Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3231203d3e20323632343630.roa
File:                     3137372e35332e37322e302f32312d3231203d3e20323632343630.roa (raw, json)
Hash identifier:          +T2ncX1Ql+GmOOPge3kvxJQ4TYnZSABgrqvLsfI5T4A=
Subject key identifier:   45:02:6B:F1:84:EC:4E:69:88:C6:C0:62:54:7C:7D:D2:E0:FF:B0:65
Certificate issuer:       /CN=3A3DF525158206E0B66C8FD23D86B1780F642002
Certificate serial:       53D4F3FCEE3A0CB6C8896910BC3B3F1A30348EB6
Authority key identifier: 3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3231203d3e20323632343630.roa
Signing time:             Fri 04 Oct 2024 11:12:55 +0000
ROA not before:           Fri 04 Oct 2024 11:07:55 +0000
ROA not after:            Fri 03 Oct 2025 11:12:55 +0000
asID:                     262460
IP address blocks:        177.53.72.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d4:f3:fc:ee:3a:0c:b6:c8:89:69:10:bc:3b:3f:1a:30:34:8e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3DF525158206E0B66C8FD23D86B1780F642002
        Validity
            Not Before: Oct  4 11:07:55 2024 GMT
            Not After : Oct  3 11:12:55 2025 GMT
        Subject: CN=45026BF184EC4E6988C6C062547C7DD2E0FFB065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:cb:40:e8:8d:fa:eb:0f:43:61:38:de:cd:
                    20:99:20:a6:29:08:4a:92:75:e0:f3:e1:de:e8:c4:
                    03:df:ee:9a:36:d7:fd:be:45:46:53:a4:4c:72:dc:
                    54:f1:33:32:39:a2:1c:94:42:89:d4:ee:b5:15:a7:
                    63:ff:e4:5c:a9:c8:61:39:57:29:58:e7:55:26:78:
                    73:15:b6:42:9a:c3:e7:02:b4:f1:29:ae:21:d6:4a:
                    ac:e8:06:66:fe:ee:c0:b8:ce:63:3c:ab:54:7b:77:
                    b9:7f:85:c2:d7:9c:18:d6:ad:f7:73:31:d0:32:8d:
                    8f:ed:4a:cd:a5:57:f8:2d:d4:de:bc:0b:ea:4d:a9:
                    7e:65:10:fd:d2:a7:fe:e9:a5:78:c0:fc:6f:22:51:
                    b2:ad:45:5b:1d:69:6d:3f:c7:01:74:6a:81:d3:d9:
                    40:73:eb:a1:78:08:11:af:1a:c0:0d:fc:aa:4e:c4:
                    c5:b4:5d:92:34:66:bf:a7:9b:6a:8a:01:5d:6c:9a:
                    3b:e1:8f:25:6e:a6:be:f8:8d:71:64:b0:6d:51:cd:
                    b7:fb:37:e9:96:e4:f2:16:9a:85:cc:39:75:72:da:
                    35:92:e1:5b:75:01:6b:bd:1b:07:4b:89:f6:92:ff:
                    ee:4f:94:56:94:8c:f7:df:34:1c:e1:04:17:32:bf:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:6B:F1:84:EC:4E:69:88:C6:C0:62:54:7C:7D:D2:E0:FF:B0:65
            X509v3 Authority Key Identifier:
                keyid:3A:3D:F5:25:15:82:06:E0:B6:6C:8F:D2:3D:86:B1:78:0F:64:20:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3A3DF525158206E0B66C8FD23D86B1780F642002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3DF525158206E0B66C8FD23D86B1780F642002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3231203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:38:b4:91:45:a9:47:0a:88:a8:05:26:b7:e3:62:0f:09:
