Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa
File:                     3137372e33382e34382e302f32312d3234203d3e20323632393131.roa (raw, json)
Hash identifier:          nkgDMvZGb4/ql99L5dytUR2I7oVymsTYvPeQiptwxb8=
Subject key identifier:   F3:8A:1E:2C:0E:78:EE:49:2F:F5:2E:A3:D1:DF:7F:F0:9E:B7:28:68
Certificate issuer:       /CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
Certificate serial:       5231B6D5DF7B8F8F8247D3A3A1207008FB8AAE79
Authority key identifier: 0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa
Signing time:             Thu 17 Oct 2024 20:28:24 +0000
ROA not before:           Thu 17 Oct 2024 20:23:24 +0000
ROA not after:            Thu 16 Oct 2025 20:28:24 +0000
asID:                     262911
IP address blocks:        177.38.48.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:31:b6:d5:df:7b:8f:8f:82:47:d3:a3:a1:20:70:08:fb:8a:ae:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
        Validity
            Not Before: Oct 17 20:23:24 2024 GMT
            Not After : Oct 16 20:28:24 2025 GMT
        Subject: CN=F38A1E2C0E78EE492FF52EA3D1DF7FF09EB72868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:76:4a:8c:99:79:f7:09:ef:bd:70:69:0f:
                    d6:f6:d0:9c:ac:24:3b:35:a1:68:43:33:b8:93:5f:
                    e4:ab:0f:9f:77:f8:2a:8e:58:65:a1:e6:51:04:23:
                    93:26:14:78:8b:47:b9:62:12:e7:93:dd:d7:c2:19:
                    ae:a1:92:5d:9c:4c:f3:74:51:b0:c1:66:e7:1a:0e:
                    75:3f:5b:04:ae:4c:c5:0a:a9:4b:a0:88:37:92:8e:
                    c4:d7:6c:81:d6:da:cc:9b:32:f4:19:d3:19:f9:2a:
                    51:97:65:89:df:c8:a1:40:5a:a6:30:2c:3a:9a:68:
                    85:39:9f:87:43:f9:c0:80:f8:ee:69:84:70:2f:59:
                    71:76:3d:53:78:8c:98:4e:5d:62:da:dc:61:90:6a:
                    a9:53:77:0f:dc:85:04:87:57:5c:59:c5:65:16:4f:
                    94:ca:19:4e:e4:b5:bf:83:0d:34:d3:92:54:20:4a:
                    27:b3:85:42:b8:20:14:27:25:48:62:fc:aa:5f:0d:
                    58:44:d6:26:cd:31:ad:e1:dc:59:ca:fd:42:5f:9c:
                    68:27:bc:80:e7:d7:24:03:22:87:4b:07:d3:b2:5a:
                    bc:a7:2b:3e:d3:85:b6:43:b4:c6:4d:20:ba:7d:9a:
                    d4:65:e8:ba:91:a2:90:f0:5f:d8:37:f3:67:c5:34:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8A:1E:2C:0E:78:EE:49:2F:F5:2E:A3:D1:DF:7F:F0:9E:B7:28:68
            X509v3 Authority Key Identifier:
                keyid:0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:86:26:61:12:6e:3a:b4:a4:76:a5:74:16:e0:94:1d:9b:1b:
         3a:de:37:ee:3d:46:5c:25:f1:e6:95:fc:6e:03:ec:a9:3c:f9:
         3c:7a:37:6d:35:54:03:9f:96:45:d2:82:a1:c6:23:e4:33:51:
         16:43:22:66:75:94:0e:b5:66:cb:c4:20:88:53:c5:ad:29:28:
         1b:c6:c0:db:fa:e4:60:c1:3b:65:fe:8a:7e:b5:e1:05:61:f9:
         6d:57:c6:a0:b6:05:07:94:d2:d6:12:94:52:de:5d:4f:04:99:
         fc:49:c5:8e:d1:a9:97:ec:05:61:de:25:48:ee:dc:fc:4b:d0:
         01:82:25:4d:cd:e5:9c:81:d4:91:e5:b7:01:c3:22:6b:2a:6c:
         a1:0d:5d:8c:4c:a9:3b:fe:92:b7:a6:31:13:3d:f9:6f:f8:7a:
         19:8e:af:c6:46:0d:db:2b:d4:b7:1a:7f:9c:b4:9b:e7:ec:19:
         9c:39:53:8a:66:fb:e4:6b:bb:89:e2:75:0d:63:e9:a6:0a:78:
         3b:9f:ba:ae:87:47:30:26:b6:08:b1:08:0d:6a:8b:05:68:89:
         73:4d:28:73:c0:f1:84:d2:5f:21:27:e7:ad:03:5d:6e:55:41:
         a9:10:cf:c7:48:3f:f7:04:4a:83:47:4b:1e:51:62:a1:8d:c7:
         78:ee:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:26 2024 by rpki-client on console-fra.rpki-client.org