Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa
File:                     3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          sF7dr2kUzPOuyj+5+n32gi6KsI/pLQ9/HfJO0IxZws0=
Subject key identifier:   7C:D3:A0:E7:74:B3:BE:A8:95:67:23:97:89:D2:8D:E5:06:3A:6C:C3
Certificate issuer:       /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial:       3A52ACFCE55A4C4F59D67F46758A2D7C90CF95E6
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa
Signing time:             Thu 04 Apr 2024 23:55:03 +0000
ROA not before:           Thu 04 Apr 2024 23:50:03 +0000
ROA not after:            Thu 03 Apr 2025 23:55:03 +0000
asID:                     262417
IP address blocks:        177.129.200.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:ac:fc:e5:5a:4c:4f:59:d6:7f:46:75:8a:2d:7c:90:cf:95:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
        Validity
            Not Before: Apr  4 23:50:03 2024 GMT
            Not After : Apr  3 23:55:03 2025 GMT
        Subject: CN=7CD3A0E774B3BEA89567239789D28DE5063A6CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:50:36:0e:95:25:d2:06:b1:11:af:68:33:
                    79:ad:f3:96:00:52:c7:92:1d:28:33:2f:fd:09:d8:
                    b8:db:56:05:ed:b8:26:dd:8a:86:8b:a0:b8:e4:3b:
                    5b:d8:98:47:a2:75:b6:eb:b5:be:41:97:34:cb:15:
                    62:50:91:6e:02:eb:81:a4:e2:6a:f9:07:4d:83:1d:
                    c5:69:8f:71:45:2b:53:20:0c:69:4a:d8:fa:3b:25:
                    b7:de:56:a4:4c:52:5e:d9:18:72:c9:0a:22:ce:74:
                    2a:c6:be:fd:c0:cc:6f:58:33:f1:3a:7a:9c:a0:b1:
                    d0:8e:f8:0e:01:0c:89:e3:2e:fa:82:d0:a2:24:cb:
                    1f:b5:bb:20:76:ec:88:3d:cf:66:94:79:77:5e:5d:
                    58:12:06:08:15:c9:a4:b0:d5:81:43:0b:be:5c:0a:
                    70:3c:c8:2e:85:13:5f:60:65:88:0f:71:ea:ae:34:
                    4b:91:29:fe:f4:d0:a8:ef:ec:da:9a:01:f5:7d:af:
                    ad:4f:12:e2:39:b5:b6:94:7a:3b:06:77:80:ac:47:
                    b0:18:b2:17:4f:da:53:a1:bb:3c:53:35:f9:b6:c1:
                    2f:57:e0:de:f3:a2:ea:c7:b4:bd:fe:8d:19:54:3e:
                    0c:3e:8e:b3:4a:79:c7:35:f7:e0:12:5d:37:fc:c7:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D3:A0:E7:74:B3:BE:A8:95:67:23:97:89:D2:8D:E5:06:3A:6C:C3
            X509v3 Authority Key Identifier:
                keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:07:12:43:52:fe:3c:39:a8:9f:15:71:2a:63:04:18:c8:
         e0:43:a8:09:e7:70:bc:04:89:57:99:2c:ba:5c:cb:4b:e1:38:
         2b:be:91:99:0b:65:a0:a5:9d:a2:8c:ce:19:38:32:8c:e6:35:
         94:af:cd:0a:ef:8d:84:5c:26:1d:b5:59:2c:8a:e4:83:28:d3:
         4b:e2:a0:eb:7b:3d:97:1d:1f:b9:ea:4b:0c:d8:8a:cb:f5:e7:
         bc:64:57:a6:cf:f5:f3:fd:b9:a9:fc:28:b9:12:8e:75:29:85:
         d4:be:8f:b9:25:5b:0a:17:20:84:13:fc:d5:84:cd:84:e6:f1:
         1b:b4:fc:32:f8:c7:9b:b9:d1:7a:f7:79:b8:5f:9e:f2:90:c0:
         7a:02:77:e8:fe:70:75:a3:35:c1:70:ec:1b:ed:18:74:2a:cc:
         a5:32:30:49:ec:78:65:4d:52:7f:05:3d:aa:b1:14:01:b8:05:
         ae:4d:9d:6a:6e:c3:db:8a:06:e3:4a:14:a0:7f:1e:5b:cc:a3:
         18:b1:38:c4:d8:78:db:32:a6:b7:8d:03:5e:ac:8d:ac:a7:88:
         0a:ba:45:be:6c:f4:15:dd:df:13:48:85:bf:0e:8b:15:bb:a5:
         ac:c9:13:ad:c1:a6:c0:06:99:3a:46:66:e9:c5:c8:8b:04:63:
         0a:a6:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org