Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e37312e39322e302f32322d3332203d3e20323633323932.roa
File:                     3137372e37312e39322e302f32322d3332203d3e20323633323932.roa (raw, json)
Hash identifier:          aOCqpsQZ0IJJdk2yh+GTzAzRbXWV4JTEWniGPDvwArY=
Subject key identifier:   FF:AF:A3:89:E9:A0:22:4A:BC:B7:1E:96:1F:92:80:E8:56:A5:DD:D9
Certificate issuer:       /CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
Certificate serial:       56EB0E7B6A79055E4C19AEAAF7A27FC561E78DB4
Authority key identifier: E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e37312e39322e302f32322d3332203d3e20323633323932.roa
Signing time:             Wed 08 May 2024 20:19:06 +0000
ROA not before:           Wed 08 May 2024 20:14:06 +0000
ROA not after:            Wed 07 May 2025 20:19:06 +0000
asID:                     263292
IP address blocks:        177.71.92.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:eb:0e:7b:6a:79:05:5e:4c:19:ae:aa:f7:a2:7f:c5:61:e7:8d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
        Validity
            Not Before: May  8 20:14:06 2024 GMT
            Not After : May  7 20:19:06 2025 GMT
        Subject: CN=FFAFA389E9A0224ABCB71E961F9280E856A5DDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:99:f4:df:7d:1d:8d:ae:34:ed:0d:97:da:
                    b4:1f:66:55:a1:8b:98:31:2b:0e:45:33:18:c1:00:
                    04:04:f4:a3:2b:8b:44:38:e1:cd:c4:77:a8:04:07:
                    8d:ce:57:d3:e1:b7:1e:b5:c8:05:0d:76:d3:72:a5:
                    c2:c3:b8:31:8e:03:2a:e5:ea:82:32:d7:1a:c4:a0:
                    43:ba:7e:ed:cd:4d:38:05:b4:de:9c:1f:a6:ba:e1:
                    de:6e:b8:4a:d5:11:41:1a:af:2c:41:17:86:b1:7d:
                    60:f1:99:0d:33:b0:22:bb:b3:79:04:b3:a3:d0:b7:
                    fb:b0:ce:d1:93:cd:1c:66:ed:22:e6:3b:33:3e:da:
                    5d:d9:0d:8e:94:39:10:22:a5:c3:96:de:ff:c5:ee:
                    be:07:dd:77:7f:e2:96:f7:15:42:40:2c:d9:63:0e:
                    24:9f:11:14:54:cc:82:a8:7e:fc:6c:2f:2e:c1:d3:
                    8f:66:d8:51:65:07:6f:6c:8f:48:ba:3f:19:55:b4:
                    37:a1:a5:cc:58:67:93:b1:50:d5:25:f3:c5:de:20:
                    99:f0:54:dc:d0:96:c4:a9:ac:94:e2:7c:20:8d:d6:
                    75:62:0e:7f:58:e5:cc:b0:d1:9a:42:85:d5:9e:4a:
                    ac:0d:95:2d:eb:75:d5:b6:de:df:15:7c:d8:70:59:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:A3:89:E9:A0:22:4A:BC:B7:1E:96:1F:92:80:E8:56:A5:DD:D9
            X509v3 Authority Key Identifier:
                keyid:E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e37312e39322e302f32322d3332203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:b3:b7:96:1c:f5:3a:06:8f:a4:7a:6a:ec:1c:03:f3:60:
         4c:a7:07:ec:31:f4:28:25:09:b8:39:af:2b:0f:0d:69:4c:ef:
         ac:76:53:83:54:e8:b8:a7:18:ea:e0:bb:6f:76:f9:09:df:50:
         d2:9a:54:af:e1:cf:2f:c3:0c:e0:5e:a7:7b:a7:fe:2b:15:ed:
         ac:a6:ca:55:4d:6f:16:9e:05:e3:e6:5a:0d:1c:95:3e:ee:bf:
         2b:61:0f:c4:5b:0a:c2:7c:c0:68:4d:1b:d4:5c:20:c6:db:6d:
         16:ec:5e:fc:0f:29:9e:12:79:dd:79:01:8c:76:63:60:30:73:
         18:c7:15:f2:39:2a:bc:68:54:19:d4:3b:d5:15:f4:d2:51:b9:
         70:fb:57:c0:8b:22:b9:61:09:57:ad:d0:5c:49:14:49:db:0b:
         7f:19:71:bc:a1:7d:b2:6b:80:5b:1b:23:ec:96:eb:95:97:ae:
         b1:38:21:9e:8b:91:98:19:ba:1c:72:3f:7c:50:b0:08:f3:a2:
         00:d0:f4:fe:b9:01:54:47:91:03:9d:12:d0:7e:64:50:20:84:
         c0:51:47:da:48:df:52:53:7c:3e:e4:56:90:2e:34:87:e5:13:
         34:ad:a2:ed:ce:75:87:81:d1:79:de:f3:70:4f:e1:72:d4:ba:
         cb:a9:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 11:30:01 2024 by rpki-client on console-fra.rpki-client.org