Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32342d3234203d3e203532363936.roa
File:                     3137372e37332e34342e302f32342d3234203d3e203532363936.roa (raw, json)
Hash identifier:          1/lXX87JPGW8jtN1Heux5TRriigZHaoaUpQQ4Z0HQvM=
Subject key identifier:   76:BD:AF:09:73:F1:5E:D1:C8:C4:D8:A4:04:22:17:97:C2:48:B0:08
Certificate issuer:       /CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
Certificate serial:       279FD51D5A688B7A3D089FC5402C5A652AC82A3C
Authority key identifier: 75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32342d3234203d3e203532363936.roa
Signing time:             Tue 06 Aug 2024 00:02:58 +0000
ROA not before:           Mon 05 Aug 2024 23:57:58 +0000
ROA not after:            Tue 05 Aug 2025 00:02:58 +0000
asID:                     52696
IP address blocks:        177.73.44.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9f:d5:1d:5a:68:8b:7a:3d:08:9f:c5:40:2c:5a:65:2a:c8:2a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
        Validity
            Not Before: Aug  5 23:57:58 2024 GMT
            Not After : Aug  5 00:02:58 2025 GMT
        Subject: CN=76BDAF0973F15ED1C8C4D8A404221797C248B008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:12:4a:2b:8f:e8:34:49:73:1f:c7:af:bc:
                    12:79:89:90:3b:c3:b8:97:b6:29:a7:a8:b2:a3:f3:
                    a5:ff:cc:f8:1e:d5:aa:fb:c6:38:b1:e4:fc:7e:fc:
                    0b:4f:9f:28:7a:b2:dc:22:a3:a4:22:59:43:03:e6:
                    cd:c5:b2:f9:7e:f6:20:8a:5b:39:8a:6f:60:45:ef:
                    29:68:0a:fd:93:fb:aa:9d:41:64:c5:f4:d1:43:17:
                    24:83:41:ff:6c:90:cf:17:74:93:53:bf:cf:e5:7d:
                    fe:94:af:21:d3:8a:bf:0e:b5:b2:d9:d2:a7:e6:4a:
                    01:4c:5e:d0:8a:e3:9c:b3:18:73:e0:d2:ee:f9:cd:
                    b2:c5:c3:67:1d:7d:ab:c6:64:47:3e:6a:1e:17:38:
                    8e:84:d9:e0:7e:33:6e:8d:a0:c7:f2:2d:de:cc:1a:
                    5f:44:1d:3e:7d:e8:a8:ec:71:d7:e6:b8:44:7d:27:
                    78:f6:78:ed:1f:66:32:e2:b1:88:39:49:36:26:88:
                    6c:7d:3b:6a:5c:96:b2:7a:80:9d:05:39:4f:5b:a3:
                    fb:bb:68:93:19:03:9d:ae:f6:65:5c:6e:1a:d1:e8:
                    f7:9e:1e:4c:48:02:42:4c:30:e6:1f:e5:ea:58:95:
                    b1:4d:3d:06:f6:43:7b:30:d9:0c:c6:91:94:4a:e7:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BD:AF:09:73:F1:5E:D1:C8:C4:D8:A4:04:22:17:97:C2:48:B0:08
            X509v3 Authority Key Identifier:
                keyid:75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/759FD53741DAAEF6CE6410013C127C1B23331A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32342d3234203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:9f:0e:d4:68:d4:15:50:5e:2f:56:0f:7b:2d:e4:89:19:ce:
