Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3137372e3132342e3133362e302f32322d3232203d3e20323632333234.roa
File:                     3137372e3132342e3133362e302f32322d3232203d3e20323632333234.roa (raw, json)
Hash identifier:          lc6QQgqQJpFTTFcTCe3dUQP09dPNzia2uMgN0Hb3CUA=
Subject key identifier:   0F:97:41:C2:AE:8C:FA:C4:C3:BF:82:DC:4F:AC:50:4F:44:AB:0D:48
Certificate issuer:       /CN=A700B738441CDD3978A0EECBB6A84022929D91AC
Certificate serial:       276FBC173C0F0279BED13649AFF6289FE672586F
Authority key identifier: A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3137372e3132342e3133362e302f32322d3232203d3e20323632333234.roa
Signing time:             Mon 08 Jul 2024 16:53:10 +0000
ROA not before:           Mon 08 Jul 2024 16:48:10 +0000
ROA not after:            Mon 07 Jul 2025 16:53:10 +0000
asID:                     262324
IP address blocks:        177.124.136.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6f:bc:17:3c:0f:02:79:be:d1:36:49:af:f6:28:9f:e6:72:58:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A700B738441CDD3978A0EECBB6A84022929D91AC
        Validity
            Not Before: Jul  8 16:48:10 2024 GMT
            Not After : Jul  7 16:53:10 2025 GMT
        Subject: CN=0F9741C2AE8CFAC4C3BF82DC4FAC504F44AB0D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:67:c5:fa:b6:6e:a9:6b:01:95:32:6c:ee:
                    4c:a9:41:e8:8e:46:bc:5d:89:c1:89:bd:1f:85:fc:
                    35:76:ad:0b:d9:9c:ef:38:6b:21:42:d4:26:80:e8:
                    2d:eb:b5:fb:e5:60:09:3a:3b:e7:d0:65:b8:0c:e4:
                    f2:ab:78:cd:e3:39:94:bc:87:ed:6a:a5:0e:f6:ab:
                    c3:56:90:13:f1:21:d1:a0:d9:e2:d1:f0:4f:d9:c6:
                    e4:41:c9:f1:bf:35:6e:4c:99:8c:bf:0c:db:1e:d7:
                    3d:fb:a8:cb:13:b0:0b:2a:0b:80:36:47:12:25:88:
                    16:a6:b4:58:36:ca:8b:3f:22:65:67:d3:53:30:1d:
                    95:73:a1:45:1c:44:ae:25:e7:2b:60:fe:5c:79:73:
                    3a:d8:7e:fa:1c:49:1c:97:ce:6b:ac:27:ee:80:bc:
                    e5:96:70:a7:23:e2:f6:c1:1d:c5:e7:7c:8a:ac:8b:
                    d5:69:2e:c4:e4:91:6c:10:8f:39:1e:4b:dd:9f:e8:
                    32:53:c0:b9:23:f5:a2:d6:06:ae:ba:89:8b:ae:a0:
                    0d:d8:45:52:42:ec:fe:66:8a:2a:9e:73:6c:2f:18:
                    0b:fa:0a:7e:51:65:c7:60:b1:93:e3:67:4b:84:38:
                    02:dc:7b:f5:b2:18:86:55:f3:ea:c4:f1:6e:2e:51:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:97:41:C2:AE:8C:FA:C4:C3:BF:82:DC:4F:AC:50:4F:44:AB:0D:48
            X509v3 Authority Key Identifier:
