Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e33312e302f32342d3234203d3e20323633333834.roa
File:                     3137372e38372e33312e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          iK6SqlCc6PKaslz6mf5A7oXhyby/k0deq9/gN027+EE=
Subject key identifier:   DB:C2:FA:C0:56:8D:BE:5A:CE:B5:2C:78:86:BB:04:E7:71:7C:46:E6
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       22D4E89D4B04D6AB91DDBB1ED75FD6A90F3B8157
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e33312e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:54 +0000
ROA not before:           Thu 04 Apr 2024 13:24:54 +0000
ROA not after:            Thu 03 Apr 2025 13:29:54 +0000
asID:                     263384
IP address blocks:        177.87.31.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d4:e8:9d:4b:04:d6:ab:91:dd:bb:1e:d7:5f:d6:a9:0f:3b:81:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:54 2024 GMT
            Not After : Apr  3 13:29:54 2025 GMT
        Subject: CN=DBC2FAC0568DBE5ACEB52C7886BB04E7717C46E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:99:f1:f4:1a:10:ec:6f:5d:26:ff:09:70:
                    13:2b:99:a9:95:f1:22:cc:a4:15:ea:21:e8:b7:92:
                    2d:03:28:3c:23:4b:52:99:2a:d0:68:82:5e:bd:96:
                    f4:15:da:9f:96:66:a2:b3:f3:37:cc:0c:67:7b:66:
                    8e:52:d0:79:41:74:3a:d2:29:58:21:da:3e:10:ce:
                    35:d6:82:1a:50:4c:07:e1:3a:8f:c8:fc:ac:a4:99:
                    72:aa:e7:9b:23:da:8b:02:82:4f:82:5b:8b:c2:af:
                    99:db:df:53:e3:14:ca:6a:18:2d:9e:f6:63:9a:40:
                    ab:90:6e:dc:77:53:33:de:5b:a0:16:78:0c:05:a8:
                    c7:bc:63:fc:b3:b1:a6:6e:1d:9b:26:ab:8a:36:47:
                    aa:cf:9f:ea:fa:fe:9d:6f:5b:4f:7b:c6:f8:20:13:
                    de:99:80:80:3e:d4:08:9e:ed:a1:f3:09:f4:c9:fe:
                    be:9a:69:55:da:6a:06:bc:39:93:38:f0:f1:1f:48:
                    51:63:07:ff:1c:b8:90:33:0b:fc:2b:96:f7:f6:28:
                    7d:1c:de:a1:06:64:91:f8:ca:35:74:be:44:74:ab:
                    d6:57:fb:8e:20:85:47:46:30:49:33:7d:78:0d:5b:
                    1f:89:81:51:e1:84:05:03:ea:22:01:1d:3d:33:9d:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:FA:C0:56:8D:BE:5A:CE:B5:2C:78:86:BB:04:E7:71:7C:46:E6
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3137372e38372e33312e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:9b:07:02:70:bf:a3:e1:a9:50:8d:d5:68:22:63:76:1c:
         b1:c4:2f:68:e7:3f:b9:a1:64:cf:59:3f:9d:ef:ee:b4:1d:07:
         76:05:7c:2c:90:01:18:dc:4c:61:55:dd:c8:fe:c4:ce:63:77:
         d9:d0:47:24:2c:d8:15:ad:ea:88:7f:73:2f:2a:ed:c2:5e:a1:
         ac:08:77:d3:25:63:a5:ac:72:6d:f0:54:4e:fd:b4:41:ab:1c:
         e1:cc:d0:5f:e0:3f:8e:d0:4e:b3:4b:b2:23:b8:d0:c9:f4:36:
         cf:14:ca:87:48:bb:f9:de:0b:9a:49:fa:94:85:b4:a2:6e:39:
         7b:99:0f:bf:56:79:8c:88:bb:08:fd:bf:5a:8a:b8:ec:8d:5f:
         f8:ab:df:f0:4c:31:85:8e:ae:b0:85:d9:a6:e7:35:e1:c9:6e:
         bb:d9:cc:3b:a2:33:b6:cd:ad:37:52:28:48:6c:9e:a7:77:82:
         3a:ca:f8:02:33:b3:27:c8:19:37:18:13:56:64:a8:38:8b:19:
         a1:00:4c:bb:6c:4d:7a:63:d4:4f:0e:94:72:72:47:a7:94:03:
         fe:c9:60:1d:78:aa:63:fb:d4:57:fc:15:1d:a4:92:cd:53:df:
         4d:95:a9:ed:7e:77:46:93:a9:15:16:d2:ac:2e:79:ae:9d:a4:
         d5:2b:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org