Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa
File:                     3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          32dOpdYst02vAL57xMtq242VYfzID3ExI4n71AWvqoY=
Subject key identifier:   4C:CF:27:56:D0:1F:17:E3:86:A5:97:3E:18:6D:F6:31:DF:C6:A5:24
Certificate issuer:       /CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
Certificate serial:       4A9FC72B8C3F2DFBA0DAD238FBCA008E684065C3
Authority key identifier: C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa
Signing time:             Fri 05 Apr 2024 03:20:40 +0000
ROA not before:           Fri 05 Apr 2024 03:15:40 +0000
ROA not after:            Fri 04 Apr 2025 03:20:40 +0000
asID:                     263441
IP address blocks:        177.91.128.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9f:c7:2b:8c:3f:2d:fb:a0:da:d2:38:fb:ca:00:8e:68:40:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
        Validity
            Not Before: Apr  5 03:15:40 2024 GMT
            Not After : Apr  4 03:20:40 2025 GMT
        Subject: CN=4CCF2756D01F17E386A5973E186DF631DFC6A524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:4a:0e:d7:58:1b:ff:96:62:4e:02:5c:57:
                    00:80:b2:70:fe:ee:0d:af:ca:01:6a:70:f3:68:e5:
                    3a:e4:81:c9:9c:7b:65:1a:ce:f5:2f:33:ce:43:97:
                    d1:ea:7f:30:2e:71:e5:32:81:2f:1d:62:e2:7b:7c:
                    c8:80:5f:87:c6:b5:f7:b3:a1:ed:d9:8f:b8:2a:15:
                    50:77:a5:5a:71:0b:c7:fd:c7:b7:dc:da:0b:47:56:
                    67:07:59:cf:f7:f3:9e:3d:dd:c2:54:0c:7a:d1:c3:
                    99:e5:73:c4:bd:b1:bc:90:ff:20:34:26:ba:bc:19:
                    a1:07:1f:7e:9c:b2:f3:55:ba:9f:8b:da:1d:58:75:
                    62:09:b4:cf:8c:9f:ac:e0:c8:dc:d1:15:27:b1:27:
                    3c:53:47:8a:b0:80:22:da:ba:a4:7b:d0:03:22:a5:
                    18:aa:e6:4d:77:17:e9:aa:59:e6:f2:f1:45:16:83:
                    0b:ac:fa:56:ec:39:d3:83:8f:26:f9:c9:c9:68:59:
                    0b:ff:61:de:8c:a1:b5:cf:36:99:49:fa:4d:53:d1:
                    9f:50:9a:1a:4e:6c:59:63:6d:13:b3:27:f8:45:df:
                    54:55:29:65:02:b6:2e:b4:fd:07:73:1a:15:67:89:
                    af:99:46:dd:33:9c:10:98:d8:44:01:b6:19:f2:2a:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CF:27:56:D0:1F:17:E3:86:A5:97:3E:18:6D:F6:31:DF:C6:A5:24
            X509v3 Authority Key Identifier:
                keyid:C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:49:93:e7:a4:8c:fc:8f:1c:c1:1e:5b:af:43:9a:28:96:d6:
         5f:da:b0:e7:32:30:90:aa:ee:b2:98:8c:2d:3f:45:8d:e6:a4:
         70:97:a5:bd:ef:7c:73:d6:2e:93:da:c4:07:eb:84:85:1b:d4:
         d8:8e:ba:77:ec:f8:47:9b:f0:f9:1e:74:29:d0:cd:af:00:e4:
         8e:a3:7a:ac:7e:f7:cf:1c:e8:49:cc:c1:16:0d:45:80:4c:e1:
         5b:56:7c:68:58:10:ff:ef:1d:a7:c0:0c:7a:7c:54:2f:e3:c1:
         72:ab:75:cd:b6:0c:b5:09:36:61:79:f8:ac:6c:2e:c4:e6:26:
         a2:89:3f:33:7f:64:75:a4:e8:9e:73:e7:91:08:01:7f:63:11:
         26:37:e0:f2:97:d1:29:00:ef:1a:d2:27:46:0e:1d:c4:9d:47:
         82:1e:fa:3c:83:fe:4a:0f:62:ef:06:9b:73:5f:ed:85:bf:c0:
         81:64:e7:a1:36:9c:1e:3a:1e:da:65:e8:bc:74:16:62:62:37:
         a8:41:1d:ae:d3:55:12:c5:58:09:20:fd:fd:1c:1a:3f:52:75:
         e9:65:8c:c1:90:4f:d2:3a:bb:ad:cc:c0:ea:7e:34:3c:f0:8b:
         bc:11:b9:80:86:55:01:08:2f:87:59:28:a6:31:7f:30:9a:73:
         87:5a:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 12:23:52 2024 by rpki-client on console-fra.rpki-client.org