Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32322d3232203d3e20323633333834.roa
File:                     3137372e38372e32382e302f32322d3232203d3e20323633333834.roa (raw, json)
Hash identifier:          Mh8gaQU1ehkb0GqhWBsuJE86tkq/nDrhj7jNCZiBWwc=
Subject key identifier:   DC:05:17:AC:75:DD:75:BE:7F:43:D4:E1:B5:27:B3:DB:67:7B:86:90
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       405B5398581B48FD5E838C90D962CDADDF0D3E0D
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32322d3232203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:54 +0000
ROA not before:           Thu 04 Apr 2024 13:24:54 +0000
ROA not after:            Thu 03 Apr 2025 13:29:54 +0000
asID:                     263384
IP address blocks:        177.87.28.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5b:53:98:58:1b:48:fd:5e:83:8c:90:d9:62:cd:ad:df:0d:3e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:54 2024 GMT
            Not After : Apr  3 13:29:54 2025 GMT
        Subject: CN=DC0517AC75DD75BE7F43D4E1B527B3DB677B8690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:cb:54:51:1f:8b:7d:ed:66:09:5e:61:fc:
                    57:ac:dd:c9:74:00:64:25:6c:91:a0:a9:9a:e9:a2:
                    ae:f4:71:70:23:c3:ed:2d:69:66:11:7b:5a:07:d0:
                    23:42:70:f1:06:ef:0a:88:f8:0f:85:77:16:dc:a7:
                    20:5a:0e:b4:c5:62:7b:95:5c:57:3c:03:15:6a:b2:
                    46:ee:69:d8:23:08:28:dd:18:90:01:ca:e2:4c:f4:
                    79:f8:f7:45:63:f3:55:39:74:83:1b:42:81:6e:ce:
                    6f:53:f6:65:1c:40:ae:dd:0b:39:7f:f1:02:e8:80:
                    0e:61:d3:eb:02:9f:bf:bf:b3:b8:e7:f1:0f:1b:9d:
                    ae:c1:5c:39:ef:6b:4b:3b:f8:9b:3c:e5:b6:7e:1a:
                    52:89:71:32:f4:30:a7:4d:ae:ff:25:13:15:61:8e:
                    7b:04:90:e8:8c:59:30:88:3c:6e:56:cf:f2:42:5c:
                    6d:cd:71:9f:dd:4a:f5:a3:49:45:d0:20:94:c7:ff:
                    bc:6f:de:29:ba:88:fd:8b:7a:69:ea:c3:ec:90:be:
                    40:d5:a5:99:cd:d9:51:43:27:b9:7a:e9:70:c8:d4:
                    9e:2e:87:90:dd:f3:6d:e8:fd:bf:08:c9:95:02:3a:
                    3e:36:90:77:e3:fd:aa:0c:a8:b4:72:07:0a:65:68:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:05:17:AC:75:DD:75:BE:7F:43:D4:E1:B5:27:B3:DB:67:7B:86:90
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32322d3232203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:dd:7f:3d:e2:bb:66:03:69:95:1b:b3:bd:f3:89:26:b8:
         3e:7a:e2:a9:4c:3a:39:c4:89:03:07:09:9e:7f:45:8a:53:f5:
         eb:7e:93:7b:1c:cb:f2:93:3f:e7:cb:91:94:05:dd:d0:6f:bd:
         16:1f:13:0e:87:3f:16:90:52:2b:8b:9b:1d:ad:20:e7:b3:db:
         f1:9c:da:c6:4c:5a:26:f0:a2:d0:f9:42:39:41:12:f6:b2:4d:
         d0:6b:bb:17:a1:13:6f:c4:c9:1f:a2:a7:af:97:11:35:ae:03:
         a7:f4:27:c4:1e:c5:11:e1:ba:46:83:36:ac:cd:dd:1a:4e:c3:
         e8:fa:bd:0c:96:57:f2:1a:3c:2b:17:12:c1:30:d4:da:2f:92:
         09:45:a2:e9:a6:23:6d:4d:16:72:01:d8:7f:ec:69:65:55:d5:
         af:1c:77:41:78:f6:d3:23:70:95:1e:6b:e9:11:62:b5:04:d6:
         6c:c4:31:28:1a:88:db:e7:ff:0c:bb:fa:c2:29:2b:eb:8c:55:
         4f:4e:cf:0d:18:41:77:f6:c6:f5:a4:93:c1:68:66:47:02:54:
         8b:6f:76:d0:39:aa:41:88:9a:a4:09:05:f5:eb:41:b3:67:33:
         6a:52:d6:f1:fb:14:0b:fa:ec:d1:ab:d0:70:99:29:cc:c2:d4:
         12:35:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org