Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/3137372e38372e3230382e302f32312d3234203d3e203532383630.roa
File:                     3137372e38372e3230382e302f32312d3234203d3e203532383630.roa (raw, json)
Hash identifier:          oZOK56Y/s3/EsxhBKygcWG3kQoaVOGJOgmVeXSHhjCc=
Subject key identifier:   3E:7F:45:3A:0A:C3:41:CE:3E:C1:46:E7:3C:AD:65:8A:3F:3C:2B:A7
Certificate issuer:       /CN=A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E
Certificate serial:       443CFC9965253FF1A7EF0907815054F676B118C4
Authority key identifier: A5:D7:1B:E2:C3:B9:16:04:1D:EE:4A:7C:A0:95:46:42:EB:D3:A3:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/3137372e38372e3230382e302f32312d3234203d3e203532383630.roa
Signing time:             Thu 11 Jul 2024 14:18:32 +0000
ROA not before:           Thu 11 Jul 2024 14:13:32 +0000
ROA not after:            Thu 10 Jul 2025 14:18:32 +0000
asID:                     52860
IP address blocks:        177.87.208.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3c:fc:99:65:25:3f:f1:a7:ef:09:07:81:50:54:f6:76:b1:18:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E
        Validity
            Not Before: Jul 11 14:13:32 2024 GMT
            Not After : Jul 10 14:18:32 2025 GMT
        Subject: CN=3E7F453A0AC341CE3EC146E73CAD658A3F3C2BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:7f:d4:34:d9:90:79:2f:1f:c7:28:b1:9b:
                    23:29:bb:77:69:da:4f:78:ac:c2:87:54:5d:71:29:
                    dc:f4:a4:f4:9c:2c:2e:77:ec:34:0b:97:53:b2:61:
                    35:09:cc:1e:7c:23:ba:5c:6b:25:9d:a1:75:f5:63:
                    62:b9:71:c8:fd:80:57:d0:f9:e3:b5:06:cf:62:d7:
                    ee:6d:79:ac:f6:6e:09:ea:f4:79:fe:67:50:bb:31:
                    af:e8:05:2d:33:70:ab:20:de:98:95:27:e0:6c:6e:
                    10:de:a9:7b:11:14:55:f8:5b:01:b7:84:27:37:c9:
                    bf:5d:1d:84:08:9f:0b:d3:c0:51:5a:72:8f:8e:1e:
                    fd:63:3f:cc:a6:f1:86:03:a3:78:1a:ec:27:40:e6:
                    10:2c:65:c5:1f:94:c2:a6:ae:e2:d5:fd:77:3f:39:
                    20:cd:a5:67:e9:91:79:65:79:9d:3b:70:34:3d:ab:
                    62:bd:70:ba:7c:9b:f0:eb:df:9d:b5:2d:ab:e0:37:
                    c9:c4:02:15:da:03:dc:51:fa:e7:a0:58:9a:f1:23:
                    61:6b:97:17:d1:94:41:e5:dc:59:12:80:66:c0:18:
                    d7:8f:b5:11:a5:7a:1e:b7:70:76:70:69:4a:9e:12:
                    c0:66:9c:af:ed:e8:db:32:f7:f1:94:49:0c:fc:2e:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7F:45:3A:0A:C3:41:CE:3E:C1:46:E7:3C:AD:65:8A:3F:3C:2B:A7
            X509v3 Authority Key Identifier:
                keyid:A5:D7:1B:E2:C3:B9:16:04:1D:EE:4A:7C:A0:95:46:42:EB:D3:A3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/3137372e38372e3230382e302f32312d3234203d3e203532383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:9a:7d:56:92:c8:2a:c0:96:72:e8:a3:a1:74:63:44:11:
         23:91:80:8f:f7:0a:5d:64:57:d2:7a:e7:2d:8e:d6:d6:a9:86:
         ca:ed:6d:96:ff:81:60:21:c0:d7:fe:af:d8:0b:5d:b6:dd:c2:
         cc:06:dc:4c:3a:6f:5d:13:42:e1:0c:c1:c2:68:60:a1:94:e5:
         2a:93:b5:68:f4:73:46:71:1a:f7:43:37:b1:52:60:eb:69:26:
         19:db:25:3d:44:04:0b:9f:a1:e4:84:bc:82:0e:08:76:4c:15:
         da:2c:56:ea:33:a4:33:df:26:56:03:da:ff:d8:dd:8f:8e:f0:
         8e:90:fc:47:7a:9b:7d:7e:8d:ec:77:6d:74:85:23:67:1f:70:
         d1:1a:e8:c7:80:2c:ed:58:a3:f2:6d:88:8b:ec:74:6f:ee:db:
         b6:36:37:5e:c6:9e:f1:9e:48:6c:33:6c:cd:47:6e:ec:20:5a:
         47:90:0a:42:2c:54:d9:1e:9b:f6:60:5e:0b:4f:d9:44:1f:b1:
         61:85:1d:73:3a:f0:c9:15:b8:c4:a1:58:28:63:09:7d:ae:5e:
         6f:d9:5e:86:f6:12:b7:05:35:c0:d8:d1:a3:9f:c1:d5:ae:ae:
         7e:f4:9e:74:7b:0c:a1:b4:d5:a6:3e:67:55:f9:98:4e:23:3d:
         7f:04:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:33 2024 by rpki-client on console-fra.rpki-client.org