Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
File:                     3137372e33372e36342e302f31392d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          8leFq+t6NS5LwzqU+yrcgsKKe9S2jl062Ps29R/bMIE=
Subject key identifier:   E8:5B:67:04:85:EC:58:38:85:68:0C:2A:AF:C2:26:01:53:0A:FD:28
Certificate issuer:       /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial:       601F020A49DE28DED2D33EFE1AADA0A29449D00A
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
Signing time:             Thu 04 Apr 2024 23:55:03 +0000
ROA not before:           Thu 04 Apr 2024 23:50:03 +0000
ROA not after:            Thu 03 Apr 2025 23:55:03 +0000
asID:                     262417
IP address blocks:        177.37.64.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1f:02:0a:49:de:28:de:d2:d3:3e:fe:1a:ad:a0:a2:94:49:d0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
        Validity
            Not Before: Apr  4 23:50:03 2024 GMT
            Not After : Apr  3 23:55:03 2025 GMT
        Subject: CN=E85B670485EC583885680C2AAFC22601530AFD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:01:1c:d8:dd:87:86:5e:9a:fd:70:74:e0:
                    0a:d5:4f:e2:b7:45:16:ff:d7:79:cc:66:9b:86:11:
                    54:b4:35:7f:86:79:21:bc:82:71:f1:4e:10:21:9b:
                    40:d3:5e:8a:7d:08:cb:d8:e1:76:73:e5:d6:0d:4d:
                    9f:8f:45:16:8e:0d:15:55:83:a0:e2:14:1d:54:55:
                    68:76:5c:71:2d:39:c7:db:ee:65:2d:57:5f:d4:34:
                    8b:62:75:f1:9a:87:57:c3:aa:46:b1:a2:c2:1f:5a:
                    3b:21:f0:3d:00:c3:43:e4:04:68:ac:ec:1a:ff:de:
                    15:4d:53:8c:8d:7b:83:eb:1d:ba:70:07:12:0a:5f:
                    02:41:4a:84:bc:68:3c:bd:b8:af:55:1c:43:94:e6:
                    27:2a:2a:c3:16:39:95:27:91:65:6d:7b:f5:be:8a:
                    0f:bc:cc:5c:34:ff:c0:cc:9d:16:67:5a:f1:6b:00:
                    ae:ff:cb:25:a4:63:17:6f:a8:95:ca:38:45:e3:27:
                    e3:a6:4b:21:ec:b6:27:d5:cc:5c:8c:2a:ad:23:f9:
                    1b:43:4d:ca:91:03:df:b7:06:13:a4:d5:87:f0:17:
                    17:ed:39:41:54:2c:ea:73:f8:02:8d:74:16:ff:dc:
                    cc:59:3f:63:28:d0:2e:bb:b1:da:a1:16:fc:4a:ce:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5B:67:04:85:EC:58:38:85:68:0C:2A:AF:C2:26:01:53:0A:FD:28
            X509v3 Authority Key Identifier:
                keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:42:59:ef:5c:c8:c1:e7:0a:78:40:ce:03:45:17:02:28:d4:
         55:de:e3:1d:b2:86:86:80:a4:4b:97:1d:b0:4e:fc:c3:b6:c9:
         f0:d4:bb:2f:90:13:a0:f4:f0:75:ff:b3:fe:6c:95:b4:04:bc:
         2e:4d:5d:2b:3e:7f:e4:0b:ab:47:ee:97:11:95:06:47:f0:88:
         d3:e0:d9:53:fc:09:5f:fb:d3:5e:df:eb:18:ed:9d:7e:1c:1f:
         49:f5:a8:f2:d5:4d:23:cd:da:29:85:28:e8:48:09:3b:47:11:
         59:55:bc:89:bd:10:b3:72:ab:fb:32:84:8b:4e:39:ee:0d:93:
         42:7f:f1:c9:3c:39:a7:d2:69:5c:1d:66:7e:ce:c3:3f:25:d6:
         10:bb:0c:08:cb:72:47:84:66:46:18:24:c7:76:61:90:ce:d8:
         fa:32:4a:a3:a2:15:c2:b8:16:2a:98:e8:58:56:61:d4:64:87:
         80:d5:84:b8:f8:86:a1:e3:13:f9:a2:d5:15:20:92:9c:0f:0e:
         cc:c1:d4:5d:c4:17:5f:7b:94:2b:ab:77:19:09:1a:a9:55:0c:
         2c:55:c9:46:f0:cd:1b:d2:7e:12:1a:4f:9f:1f:14:9c:8e:8d:
         ab:39:22:ed:92:40:04:9a:1c:18:42:4a:af:83:ff:22:60:cb:
         53:fc:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 20:08:09 2024 by rpki-client on console-ams.rpki-client.org