Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32302d3234203d3e203532393330.roa
File:                     3137372e3138352e34382e302f32302d3234203d3e203532393330.roa (raw, json)
Hash identifier:          IKUCXrw6RfeoIqeMzzNkMzJDFqL9Bl+bJMYf+ubdxPc=
Subject key identifier:   6E:1A:2B:5F:3F:02:BE:2A:EC:B1:4A:38:47:FB:86:EB:00:A7:09:0D
Certificate issuer:       /CN=0E203687834946F995C6BC335F9DA7BCF0DE9407
Certificate serial:       0FC9F009ECE9B5AFBE01625C288CEADE3EF59955
Authority key identifier: 0E:20:36:87:83:49:46:F9:95:C6:BC:33:5F:9D:A7:BC:F0:DE:94:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E203687834946F995C6BC335F9DA7BCF0DE9407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32302d3234203d3e203532393330.roa
Signing time:             Tue 20 Aug 2024 20:02:20 +0000
ROA not before:           Tue 20 Aug 2024 19:57:20 +0000
ROA not after:            Tue 19 Aug 2025 20:02:20 +0000
asID:                     52930
IP address blocks:        177.185.48.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c9:f0:09:ec:e9:b5:af:be:01:62:5c:28:8c:ea:de:3e:f5:99:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E203687834946F995C6BC335F9DA7BCF0DE9407
        Validity
            Not Before: Aug 20 19:57:20 2024 GMT
            Not After : Aug 19 20:02:20 2025 GMT
        Subject: CN=6E1A2B5F3F02BE2AECB14A3847FB86EB00A7090D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:1e:b6:01:0e:8d:f6:f4:23:2d:7d:54:8e:
                    8f:47:ef:cb:94:40:43:9d:da:c6:a7:a9:78:8c:13:
                    96:65:ca:22:c9:f9:e4:2c:95:eb:64:99:6b:18:cd:
                    96:f9:ed:29:76:e5:b7:ee:2a:e2:c5:a4:d1:98:4e:
                    62:2c:13:f4:60:a3:1c:a4:f0:aa:65:16:5f:cf:43:
                    4d:5d:c9:4f:1b:80:c0:43:ab:92:d6:45:d8:91:e8:
                    47:c6:33:7c:5e:4d:52:d6:58:45:b5:3a:56:f3:c2:
                    78:a9:a7:8d:0d:8c:50:f0:63:9e:a3:77:42:77:34:
                    df:83:05:44:eb:39:c4:34:63:ad:a7:36:49:b9:78:
                    97:73:9c:1c:8e:52:ac:6e:e8:28:c2:7b:a0:94:e3:
                    eb:5b:ab:30:23:ff:52:de:e7:63:dd:c0:06:23:97:
                    98:59:4e:e5:ad:f7:a1:a7:a2:52:00:fc:af:87:b3:
                    a1:69:91:ae:ae:4a:f2:4e:c1:90:dd:8c:47:21:46:
                    7f:95:3a:41:d1:c0:d7:b1:d7:ef:af:82:f6:7a:45:
                    7d:6b:2a:fd:a1:02:76:87:10:ed:60:e5:39:85:65:
                    70:d9:d7:0e:85:91:23:14:d6:33:32:76:b6:1b:03:
                    e1:4d:47:d3:8d:cb:fd:c5:66:46:e8:3d:31:89:ab:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1A:2B:5F:3F:02:BE:2A:EC:B1:4A:38:47:FB:86:EB:00:A7:09:0D
            X509v3 Authority Key Identifier:
                keyid:0E:20:36:87:83:49:46:F9:95:C6:BC:33:5F:9D:A7:BC:F0:DE:94:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/0E203687834946F995C6BC335F9DA7BCF0DE9407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E203687834946F995C6BC335F9DA7BCF0DE9407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32302d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:92:37:0e:df:cf:59:e3:4d:93:30:9e:df:22:b3:32:7a:26:
         de:5f:79:02:89:37:b7:51:b1:08:14:de:83:41:5d:61:a2:a9:
         0e:39:b5:4a:62:53:d3:d0:90:17:f0:66:a8:79:ad:5b:d4:94:
         63:ce:7f:1f:82:4b:a9:2a:c1:09:4b:6e:51:4c:26:4c:eb:d1:
         59:f8:d2:f1:d6:c0:06:f6:d2:5c:d4:a1:36:f9:bd:6b:c8:4e:
         36:97:1e:3e:c5:00:ba:71:96:54:c5:84:68:6f:9b:8a:d1:81:
         37:62:72:70:4f:98:08:ec:a5:d1:6d:24:58:d2:f6:de:88:2d:
         5c:da:03:a0:06:02:77:80:c6:6c:81:30:98:7d:ac:e3:f6:46:
         1a:57:7c:22:74:31:1b:10:c9:61:27:b6:c5:53:af:1c:2b:32:
         12:91:b4:6c:c7:33:54:50:d8:01:40:06:e5:75:59:f9:5c:f2:
         f2:d1:f4:2b:7b:71:c7:f9:42:80:36:bd:a3:f6:35:f0:30:92:
         01:34:44:9a:4a:8f:c4:00:ee:bd:ea:a6:19:99:47:3b:e3:76:
         34:93:90:73:11:9b:3a:09:09:9f:23:15:c0:4f:cc:2b:0a:cf:
         2d:a3:50:6a:51:85:8a:1f:2d:e4:75:8c:e7:8c:f9:9b:be:6e:
         34:a5:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org