Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa
File:                     3137372e36372e32382e302f32322d3232203d3e20323632333234.roa (raw, json)
Hash identifier:          6N7IwFTE6ppgEXCCumYdhJgwWVx0jdLAABRG0jKMpBY=
Subject key identifier:   A6:E0:68:6E:9E:4B:53:F7:5A:9A:B6:CD:48:6F:39:5C:61:AB:00:7F
Certificate issuer:       /CN=A700B738441CDD3978A0EECBB6A84022929D91AC
Certificate serial:       41F32E12DD7378F45F0B2EFE497227FFC4F20426
Authority key identifier: A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa
Signing time:             Mon 08 Jul 2024 16:53:11 +0000
ROA not before:           Mon 08 Jul 2024 16:48:11 +0000
ROA not after:            Mon 07 Jul 2025 16:53:11 +0000
asID:                     262324
IP address blocks:        177.67.28.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f3:2e:12:dd:73:78:f4:5f:0b:2e:fe:49:72:27:ff:c4:f2:04:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A700B738441CDD3978A0EECBB6A84022929D91AC
        Validity
            Not Before: Jul  8 16:48:11 2024 GMT
            Not After : Jul  7 16:53:11 2025 GMT
        Subject: CN=A6E0686E9E4B53F75A9AB6CD486F395C61AB007F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:cc:e3:43:55:c0:e5:7b:84:cd:1e:2f:b7:
                    e9:51:8f:09:12:06:9b:b0:c1:38:c8:06:f7:77:db:
                    b3:96:14:63:bc:9f:e8:e7:16:60:0c:cb:ef:55:9e:
                    41:33:6f:3b:ab:c1:87:5e:84:29:90:00:bb:a7:ec:
                    d7:ce:c4:e0:7b:94:b9:aa:02:ec:b2:eb:01:9f:a5:
                    c1:c4:a5:be:95:c8:f6:b8:f5:7b:c6:85:53:cb:58:
                    5d:59:0e:f7:ba:8f:35:56:36:12:6f:90:06:e4:21:
                    7d:b1:1e:12:3d:36:72:61:8c:88:bb:19:0f:6f:35:
                    da:99:a9:5b:93:a5:7d:9a:2b:a8:b5:7e:f2:61:6a:
                    02:92:79:e0:12:38:9b:09:ea:61:b3:d5:21:73:fc:
                    e5:92:38:a6:bc:f0:e0:ee:24:3a:ce:8e:84:82:28:
                    ac:e5:ec:24:75:f6:1e:9c:df:41:ff:4b:0a:21:9c:
                    a5:98:b5:5b:ca:8b:ca:c1:54:60:96:e6:57:0a:aa:
                    0a:89:2e:34:c9:e6:14:bc:e9:36:17:be:49:88:a8:
                    b7:40:d5:e5:26:db:94:35:e4:13:e1:7a:cd:26:95:
                    35:f7:79:ab:2f:fd:b4:c6:05:e2:45:d7:1a:42:20:
                    bb:1d:da:ae:eb:8f:67:d1:82:93:f8:6c:29:09:fa:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E0:68:6E:9E:4B:53:F7:5A:9A:B6:CD:48:6F:39:5C:61:AB:00:7F
            X509v3 Authority Key Identifier:
                keyid:A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/A700B738441CDD3978A0EECBB6A84022929D91AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:65:3c:8a:aa:96:13:cf:64:56:e3:de:cc:71:a6:65:1b:a1:
         e5:a9:41:d3:9c:31:f0:45:5d:94:d3:67:f6:73:c5:81:e6:19:
         d3:2c:33:cf:fd:24:75:5d:a4:17:58:2e:2d:4f:4d:aa:77:b8:
         10:99:40:cf:7b:cf:1e:ca:c6:86:32:52:71:94:48:09:69:36:
         6f:de:53:3a:4b:09:03:01:fa:90:31:ba:a1:56:8f:33:90:9a:
         b7:c8:5b:ec:c2:79:99:1d:49:25:59:ee:22:6f:49:6d:8d:be:
         ff:2f:5e:fa:b3:f3:ea:f4:84:e2:76:1c:1e:f2:db:e0:17:1f:
         d1:17:41:06:90:8a:6e:eb:f0:12:dd:ba:ef:f4:ab:1e:e5:1f:
         b8:e0:60:92:01:64:fa:6c:40:11:6e:ec:e3:45:f6:30:df:bd:
         aa:40:d0:2c:84:4a:86:e9:1b:14:d3:f5:2d:2d:f4:b7:e8:bc:
         61:f2:88:ea:c9:23:e1:6e:4e:77:ef:b8:56:41:a1:54:39:68:
         8c:6c:d9:e6:db:71:62:f1:da:00:ca:aa:30:9d:dd:bf:a3:68:
         1f:24:dd:1d:af:49:6a:01:ec:92:f7:00:0f:41:05:44:88:af:
         64:e8:83:34:75:29:46:41:c2:45:40:a1:48:26:a0:9a:71:b1:
         08:f9:91:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:35 2024 by rpki-client on console-ams.rpki-client.org