw5c7amxhrnc5rkvi9xNK29rTGobd9QaRzRX9
scqUxeL0TqPT89qsD76Y2VZL6Ocs+CiN436VSrnniG/ZRVBmSPA9bpfrPW7NlqGs
dM3OtP6Q8ifu6FGMqTBGFPuOIPYU4m2e0CnvkK2Cu40atuXSnx4a9/AHjN8JG7K+
P+iulj0Y7D03pOuX5ZlMIKlc0315Aq7KQeX2LTwUIfvdNmRGOxcSxkjbuRDN8HTY
IF5B9NIpwz2Gr4EkNhxRf2LO77Aa+hvKAVaAw7B8DrfVylKxA/BP6Sx7jgEnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUN7HsWO4UhAGOxUXdC3EX7rTC3y8wHwYDVR0j
BBgwFoAUMPz2uVwTUy/6aPveBjmOUys5TzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZxZ2tRUXN2c1hTb2oyaFMyd3RtMVhSZFVWcnB5YjdveHBvRzhtUjI3
QlcvMC8zMEZDRjZCOTVDMTM1MzJGRkE2OEZCREUwNjM5OEU1MzJCMzk0RjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwRkNGNkI5NUMxMzUzMkZG
QTY4RkJERTA2Mzk4RTUzMkIzOTRGMzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGcWdrUVFzdnNYU29qMmhTMnd0bTFYUmRVVnJweWI3b3hwb0c4bVIyN0JXLzAv
MzEzNzM3MmUzMTMzMzEyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGDhDANBgkqhkiG9w0BAQsFAAOCAQEAB04Y
w8J41La2Ffuou5siKbR0Og55nMTXUzzUsjqA895Pz/sL6Mq0odWInadkqdlo6CVi
zR0612MAOz5vbmt6t6qH4u2JbNlvNnnWhF/3yClX4tmG8VIlQzMCSj/xDKIFnMOB
OkK9scjdU11LpJ+KDCsVllqRPXCyg2vDylAgz/s0J4t/j6TGj6ed8apfetGGYQ3h
/gJ1F6rsqWnf09EUMd2kzdaKVO922w17W7BEOHk/Glqv48f0kEry++LmutD+WLKE
TuoNcOmUlXuxZz0LG7+Lh+hN+ADGaX6EiSkqPO5QT1iREdqWS0bjNyIaQ7rNiHgw
lBotWxZs6/OSUUtqGw==
-----END CERTIFICATE-----
Generated at Thu Sep 19 09:37:21 2024 by rpki-client on console-ams.rpki-client.org