Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa
File:                     3137372e33392e31302e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          AS0aBN6wEDJhc0FnLjM2FVZ53EyxRIIT2a/elqCqr1Q=
Subject key identifier:   D2:17:72:B3:16:E9:67:E6:45:69:B3:58:5E:8F:FD:AF:DD:77:73:73
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       48B82A179864ADB1A8A5B8E10050D2AD21EC6A05
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:43 +0000
ROA not before:           Mon 29 Jul 2024 15:47:43 +0000
ROA not after:            Mon 28 Jul 2025 15:52:43 +0000
asID:                     269096
IP address blocks:        177.39.10.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b8:2a:17:98:64:ad:b1:a8:a5:b8:e1:00:50:d2:ad:21:ec:6a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:43 2024 GMT
            Not After : Jul 28 15:52:43 2025 GMT
        Subject: CN=D21772B316E967E64569B3585E8FFDAFDD777373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:e1:da:28:a9:b9:12:fa:a9:dd:56:59:f1:
                    82:69:55:9b:9b:55:d1:c3:98:31:03:73:a7:9c:f9:
                    9b:17:fc:ba:4b:56:b5:e7:3a:3d:25:4e:72:e5:a8:
                    f5:d4:5a:a0:54:2c:cb:fd:06:f0:06:62:53:60:1f:
                    3f:95:39:19:3b:56:83:df:3d:e2:b1:8f:88:86:11:
                    0f:d0:bf:27:bc:f6:a8:8f:a4:fb:e6:7a:e3:cc:48:
                    0f:81:89:1a:7e:0a:c9:04:34:2e:85:37:32:2e:18:
                    0f:f8:72:c9:52:94:9e:ef:c4:17:40:67:fd:b6:d2:
                    de:d6:29:69:51:16:d2:bd:0c:8b:21:5d:54:b1:fb:
                    94:f5:0f:a8:31:64:af:9c:5b:d5:21:d5:85:1f:a2:
                    e5:ac:6d:9d:dd:0b:de:86:7e:41:e5:01:03:4a:39:
                    80:5e:82:04:a5:20:90:cd:8b:37:e7:20:0e:86:a3:
                    fd:fc:2e:1e:be:35:99:27:4c:34:b8:43:0c:cc:0e:
                    06:19:90:94:cb:87:bd:2a:97:8e:41:3f:c0:21:24:
                    3e:4f:85:3c:ba:5b:8b:49:fb:e5:5b:57:9c:4b:63:
                    73:b0:1f:c7:33:14:38:33:dc:74:bb:3b:73:49:f5:
                    57:b6:96:e7:67:30:b1:53:cd:9a:de:10:ff:f1:af:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:17:72:B3:16:E9:67:E6:45:69:B3:58:5E:8F:FD:AF:DD:77:73:73
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:8f:c0:10:68:a5:d8:2d:a2:11:a3:12:99:b0:ae:7f:df:
         14:ee:84:0f:25:ec:35:63:a4:71:5c:a4:91:d2:e9:4a:10:d9:
         99:b3:38:5e:8b:f8:c5:6d:60:7c:04:f1:2b:6b:13:f6:38:66:
         2f:8d:4d:68:b1:45:ce:5a:0d:35:69:3b:a1:05:d9:e0:3b:f9:
         0d:dd:30:d8:08:76:34:22:77:84:fe:11:63:ba:2f:b6:fc:65:
         9e:7c:b2:9d:fd:71:7f:2c:d8:ba:fb:ce:4b:e1:85:ba:5d:91:
         9d:1f:1e:95:ee:5d:5b:f7:06:ab:12:20:65:11:dc:f6:dc:95:
         5a:60:70:b7:16:90:bc:58:f9:b0:3a:cb:6f:d5:95:ae:8c:65:
         6d:8f:5d:d7:f2:a8:1b:10:60:a8:68:d1:6a:0d:41:35:02:21:
         52:a0:ed:76:65:ff:28:4a:d1:41:8f:90:52:51:f7:9f:11:81:
         48:b1:a6:09:96:e0:0a:2d:47:af:fd:35:e6:4e:77:92:3a:ac:
         f7:e5:54:df:6d:5c:d0:62:38:42:52:cc:ae:70:09:47:22:b8:
         98:75:52:90:ec:0f:e4:20:02:df:15:57:23:be:f5:f8:55:ac:
         af:86:52:89:f8:85:1f:03:88:93:e6:7f:b3:20:41:08:2d:99:
         8f:b4:84:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSLgqF5hkrbGopbjhAFDSrSHsagUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZBOTY4QjM5NDkyMzI4RjE2NEYxODUzMzkxMjk3RkI5
NzUyMjcyQTAeFw0yNDA3MjkxNTQ3NDNaFw0yNTA3MjgxNTUyNDNaMDMxMTAvBgNV
BAMTKEQyMTc3MkIzMTZFOTY3RTY0NTY5QjM1ODVFOEZGREFGREQ3NzczNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbuHaKKm5Evqp3VZZ8YJpVZub
VdHDmDEDc6ec+ZsX/LpLVrXnOj0lTnLlqPXUWqBULMv9BvAGYlNgHz+VORk7VoPf
PeKxj4iGEQ/Qvye89qiPpPvmeuPMSA+BiRp+CskENC6FNzIuGA/4cslSlJ7vxBdA
Z/220t7WKWlRFtK9DIshXVSx+5T1D6gxZK+cW9Uh1YUfouWsbZ3dC96GfkHlAQNK
OYBeggSlIJDNizfnIA6Go/38Lh6+NZknTDS4QwzMDgYZkJTLh70ql45BP8AhJD5P
hTy6W4tJ++VbV5xLY3OwH8czFDgz3HS7O3NJ9Ve2ludnMLFTzZreEP/xr38hAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0hdysxbpZ+ZFabNYXo/9r913c3MwHwYDVR0j
BBgwFoAU1qlos5SSMo8WTxhTORKX+5dSJyowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMC9ENkE5NjhCMzk0OTIzMjhGMTY0RjE4NTMzOTEyOTdGQjk3NTIyNzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QTk2OEIzOTQ5MjMyOEYx
NjRGMTg1MzM5MTI5N0ZCOTc1MjI3MkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzAv
MzEzNzM3MmUzMzM5MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzAzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsScKMA0GCSqGSIb3DQEBCwUAA4IBAQBe14/AEGil
2C2iEaMSmbCuf98U7oQPJew1Y6RxXKSR0ulKENmZszhei/jFbWB8BPEraxP2OGYv
jU1osUXOWg01aTuhBdngO/kN3TDYCHY0IneE/hFjui+2/GWefLKd/XF/LNi6+85L
4YW6XZGdHx6V7l1b9warEiBlEdz23JVaYHC3FpC8WPmwOstv1ZWujGVtj13X8qgb
EGCoaNFqDUE1AiFSoO12Zf8oStFBj5BSUfefEYFIsaYJluAKLUev/TXmTneSOqz3
5VTfbVzQYjhCUsyucAlHIriYdVKQ7A/kIALfFVcjvvX4VayvhlKJ+IUfA4iT5n+z
IEEILZmPtIRs
-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org