Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32342d3234203d3e20323633333834.roa
File:                     3137372e38372e32382e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          qi/PB1TzMbDL7V4ykFP3FG1E1rQnZCMIteTaGAFWUJI=
Subject key identifier:   0F:56:1F:F2:A3:35:BA:5C:F8:9A:96:9B:49:D4:5E:A2:5F:53:6D:49
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       39826ABB4DE04FAD19B61DCE39B17D82BE242546
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:54 +0000
ROA not before:           Thu 04 Apr 2024 13:24:54 +0000
ROA not after:            Thu 03 Apr 2025 13:29:54 +0000
asID:                     263384
IP address blocks:        177.87.28.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:6a:bb:4d:e0:4f:ad:19:b6:1d:ce:39:b1:7d:82:be:24:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:54 2024 GMT
            Not After : Apr  3 13:29:54 2025 GMT
        Subject: CN=0F561FF2A335BA5CF89A969B49D45EA25F536D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:cb:7b:28:e8:39:e1:eb:3f:e7:54:6e:01:
                    b9:2b:b2:49:e3:ed:db:80:de:8a:87:0d:cf:39:ba:
                    eb:70:05:38:47:19:18:64:bb:87:aa:2d:de:82:1a:
                    7d:88:a7:dd:df:37:04:d5:ac:9b:9d:bf:40:46:df:
                    79:e5:cb:a6:c7:f6:fa:fd:8d:af:b2:66:40:a2:e6:
                    b9:bb:47:9e:3d:88:29:62:76:4d:fd:f6:a8:a8:09:
                    03:51:a6:69:4a:b7:35:44:c9:96:aa:5e:b3:a4:91:
                    03:fe:57:63:07:3e:17:12:e1:30:8d:98:5d:a5:bb:
                    4d:e0:87:49:e7:2f:e3:d7:d4:c2:0d:ab:65:25:64:
                    ed:36:a2:cf:e9:49:96:9f:38:84:7d:d9:1e:3c:1a:
                    73:bb:0e:a4:76:6d:91:da:2a:0c:c2:54:f8:00:37:
                    38:b1:c5:bf:47:de:d0:12:3d:f0:6f:8a:f1:30:01:
                    28:7e:c1:27:b6:7a:b4:64:9c:ed:fd:94:fc:43:56:
                    84:35:41:63:ba:9f:7e:d2:f0:21:8e:09:ac:e1:23:
                    bb:0b:5d:45:56:9c:cd:32:07:f4:7b:22:55:6f:17:
                    2c:29:c4:42:26:2a:99:1b:74:9f:49:3c:7e:a6:32:
                    0b:16:6b:8e:46:01:43:c4:cf:dd:0f:26:67:0e:1e:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:56:1F:F2:A3:35:BA:5C:F8:9A:96:9B:49:D4:5E:A2:5F:53:6D:49
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e32382e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:34:5a:0b:e2:65:fe:3b:e4:1c:35:ce:af:ae:41:db:6d:
         f7:2a:30:d3:3e:bf:fb:ba:29:82:72:6e:5a:2b:ec:af:0c:64:
         e6:70:1b:ad:f9:70:4a:db:3e:48:ef:b9:7c:f2:0d:53:00:cb:
         28:d5:17:b6:ba:9e:5f:e9:56:40:47:9f:24:19:84:69:0f:85:
         cc:5d:46:15:42:35:ea:4a:65:3a:fd:9b:6a:9a:6b:01:a7:28:
         a4:af:bc:3c:ee:2e:7e:30:b8:6e:71:c2:1c:63:a0:b9:6a:ce:
         21:3f:27:30:f1:06:ff:4d:8d:50:7a:f0:94:14:3a:c3:61:56:
         0c:de:51:d9:0e:8e:bc:d5:2e:d7:91:e9:73:1a:81:d6:46:2a:
         9a:9a:a0:95:b4:42:d5:20:8b:a9:07:3e:6d:a8:26:cf:36:af:
         9c:38:45:d6:79:d2:cf:28:70:a0:34:98:1d:35:52:89:cf:d2:
         f6:4c:4e:6b:f6:67:79:11:05:49:4d:fe:ff:a9:b1:ac:68:2b:
         ad:1d:9f:24:74:67:9c:a6:a9:33:d7:ea:41:bb:e7:95:b8:b7:
         ac:ba:ef:58:e7:d2:f3:58:e3:26:4d:f5:42:b2:58:86:db:92:
         b8:c9:1e:0c:5c:86:3b:b0:7c:c6:e2:82:eb:95:1a:cf:01:25:
         bd:02:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org