Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31382e302f32332d3233203d3e20323632333132.roa
File:                     3137372e3132342e31382e302f32332d3233203d3e20323632333132.roa (raw, json)
Hash identifier:          wmP4MYc6dKnSkmP4Ck8PFxitxLwsTTpxnuyVZRn1oVk=
Subject key identifier:   A6:2F:C1:45:90:37:DB:B4:7E:07:1F:C8:C9:22:8A:EE:24:7B:00:D2
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       46C6727703806D9A8A78C468D8606DFB51D90D9A
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31382e302f32332d3233203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:19 +0000
ROA not before:           Fri 16 Aug 2024 16:21:19 +0000
ROA not after:            Fri 15 Aug 2025 16:26:19 +0000
asID:                     262312
IP address blocks:        177.124.18.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c6:72:77:03:80:6d:9a:8a:78:c4:68:d8:60:6d:fb:51:d9:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:19 2024 GMT
            Not After : Aug 15 16:26:19 2025 GMT
        Subject: CN=A62FC1459037DBB47E071FC8C9228AEE247B00D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:db:fd:19:0f:bd:2a:95:0d:ca:f6:36:cb:bb:
                    8a:b3:cf:d6:94:8a:a0:ea:fb:da:55:1c:c4:82:e6:
                    70:7f:fe:0e:10:06:48:16:1e:d2:73:b4:dc:be:2f:
                    67:b3:f2:32:66:9f:68:19:81:e3:ff:88:e1:4e:15:
                    fd:c9:32:27:ac:ac:25:81:55:2a:c8:9d:4e:23:22:
                    66:df:24:e8:f2:21:25:61:ff:d9:64:b9:67:74:67:
                    df:e2:c7:e2:d4:23:41:b1:31:6b:aa:6d:ae:a4:1c:
                    c8:b4:13:06:fc:84:8f:62:6f:ee:62:bb:81:85:60:
                    35:f4:66:54:46:07:a2:2a:89:a6:6a:2c:66:df:9c:
                    1b:2c:ac:fb:aa:e1:8c:e4:71:97:0e:b0:e9:38:f8:
                    9a:ea:7a:d1:d4:8d:42:1f:0a:5c:3b:73:8e:8b:40:
                    65:cd:84:98:70:3c:6a:2a:eb:a4:e1:b6:1c:d8:69:
                    64:c6:d2:2d:1e:2b:d0:01:d4:e0:b0:6e:5f:35:24:
                    38:42:7a:55:39:41:66:37:f1:72:4e:0d:90:d2:1b:
                    7c:21:60:28:1f:6a:12:7a:b4:e6:73:62:48:40:69:
                    8c:fa:ba:42:b9:15:ef:1f:62:c7:4b:09:52:2f:e4:
                    bb:83:71:86:ff:5c:ef:85:e2:9b:27:16:7e:f4:db:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:C1:45:90:37:DB:B4:7E:07:1F:C8:C9:22:8A:EE:24:7B:00:D2
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31382e302f32332d3233203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:24:97:43:77:b7:69:cd:8a:63:58:8b:1c:51:22:e3:57:90:
         17:ca:33:bf:f6:16:76:b6:53:7f:32:08:72:e4:45:a1:9f:d3:
         09:7c:97:98:01:1a:f3:32:fb:99:09:92:f0:bf:bf:cc:03:57:
         04:97:1f:d1:bf:aa:27:f7:6c:1f:4c:83:0b:16:0c:a5:c0:6c:
         3c:b3:ba:5f:22:45:36:e2:72:07:97:64:df:c6:63:64:d8:11:
         f7:e2:53:4f:53:45:2e:ba:76:16:12:12:97:35:8e:1b:d8:29:
         72:6e:c9:43:98:33:b4:28:99:92:b3:6c:b0:a1:ae:a1:b2:31:
         76:bb:a1:b1:13:04:bd:e9:02:99:fb:45:f3:42:97:c1:52:8a:
         da:28:fe:e6:5d:9c:00:95:11:b6:db:09:85:a8:1b:98:83:3d:
         cd:93:eb:05:65:82:c3:62:1d:da:29:1e:a9:ab:77:d0:93:01:
         ab:d4:7d:03:b6:50:db:01:b9:86:31:57:e9:e9:26:65:92:bc:
         e2:ac:41:73:f8:b7:2d:a1:bb:b5:c9:75:30:7f:0f:71:24:64:
         5c:6d:04:a7:52:0b:0f:2d:8d:69:ac:2a:3b:8c:f9:9b:ba:2a:
         7d:b5:33:ea:37:57:02:da:0d:34:f7:71:4c:eb:9a:cd:61:80:
         16:5e:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 10:24:32 2024 by rpki-client on console-ams.rpki-client.org