         d3:78:70:1f:0e:de:26:5c:60:12:1b:02:6b:43:1f:e8:5d:db:
         ee:e8:95:ee:92:f3:f2:ad:e1:92:14:8f:41:88:f3:45:1b:20:
         a6:26:f8:b7:aa:fc:29:7b:48:92:42:04:64:6e:d4:1e:c2:7d:
         7e:61:f4:cf:21:54:5c:7a:3e:61:f2:ca:84:dd:bf:9f:94:a3:
         95:d1:cf:0b:7a:89:dd:89:3d:51:7b:c1:11:8c:35:33:71:7e:
         85:66:1e:2f:9d:3c:d6:bb:c5:88:28:c1:48:e6:98:f1:ca:4b:
         29:09:59:7f:b3:36:b3:86:0f:9d:58:c2:30:34:30:fe:d2:31:
         34:e6:58:d1:c3:8e:b7:a3:b3:b4:01:4b:d9:61:77:90:36:48:
         1d:6a:8f:2c:66:ca:e4:f9:a8:ef:94:47:a1:7d:45:c8:9a:a1:
         4e:82:06:7b:86:d6:d5:d8:b3:cf:08:4a:96:0b:30:9f:9c:d6:
         b0:5f:d6:ac:8a:02:e1:e9:36:7d:0c:02:00:4e:35:83:db:ac:
         42:e1:82:c7:24:1b:c0:28:6b:22:91:1a:1a:b6:7a:b5:cc:1a:
         67:55:78:37:38:56:d2:bd:dd:f0:80:0b:d0:b6:75:c1:e7:27:
         ee:f8:89:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJ5/VHVpoi3o9CJ/FQCxaZSrIKjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RkQ1Mzc0MURBQUVGNkNFNjQxMDAxM0MxMjdDMUIy
MzMzMUE3QjAeFw0yNDA4MDUyMzU3NThaFw0yNTA4MDUwMDAyNThaMDMxMTAvBgNV
BAMTKDc2QkRBRjA5NzNGMTVFRDFDOEM0RDhBNDA0MjIxNzk3QzI0OEIwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByxJKK4/oNElzH8evvBJ5iZA7
w7iXtimnqLKj86X/zPge1ar7xjix5Px+/AtPnyh6stwio6QiWUMD5s3Fsvl+9iCK
WzmKb2BF7yloCv2T+6qdQWTF9NFDFySDQf9skM8XdJNTv8/lff6UryHTir8OtbLZ
0qfmSgFMXtCK45yzGHPg0u75zbLFw2cdfavGZEc+ah4XOI6E2eB+M26NoMfyLd7M
Gl9EHT596KjscdfmuER9J3j2eO0fZjLisYg5STYmiGx9O2pclrJ6gJ0FOU9bo/u7
aJMZA52u9mVcbhrR6PeeHkxIAkJMMOYf5epYlbFNPQb2Q3sw2QzGkZRK5zsNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUdr2vCXPxXtHIxNikBCIXl8JIsAgwHwYDVR0j
BBgwFoAUdZ/VN0HarvbOZBABPBJ8GyMzGnswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnB4dzJlV1V3aVFNOGo4U0xzVWNLS1ZaNEZDVGk5ZlhzRDJLNHRvaEpl
Z2kvMC83NTlGRDUzNzQxREFBRUY2Q0U2NDEwMDEzQzEyN0MxQjIzMzMxQTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUZENTM3NDFEQUFFRjZD
RTY0MTAwMTNDMTI3QzFCMjMzMzFBN0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZweHcyZVdVd2lRTThqOFNMc1VjS0tWWjRGQ1RpOWZYc0QySzR0b2hKZWdpLzAv
MzEzNzM3MmUzNzMzMmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM2
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFJLDANBgkqhkiG9w0BAQsFAAOCAQEANJ8O1GjUFVBe
L1YPey3kiRnO03hwHw7eJlxgEhsCa0Mf6F3b7uiV7pLz8q3hkhSPQYjzRRsgpib4
t6r8KXtIkkIEZG7UHsJ9fmH0zyFUXHo+YfLKhN2/n5SjldHPC3qJ3Yk9UXvBEYw1
M3F+hWYeL5081rvFiCjBSOaY8cpLKQlZf7M2s4YPnVjCMDQw/tIxNOZY0cOOt6Oz
tAFL2WF3kDZIHWqPLGbK5Pmo75RHoX1FyJqhToIGe4bW1dizzwhKlgswn5zWsF/W
rIoC4ek2fQwCAE41g9usQuGCxyQbwChrIpEaGrZ6tcwaZ1V4NzhW0r3d8IAL0LZ1
wecn7viJ+Q==
-----END CERTIFICATE-----
Generated at Fri Oct 4 22:43:17 2024 by rpki-client on console-fra.rpki-client.org