Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/0/3137372e37342e3136382e302f32322d3332203d3e20323731303534.roa
File:                     3137372e37342e3136382e302f32322d3332203d3e20323731303534.roa (raw, json)
Hash identifier:          +DWvDBkNxA96Q52GCCHbn/J2xRo9wCb/Tt0x2FC1OPU=
Subject key identifier:   D6:05:39:04:33:39:F5:88:61:E8:D6:18:2C:2A:8D:DE:C2:A8:C0:46
Certificate issuer:       /CN=397FC82A87F853FAA5CF487AA9872325D29C07B3
Certificate serial:       0AEF9E0E5A10D31B052651AF87C3DE1FC56D1DAD
Authority key identifier: 39:7F:C8:2A:87:F8:53:FA:A5:CF:48:7A:A9:87:23:25:D2:9C:07:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/397FC82A87F853FAA5CF487AA9872325D29C07B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/0/3137372e37342e3136382e302f32322d3332203d3e20323731303534.roa
Signing time:             Thu 04 Apr 2024 14:37:48 +0000
ROA not before:           Thu 04 Apr 2024 14:32:48 +0000
ROA not after:            Thu 03 Apr 2025 14:37:48 +0000
asID:                     271054
IP address blocks:        177.74.168.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ef:9e:0e:5a:10:d3:1b:05:26:51:af:87:c3:de:1f:c5:6d:1d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397FC82A87F853FAA5CF487AA9872325D29C07B3
        Validity
            Not Before: Apr  4 14:32:48 2024 GMT
            Not After : Apr  3 14:37:48 2025 GMT
        Subject: CN=D60539043339F58861E8D6182C2A8DDEC2A8C046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:54:21:17:e7:f4:56:d2:7c:07:5f:75:e5:
                    c8:66:90:84:58:05:b6:7a:79:6b:ee:20:bf:58:26:
                    29:1f:74:f8:ba:2a:48:7a:ab:86:6f:65:3a:b4:dd:
                    fd:48:a2:35:53:12:bb:64:ea:67:c3:55:e7:f5:21:
                    eb:d3:34:e8:38:24:42:23:d1:d1:3d:0f:bd:ee:12:
                    16:5b:a0:6e:b7:c7:15:50:57:9d:dd:8f:06:74:89:
                    5b:16:3f:84:a6:5e:5d:18:a3:96:b3:02:d0:28:14:
                    59:cd:30:60:f1:49:48:db:ac:3b:b5:c7:9a:b6:17:
                    5f:0a:fe:a9:49:d4:f9:b5:f7:a2:96:df:3b:65:52:
                    1d:55:a8:dd:47:0b:11:93:64:f9:7f:b9:1b:17:c1:
                    8c:6c:1c:d3:4b:e2:ee:1d:d5:9d:b4:02:ac:f1:c0:
                    db:12:94:85:c4:8e:82:8b:be:9c:f3:74:e3:7c:08:
                    2f:ae:84:d9:15:c8:ee:b4:87:89:55:45:2f:92:b2:
                    f2:26:66:d9:21:74:bd:0e:49:58:71:c3:fc:9f:74:
                    6d:a1:15:c6:49:aa:9e:ea:f7:7e:35:0e:be:22:74:
                    96:84:b7:7f:ee:a5:e0:c6:8d:09:f2:94:f7:c5:b9:
                    3f:13:b7:76:cf:12:0a:4b:aa:a9:7e:31:df:f4:4e:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:05:39:04:33:39:F5:88:61:E8:D6:18:2C:2A:8D:DE:C2:A8:C0:46
            X509v3 Authority Key Identifier:
                keyid:39:7F:C8:2A:87:F8:53:FA:A5:CF:48:7A:A9:87:23:25:D2:9C:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/0/397FC82A87F853FAA5CF487AA9872325D29C07B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/397FC82A87F853FAA5CF487AA9872325D29C07B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/0/3137372e37342e3136382e302f32322d3332203d3e20323731303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:23:80:a4:6e:f5:5d:c4:25:35:33:86:68:c1:87:5f:e7:1d:
         95:35:d7:82:83:95:af:3b:c7:ac:74:ac:6e:ce:96:a2:09:20:
         3b:b2:43:a3:3a:98:6d:cb:4a:ad:f3:fc:5e:75:f1:b0:f1:aa:
         9f:5e:f3:2c:85:62:43:e5:c7:53:9c:ef:a3:79:d9:95:ab:6a:
         e5:9d:e8:b7:23:2c:a2:50:6b:39:56:58:a5:e6:24:d2:ca:bf:
         eb:55:72:28:f2:25:f8:4a:26:8a:42:fa:3e:89:38:11:cf:fd:
         0a:be:bb:66:60:f5:a1:10:f7:1f:85:fe:e0:24:cb:4e:8e:d3:
         c6:9e:f8:7c:44:e2:e1:ec:f2:a6:10:e4:76:a5:82:ab:c6:fe:
         7a:da:7f:ae:b3:32:5b:0b:41:d6:be:bf:52:ae:c8:d0:ba:96:
         54:d4:ce:47:41:c0:09:24:23:a8:5e:18:86:9c:07:f8:f1:78:
         cc:aa:2b:fc:39:d4:38:67:a0:bd:57:cc:58:16:55:2f:4d:90:
         dc:ad:f3:24:09:da:53:69:72:98:6b:00:e2:dd:8a:82:c8:c2:
         cf:49:72:ab:84:72:e9:79:7f:32:83:ae:ac:61:ca:70:43:b0:
         e2:8e:ef:39:31:f9:a7:71:46:b8:f2:b9:cb:3e:08:96:58:dc:
         76:40:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:41:10 2024 by rpki-client on console-fra.rpki-client.org