Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa
File:                     3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa (raw, json)
Hash identifier:          n9iU9pQLtkOYWHXqLGixn+UTNjFjzTrBlzSjwa1lR7o=
Subject key identifier:   EA:3C:9B:86:AC:D1:F5:2B:FF:87:F2:F2:31:45:63:B8:B7:BE:2C:25
Certificate issuer:       /CN=9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE
Certificate serial:       6BC5D235B7AE3FAAF47F82B164E26B686BC04184
Authority key identifier: 96:04:EE:46:3B:8B:37:33:EC:18:A5:EC:DC:F5:D7:CB:F3:03:7F:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa
Signing time:             Wed 03 Apr 2024 19:16:46 +0000
ROA not before:           Wed 03 Apr 2024 19:11:46 +0000
ROA not after:            Wed 02 Apr 2025 19:16:46 +0000
asID:                     262368
IP address blocks:        177.128.96.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c5:d2:35:b7:ae:3f:aa:f4:7f:82:b1:64:e2:6b:68:6b:c0:41:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE
        Validity
            Not Before: Apr  3 19:11:46 2024 GMT
            Not After : Apr  2 19:16:46 2025 GMT
        Subject: CN=EA3C9B86ACD1F52BFF87F2F2314563B8B7BE2C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:0b:af:ba:2f:9b:62:04:a5:24:33:99:f7:
                    7a:f7:52:f3:76:ac:70:8f:15:d5:e6:68:4a:2b:01:
                    a9:82:a3:55:f3:8b:ff:2a:f8:24:be:3b:ff:66:f5:
                    c9:9a:a6:95:6e:7d:d9:75:85:96:7a:fe:f3:1d:ab:
                    df:34:c0:b5:e9:a2:a6:5a:b4:5f:69:07:e0:12:a8:
                    7b:8f:43:90:16:2b:64:14:d0:16:40:be:c7:98:4e:
                    fd:6f:e6:8d:14:c5:d5:1d:ac:1e:1d:36:6c:6d:c9:
                    f5:12:f1:3e:f4:db:a7:ec:d9:b8:a1:76:ca:68:c9:
                    a8:ca:14:d4:70:69:7c:bb:28:23:6a:46:27:d9:24:
                    9d:18:cf:94:90:c4:43:ab:0e:8e:12:55:47:16:4f:
                    7e:7e:cb:24:87:26:c1:37:eb:24:5f:ab:be:d0:63:
                    13:eb:63:89:ec:c0:42:14:07:da:cc:a0:4d:27:e3:
                    ad:c9:7e:aa:cf:b5:59:14:8e:f4:0d:8c:d8:b9:d9:
                    85:3c:90:49:f2:72:ba:91:d7:60:97:39:37:e6:29:
                    db:eb:b2:00:8a:9d:1e:b0:9e:d8:cd:73:9c:f5:62:
                    0a:1d:1b:bd:4f:0a:b3:d3:fb:ea:22:63:53:c5:ee:
                    45:49:85:6b:21:56:86:41:5c:2e:c9:af:5f:92:82:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3C:9B:86:AC:D1:F5:2B:FF:87:F2:F2:31:45:63:B8:B7:BE:2C:25
            X509v3 Authority Key Identifier:
                keyid:96:04:EE:46:3B:8B:37:33:EC:18:A5:EC:DC:F5:D7:CB:F3:03:7F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:47:67:3d:37:9d:de:6c:5b:d0:41:db:5a:6b:0e:cf:e3:71:
         62:0a:9b:13:8d:bc:f9:d3:59:26:ad:ec:3f:fd:cb:26:f1:31:
         f2:48:a6:bc:17:59:6e:32:5c:aa:b5:a1:32:7e:9a:b8:db:8f:
         07:61:ea:ba:90:2d:9e:50:90:66:6d:85:3f:cc:85:2e:7a:6e:
         c1:80:1c:a4:51:eb:0d:f1:41:c3:42:ea:42:6c:4e:60:1b:07:
         1e:c7:ea:82:62:49:87:90:ec:b3:05:9e:c3:64:4f:63:e1:e9:
         f8:1d:ff:32:c5:d4:3a:8c:e9:2e:01:e4:8e:a5:4b:7c:b2:65:
         c0:9a:28:ba:73:a5:d8:91:b0:e3:53:07:5a:2b:cd:62:c2:7f:
         d5:42:45:d6:4c:03:f5:28:ea:f0:04:7a:af:21:34:5b:c5:0d:
         a6:80:3b:40:e0:69:20:53:cf:20:a5:51:99:5f:0e:86:f6:6f:
         3a:81:be:bd:56:61:00:99:f0:b1:c7:90:fe:4c:70:12:01:d3:
         9b:7f:8c:3b:99:a8:32:68:83:9b:2a:e6:5f:49:4d:13:d9:df:
         be:b3:6f:a4:3b:88:ad:83:ca:90:d0:ea:d0:c2:a4:fe:00:dc:
         7b:d3:03:39:fa:df:db:0a:a7:41:d9:0c:f6:17:fb:8f:7d:87:
         8a:2a:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 06:04:03 2024 by rpki-client on console-ams.rpki-client.org