Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32332d3233203d3e20323633333834.roa
File:                     3137372e38372e32382e302f32332d3233203d3e20323633333834.roa (raw, json)
Hash identifier:          4qsfQ6haT5qfNp44hFOv9AZ4bFIwKltiCR+OPuc1vkc=
Subject key identifier:   8C:1C:ED:C8:26:FF:39:92:53:92:DF:E2:9F:39:08:D1:86:AB:53:D5
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       7BD06C8757214066A1FFE6280CD48E80B905428E
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32332d3233203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:53 +0000
ROA not before:           Thu 04 Apr 2024 13:24:53 +0000
ROA not after:            Thu 03 Apr 2025 13:29:53 +0000
asID:                     263384
IP address blocks:        177.87.28.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d0:6c:87:57:21:40:66:a1:ff:e6:28:0c:d4:8e:80:b9:05:42:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:53 2024 GMT
            Not After : Apr  3 13:29:53 2025 GMT
        Subject: CN=8C1CEDC826FF39925392DFE29F3908D186AB53D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:52:5f:39:97:3e:7d:f9:fc:dc:9a:8d:fc:
                    c0:4c:00:8e:5a:14:65:92:97:4e:31:8b:a3:37:92:
                    23:d9:10:1b:f0:44:e9:2c:5d:f9:0c:27:05:ca:92:
                    70:6d:3c:4d:5f:26:8a:f3:fd:09:4d:0b:be:86:9f:
                    58:04:df:5e:74:e2:1b:c7:5e:c0:e0:12:b1:0d:b9:
                    08:ee:1d:37:a7:20:43:d1:0d:90:d5:d1:5e:58:27:
                    06:05:72:77:28:6c:b4:ca:32:6d:39:9d:41:d0:bd:
                    40:60:fd:a4:2f:92:7b:7a:30:fd:d0:36:e8:f6:a7:
                    20:1b:5c:d2:59:2a:6d:53:0c:0e:36:de:7e:4e:a1:
                    f4:80:fc:0e:6e:3f:92:99:9c:ab:c9:b2:1a:f0:80:
                    a9:36:85:19:7e:f8:c8:95:cc:59:a1:a4:62:10:d4:
                    e9:fa:d3:92:f4:9d:54:af:fe:7b:a4:82:10:5a:e5:
                    89:ff:13:2b:bd:48:13:5b:4b:db:d1:84:97:0b:cd:
                    50:57:93:dd:43:4b:4c:a7:76:83:61:87:fc:55:9f:
                    99:49:36:8b:d1:be:1c:3f:fc:81:63:c8:a5:cd:7f:
                    fe:91:84:20:21:fb:d4:a4:81:0b:20:65:ad:8e:05:
                    a2:8e:ff:77:43:00:47:c7:10:01:47:62:9f:cf:a7:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:ED:C8:26:FF:39:92:53:92:DF:E2:9F:39:08:D1:86:AB:53:D5
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32332d3233203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:f3:1c:67:ab:b6:df:31:0b:b7:0a:63:fd:80:f8:8f:c9:d6:
         1c:6f:cf:6a:be:16:c2:34:30:3b:fa:01:9c:bd:06:ee:fb:36:
         bd:6d:b9:e4:44:15:97:07:e5:6d:64:3f:47:c9:f1:b8:2b:3c:
         93:65:1a:d2:a8:58:a1:98:91:93:62:f9:25:a1:72:1a:e1:13:
         74:19:ca:b5:de:45:1e:76:af:76:6a:87:36:d8:f7:d1:16:5d:
         64:ec:9f:1a:a4:d6:00:a1:22:4a:45:5c:9e:39:d8:0f:7c:53:
         56:86:32:04:52:9b:46:c1:38:94:ca:35:96:6d:b4:f8:46:09:
         53:08:e3:15:73:d3:ac:c4:fb:9d:7b:ed:76:55:d7:52:c2:1f:
         4f:d1:a8:67:e4:72:b6:37:73:9a:04:78:a9:11:aa:0d:21:71:
         10:81:09:35:5e:21:53:ec:89:d1:51:4d:4f:e0:b4:09:1e:68:
         ff:d7:22:73:92:18:8a:93:d1:29:b8:88:ae:e2:0c:4c:d5:3d:
         9c:d6:a4:f0:bb:2b:ec:bd:a6:a6:64:5e:49:72:13:49:3b:78:
         f9:17:f8:a5:3e:a3:11:aa:5c:5a:e5:90:d2:c3:87:99:9c:c7:
         2b:26:f2:07:d7:5a:74:7e:6d:52:33:d7:a5:28:85:fd:e8:e0:
         c2:6f:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org