Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
File:                     3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (raw, json)
Hash identifier:          SHOI4rWuLcQdWODvNdk8dg+igtt5L1V2/c9VsW20y/Y=
Subject key identifier:   0E:77:AF:40:8E:10:B8:53:DC:A8:F6:A0:22:D3:9F:60:71:BF:79:AD
Certificate issuer:       /CN=944E34DEA91B28826835424C55845E9BDF8C78BA
Certificate serial:       37C342B60D8E481A98F0C133B81BAD0F61984C12
Authority key identifier: 94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
Signing time:             Thu 04 Apr 2024 02:59:50 +0000
ROA not before:           Thu 04 Apr 2024 02:54:50 +0000
ROA not after:            Thu 03 Apr 2025 02:59:50 +0000
asID:                     262373
IP address blocks:        177.128.136.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c3:42:b6:0d:8e:48:1a:98:f0:c1:33:b8:1b:ad:0f:61:98:4c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944E34DEA91B28826835424C55845E9BDF8C78BA
        Validity
            Not Before: Apr  4 02:54:50 2024 GMT
            Not After : Apr  3 02:59:50 2025 GMT
        Subject: CN=0E77AF408E10B853DCA8F6A022D39F6071BF79AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:04:95:e5:ee:98:e3:5a:30:59:5b:f4:aa:
                    9a:0e:0d:d3:c9:17:6f:ae:1f:e1:89:2e:25:79:9a:
                    fb:a4:02:1c:d4:8e:b8:8b:65:7c:02:53:de:ec:c6:
                    48:86:3d:ae:0e:82:af:dc:d6:d9:c6:ed:33:72:f5:
                    8a:a5:2a:b9:8d:23:43:2c:b2:36:0e:f7:8e:8f:17:
                    50:fe:ad:4c:6f:30:b2:f0:64:03:5b:8b:63:be:0e:
                    2d:f2:4d:c8:a4:00:aa:08:e8:db:79:5e:83:9e:a3:
                    8d:f4:92:76:77:56:b2:f8:3b:2d:fa:30:52:78:72:
                    78:1b:15:c8:18:3c:f3:a4:c8:e0:96:4b:01:e5:a4:
                    26:60:7a:2d:41:f2:d2:6a:9e:71:fc:49:e2:75:e0:
                    ff:37:20:f6:35:4b:cb:e6:28:42:15:91:09:9b:04:
                    6c:f8:62:62:48:70:8f:6a:78:b1:af:5c:4d:78:07:
                    58:57:58:d9:6f:31:f1:db:69:f0:9f:59:d2:1f:38:
                    37:f2:f2:0e:98:4f:87:60:21:e8:7a:6d:9c:b8:e4:
                    7b:5f:bb:85:9a:fc:b5:54:d8:a0:30:47:e2:d9:d5:
                    60:30:da:bc:fb:02:ff:f5:25:58:91:c0:a0:3d:78:
                    bf:27:0e:f0:3a:1c:0e:07:9c:93:62:ea:ae:e3:57:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:77:AF:40:8E:10:B8:53:DC:A8:F6:A0:22:D3:9F:60:71:BF:79:AD
            X509v3 Authority Key Identifier:
                keyid:94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/944E34DEA91B28826835424C55845E9BDF8C78BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:a6:03:90:d6:b0:01:7a:33:4c:e1:41:84:0a:ff:4f:cd:
         c3:77:16:a8:5d:99:ee:e9:54:2f:d0:7b:3a:15:b7:c7:df:6c:
         a3:75:8d:ec:0c:3c:dc:48:e4:aa:dc:58:02:ab:76:02:42:79:
         20:61:60:40:48:08:2b:23:62:e1:eb:41:16:45:19:18:97:5a:
         0c:0d:28:81:cc:5b:09:e1:d6:2b:3f:c1:35:5b:28:83:63:5e:
         33:35:99:a1:ce:e9:cc:f5:ed:7d:7f:8b:8c:be:c0:31:6c:53:
         f8:ef:93:af:ae:3e:f9:c4:3d:c9:48:e0:35:c0:93:03:51:a4:
         a7:e6:0c:82:08:b9:f3:b4:88:0a:e9:a6:e4:fa:75:97:dc:e0:
         c4:0a:d6:7c:69:3e:ae:20:7d:db:14:52:c2:16:a9:a7:04:ae:
         21:47:f2:41:77:9f:2a:95:d2:5d:b9:ff:aa:d0:50:e5:ba:b1:
         16:1b:d1:1d:f3:4f:4d:5c:39:63:0f:d9:42:e2:86:46:5f:47:
         27:86:bf:0b:a4:4f:af:4f:57:c7:28:99:96:58:8e:6d:93:7a:
         ce:93:5e:42:62:6f:43:10:8c:69:96:bd:c3:0e:e5:90:b6:ca:
         9b:ed:db:61:64:1f:64:50:bb:84:bb:08:90:59:f1:94:07:f0:
         58:f1:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 14:02:14 2024 by rpki-client on console-fra.rpki-client.org