         33:76:14:cc:f2:2b:e6:61:17:99:d2:58:29:0d:da:0d:7b:12:
         d3:41:8a:36:6e:f4:38:11:e1:1f:56:53:ff:42:b5:89:78:b6:
         ed:22:9e:9e:9c:c1:75:fc:7e:9b:b3:06:05:5e:8e:b3:45:bc:
         14:7a:cb:0d:41:30:b8:d4:a4:b2:97:34:09:c4:eb:db:9e:8b:
         ee:09:00:4f:a4:7c:d2:33:a2:ef:78:31:76:88:f8:91:92:db:
         5b:ab:5c:b8:d9:e7:87:7a:d2:ab:77:43:07:be:bc:4f:06:2a:
         6c:10:cf:c2:5d:0e:dd:0d:e0:94:cb:33:21:c5:8f:39:da:84:
         74:36:66:b3:31:19:3d:47:1d:61:31:f0:59:d3:b0:46:6b:47:
         f4:06:72:30:e1:5c:d3:61:a2:1c:6a:07:99:e0:bb:44:e7:ae:
         9a:49:cb:f0:31:3f:4a:bf:85:4b:b4:72:85:d5:02:bf:41:3c:
         4e:a1:8e:da:9e:a5:0f:84:fb:a3:ea:62:cb:a6:29:04:7e:96:
         50:0a:f5:1d:6b:5d:b1:b1:6a:33:c2:05:ab:94:19:d3:83:4b:
         7b:50:12:2d:be:1b:ea:56:db:7e:f7:43:b0:e3:9e:83:43:b4:
         36:1c:5a:70
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU9Tz/O46DLbIiWkQvDs/GjA0jrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzREY1MjUxNTgyMDZFMEI2NkM4RkQyM0Q4NkIxNzgw
RjY0MjAwMjAeFw0yNDEwMDQxMTA3NTVaFw0yNTEwMDMxMTEyNTVaMDMxMTAvBgNV
BAMTKDQ1MDI2QkYxODRFQzRFNjk4OEM2QzA2MjU0N0M3REQyRTBGRkIwNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzMtA6I366w9DYTjezSCZIKYp
CEqSdeDz4d7oxAPf7po21/2+RUZTpExy3FTxMzI5ohyUQonU7rUVp2P/5FypyGE5
VylY51UmeHMVtkKaw+cCtPEpriHWSqzoBmb+7sC4zmM8q1R7d7l/hcLXnBjWrfdz
MdAyjY/tSs2lV/gt1N68C+pNqX5lEP3Sp/7ppXjA/G8iUbKtRVsdaW0/xwF0aoHT
2UBz66F4CBGvGsAN/KpOxMW0XZI0Zr+nm2qKAV1smjvhjyVupr74jXFksG1Rzbf7
N+mW5PIWmoXMOXVy2jWS4Vt1AWu9GwdLifaS/+5PlFaUjPffNBzhBBcyv9dnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURQJr8YTsTmmIxsBiVHx90uD/sGUwHwYDVR0j
BBgwFoAUOj31JRWCBuC2bI/SPYaxeA9kIAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0R1V3MW5hWnhROXc4RERVcVlQZWhCWUZpMndIdDlqTGJ0R0tGaTRU
Wk4vMC8zQTNERjUyNTE1ODIwNkUwQjY2QzhGRDIzRDg2QjE3ODBGNjQyMDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0RGNTI1MTU4MjA2RTBC
NjZDOEZEMjNEODZCMTc4MEY2NDIwMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdEdVdzFuYVp4UTl3OEREVXFZUGVoQllGaTJ3SHQ5akxidEdLRmk0VFpOLzAv
MzEzNzM3MmUzNTMzMmUzNzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsTVIMA0GCSqGSIb3DQEBCwUAA4IBAQBXrDi0kUWp
RwqIqAUmt+NiDwkzdhTM8ivmYReZ0lgpDdoNexLTQYo2bvQ4EeEfVlP/QrWJeLbt
Ip6enMF1/H6bswYFXo6zRbwUessNQTC41KSylzQJxOvbnovuCQBPpHzSM6LveDF2
iPiRkttbq1y42eeHetKrd0MHvrxPBipsEM/CXQ7dDeCUyzMhxY852oR0NmazMRk9
Rx1hMfBZ07BGa0f0BnIw4VzTYaIcageZ4LtE566aScvwMT9Kv4VLtHKF1QK/QTxO
oY7anqUPhPuj6mLLpikEfpZQCvUda12xsWozwgWrlBnTg0t7UBItvhvqVtt+90Ow
456DQ7Q2HFpw
-----END CERTIFICATE-----
Generated at Fri Nov 29 12:04:38 2024 by rpki-client on console-ams.rpki-client.org