                keyid:A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/A700B738441CDD3978A0EECBB6A84022929D91AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3137372e3132342e3133362e302f32322d3232203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:0a:79:8b:e9:d0:8f:47:a0:da:e8:7d:cc:a0:72:8a:db:
         31:e1:8a:d9:dc:72:cb:3c:6c:f4:ac:ae:67:6d:50:b4:d3:d1:
         95:5b:35:0c:e9:6e:9a:14:d0:7e:08:5e:e6:39:15:6b:1d:f4:
         6b:e6:6f:ae:dd:6a:55:4a:8b:43:93:87:f3:85:ab:44:7c:0b:
         4f:28:f7:41:ee:1d:e1:49:ca:55:f8:b4:2f:29:8a:a2:15:b7:
         b8:44:79:75:93:74:f0:38:4e:a1:a0:47:6a:9d:81:00:b6:c0:
         08:43:3c:b0:d1:06:6b:4e:c4:5d:73:f8:8c:8f:8f:36:34:e5:
         23:6e:5f:20:3a:12:cb:92:7e:05:2d:bd:b3:b7:26:45:25:28:
         a6:2a:c9:cd:7e:07:d9:39:76:fa:89:9b:61:ea:c7:59:30:03:
         d0:ba:b0:e1:8d:8b:57:f8:bd:40:74:0a:d8:bb:92:b0:23:68:
         74:cf:f3:ee:d0:b5:fb:d3:66:12:12:d5:88:48:f2:1a:6c:0c:
         ae:07:4f:1d:57:dc:a0:b0:84:e3:c8:43:27:f2:46:1f:10:80:
         96:4c:38:8c:1e:23:3b:fe:62:b2:f6:c6:50:ef:d6:54:b6:6c:
         b9:8a:7c:0e:10:58:b6:12:52:cb:d5:c3:47:b0:b6:15:b9:f4:
         3a:24:b0:8a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ2+8FzwPAnm+0TZJr/Yon+ZyWG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcwMEI3Mzg0NDFDREQzOTc4QTBFRUNCQjZBODQwMjI5
MjlEOTFBQzAeFw0yNDA3MDgxNjQ4MTBaFw0yNTA3MDcxNjUzMTBaMDMxMTAvBgNV
BAMTKDBGOTc0MUMyQUU4Q0ZBQzRDM0JGODJEQzRGQUM1MDRGNDRBQjBENDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSLWfF+rZuqWsBlTJs7kypQeiO
RrxdicGJvR+F/DV2rQvZnO84ayFC1CaA6C3rtfvlYAk6O+fQZbgM5PKreM3jOZS8
h+1qpQ72q8NWkBPxIdGg2eLR8E/ZxuRByfG/NW5MmYy/DNse1z37qMsTsAsqC4A2
RxIliBamtFg2yos/ImVn01MwHZVzoUUcRK4l5ytg/lx5czrYfvocSRyXzmusJ+6A
vOWWcKcj4vbBHcXnfIqsi9VpLsTkkWwQjzkeS92f6DJTwLkj9aLWBq66iYuuoA3Y
RVJC7P5miiqec2wvGAv6Cn5RZcdgsZPjZ0uEOALce/WyGIZV8+rE8W4uUbUXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUD5dBwq6M+sTDv4LcT6xQT0SrDUgwHwYDVR0j
BBgwFoAUpwC3OEQc3Tl4oO7LtqhAIpKdkawwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzEvQTcwMEI3Mzg0NDFDREQzOTc4QTBFRUNCQjZBODQwMjI5MjlEOTFBQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNzAwQjczODQ0MUNERDM5NzhB
MEVFQ0JCNkE4NDAyMjkyOUQ5MUFDLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzEvMzEz
NzM3MmUzMTMyMzQyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
MjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEArF8iDANBgkqhkiG9w0BAQsFAAOCAQEAecEKeYvp
0I9HoNrofcygcorbMeGK2dxyyzxs9KyuZ21QtNPRlVs1DOlumhTQfghe5jkVax30
a+Zvrt1qVUqLQ5OH84WrRHwLTyj3Qe4d4UnKVfi0LymKohW3uER5dZN08DhOoaBH
ap2BALbACEM8sNEGa07EXXP4jI+PNjTlI25fIDoSy5J+BS29s7cmRSUopirJzX4H
2Tl2+ombYerHWTAD0Lqw4Y2LV/i9QHQK2LuSsCNodM/z7tC1+9NmEhLViEjyGmwM
rgdPHVfcoLCE48hDJ/JGHxCAlkw4jB4jO/5isvbGUO/WVLZsuYp8DhBYthJSy9XD
R7C2Fbn0OiSwig==
-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:35 2024 by rpki-client on console-ams.rpki-client.org