Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa
File:                     3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa (raw, json)
Hash identifier:          QrHgnH20PUCxc4NwgYC+2D4L5cijhgfjOFhDU5a2mFE=
Subject key identifier:   34:7F:4F:CF:57:59:72:64:18:49:11:F3:92:49:A2:80:08:A3:05:5B
Certificate issuer:       /CN=80F95120380D97B8617C6C767FCF3931BDE7880D
Certificate serial:       4B9C40D4880A31B6F35AE3D5353D4E4DC5AFCE3C
Authority key identifier: 80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa
Signing time:             Thu 16 May 2024 19:43:24 +0000
ROA not before:           Thu 16 May 2024 19:38:24 +0000
ROA not after:            Thu 15 May 2025 19:43:24 +0000
asID:                     262342
IP address blocks:        177.125.112.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9c:40:d4:88:0a:31:b6:f3:5a:e3:d5:35:3d:4e:4d:c5:af:ce:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F95120380D97B8617C6C767FCF3931BDE7880D
        Validity
            Not Before: May 16 19:38:24 2024 GMT
            Not After : May 15 19:43:24 2025 GMT
        Subject: CN=347F4FCF57597264184911F39249A28008A3055B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:68:37:d5:93:c8:50:13:f4:2e:e5:d8:54:
                    52:9e:9f:a3:eb:4f:eb:b1:16:7f:3e:af:fa:68:a9:
                    2e:25:5b:73:e8:9e:cf:05:45:c6:cc:a1:e7:46:9f:
                    49:c0:d5:8f:f7:ff:ca:89:8e:7e:62:b0:2d:4a:7d:
                    f3:47:4a:f8:5e:ba:9b:54:5b:fb:b9:67:4f:16:cd:
                    03:d3:31:81:73:6d:ef:00:b5:5d:dd:88:e1:a0:cc:
                    62:62:97:bc:c1:04:f6:d3:92:53:f5:79:8e:39:4d:
                    da:cb:a7:c5:11:83:df:1f:ca:d2:20:38:9b:9b:d2:
                    2b:79:98:c3:3b:c6:7c:03:b2:92:47:f5:37:95:55:
                    ab:62:dd:d3:fb:95:32:e8:f9:bc:7b:d7:ad:73:ea:
                    3f:f5:53:1b:92:10:23:55:0f:84:d3:9b:ed:e4:28:
                    a2:25:6e:9d:04:c4:9b:9a:6e:f0:b4:b9:7a:91:03:
                    d6:66:bd:cb:1f:9d:d7:bc:3d:43:23:5b:34:30:2e:
                    71:32:58:b2:8c:50:b2:2d:f1:9f:00:2c:4b:3c:d7:
                    f4:f5:11:ec:96:cb:1e:ee:bc:94:21:3e:0e:42:73:
                    9d:85:55:6d:64:49:69:54:dc:d7:c4:41:d0:92:c8:
                    c4:9a:05:36:03:c4:2f:30:68:0e:b1:8f:7a:f2:4c:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:4F:CF:57:59:72:64:18:49:11:F3:92:49:A2:80:08:A3:05:5B
            X509v3 Authority Key Identifier:
                keyid:80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:fc:44:60:2d:24:18:e2:69:b2:d9:30:1c:b1:da:ff:d7:
         ef:6f:fd:e2:f9:9e:51:65:cd:47:9a:a7:c7:93:26:d6:db:68:
         41:6e:b2:97:7d:85:6a:b5:55:70:96:1f:40:d8:5e:8b:6e:b0:
         d6:cb:f4:b3:d4:1a:21:b5:f0:f5:98:dd:c3:92:3b:5f:65:8b:
         00:25:4c:02:58:0e:0d:c8:61:78:b6:41:ba:fa:45:30:4b:cb:
         96:28:5d:59:0a:8d:25:f7:c7:64:f2:8f:74:37:fe:97:66:94:
         ec:c1:cf:88:ad:26:bb:94:99:96:64:77:d6:4b:49:43:a4:aa:
         6d:e1:02:c9:74:2b:98:67:84:3c:d5:20:a7:72:5e:b5:40:c8:
         e0:9f:ea:fb:e9:2f:fd:2a:dd:72:1f:0c:e6:98:de:89:3e:29:
         55:22:47:bb:2b:20:40:89:af:67:d9:9b:db:86:0f:06:01:c1:
         68:75:44:6e:51:b6:d2:0a:99:e3:77:9d:7e:60:cb:06:15:e5:
         4a:4b:c4:8d:2d:66:31:b8:60:cf:5e:9e:be:a1:da:42:c6:4d:
         73:35:c4:1f:62:9d:b7:cd:07:7a:1c:4d:2e:bd:44:77:5b:8d:
         40:73:01:e8:28:ee:26:d2:e1:3e:30:3f:38:49:63:9b:c8:6e:
         fc:a6:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 01:11:54 2024 by rpki-client on console-ams.rpki-client.org