Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa
File:                     3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa (raw, json)
Hash identifier:          E/AZNwdz5Fe8IDsYsxy3l25t51wf7vtzr+1r92b1O28=
Subject key identifier:   0D:BB:77:F2:84:A2:37:91:CF:84:E3:12:81:05:56:02:C8:5D:3F:06
Certificate issuer:       /CN=0910833F44A41E8AEAEED59F8BA7CE34E5564498
Certificate serial:       690291F551988B141E2F7574D0C3B6F028CE5087
Authority key identifier: 09:10:83:3F:44:A4:1E:8A:EA:EE:D5:9F:8B:A7:CE:34:E5:56:44:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0910833F44A41E8AEAEED59F8BA7CE34E5564498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa
Signing time:             Fri 05 Apr 2024 04:49:59 +0000
ROA not before:           Fri 05 Apr 2024 04:44:59 +0000
ROA not after:            Fri 04 Apr 2025 04:49:59 +0000
asID:                     270588
IP address blocks:        177.129.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:02:91:f5:51:98:8b:14:1e:2f:75:74:d0:c3:b6:f0:28:ce:50:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0910833F44A41E8AEAEED59F8BA7CE34E5564498
        Validity
            Not Before: Apr  5 04:44:59 2024 GMT
            Not After : Apr  4 04:49:59 2025 GMT
        Subject: CN=0DBB77F284A23791CF84E31281055602C85D3F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:d2:8a:08:46:de:f4:29:ef:0c:12:95:44:
                    6d:0a:82:2f:39:e6:a7:59:54:ea:7d:80:72:8a:70:
                    f7:53:48:90:82:4e:26:46:68:e4:5c:ce:39:3f:47:
                    db:63:b5:5a:84:ff:3f:86:71:8f:d4:64:40:ca:7a:
                    b5:c8:cc:9d:ab:37:0c:16:2b:bf:38:b9:d0:2f:1f:
                    d4:bf:6d:95:6b:0f:20:bf:e3:68:c9:85:93:ad:61:
                    fd:f1:c4:aa:44:41:bb:49:8b:77:00:fb:8a:de:6e:
                    53:32:10:31:b7:b6:1a:b0:41:e5:a8:2b:e9:b7:ee:
                    27:85:bc:5e:4b:df:91:0e:31:da:76:84:d3:f6:e5:
                    11:08:28:78:8b:1f:2c:08:7e:3d:c1:17:e4:71:2e:
                    13:90:21:63:a5:97:97:95:75:d1:0c:9c:ce:fb:70:
                    84:9a:3e:bb:75:71:70:0b:20:a7:2a:63:2a:42:75:
                    0e:77:82:e8:6e:4e:ae:76:3c:fe:e6:84:76:f6:11:
                    28:e9:bf:2f:91:c9:5a:65:ce:48:73:46:59:39:f4:
                    db:c9:d3:21:d5:2b:2d:4d:1f:fb:ae:f0:47:ec:f8:
                    09:e1:d1:43:f5:dc:6a:ff:28:c6:5d:bb:c2:d7:82:
                    ed:88:16:e9:79:8b:3f:20:78:22:7f:ff:60:fe:26:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BB:77:F2:84:A2:37:91:CF:84:E3:12:81:05:56:02:C8:5D:3F:06
            X509v3 Authority Key Identifier:
                keyid:09:10:83:3F:44:A4:1E:8A:EA:EE:D5:9F:8B:A7:CE:34:E5:56:44:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/0910833F44A41E8AEAEED59F8BA7CE34E5564498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0910833F44A41E8AEAEED59F8BA7CE34E5564498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:63:8e:14:8d:9b:85:16:79:4a:03:58:2a:66:3a:4e:00:
         2a:d9:da:7f:4a:65:d3:e5:48:b7:4e:06:1f:ba:bb:66:66:f2:
         f2:18:ff:4c:3d:81:9d:fc:10:65:07:3f:8e:cd:dc:d8:47:7c:
         b2:7a:56:a2:a0:7e:26:83:37:fd:9d:5d:e7:c4:b3:61:fb:99:
         18:b0:fe:de:d7:62:da:2a:02:ad:bb:9e:82:ee:c1:54:03:ac:
         96:3a:2e:e2:e7:e7:21:b9:96:30:48:1c:5a:02:56:17:f4:98:
         37:61:28:57:f7:aa:34:d2:64:6d:eb:3e:4c:5a:79:ce:54:3a:
         db:f6:50:66:98:f6:2d:c5:32:7a:2b:8f:f3:bf:4c:4d:fc:16:
         72:58:73:81:c5:44:87:64:26:09:6f:ed:ba:54:50:b5:02:d1:
         8c:4c:c8:76:a9:30:d2:03:94:ad:d5:78:75:85:33:1b:93:34:
         f5:ac:79:95:1b:f4:d3:d9:68:be:0b:dd:1f:60:c3:b8:bf:b4:
         30:c2:50:bb:72:e9:eb:e1:2e:35:d2:4f:31:4c:fb:9b:94:de:
         1c:47:ea:4b:a6:76:5d:86:62:00:64:f9:f6:b4:f6:cd:04:ec:
         5d:7a:b4:a3:48:78:ee:8f:b5:29:68:2c:03:cc:ee:35:db:0b:
         c5:f2:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 04:44:05 2024 by rpki-client on console-fra.rpki-client.org