Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3232332e302f32342d3234203d3e20323632383638.roa
File:                     3137372e32302e3232332e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier:          PCZj13jQm0klpob/ssdy9/Sm48QC8BXWHBV6o+NNr6c=
Subject key identifier:   3E:C9:3A:ED:2A:6C:F9:60:B5:0B:17:57:04:B9:C9:58:C5:73:1E:4A
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       2431A171B8BF551963569C75680A782D8D42B943
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3232332e302f32342d3234203d3e20323632383638.roa
Signing time:             Thu 24 Feb 2022 19:08:58 +0000
ROA not before:           Thu 24 Feb 2022 19:03:58 +0000
ROA not after:            Thu 23 Feb 2023 19:08:58 +0000
asID:                     262868
IP address blocks:        177.20.223.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:31:a1:71:b8:bf:55:19:63:56:9c:75:68:0a:78:2d:8d:42:b9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Feb 24 19:03:58 2022 GMT
            Not After : Feb 23 19:08:58 2023 GMT
        Subject: CN=3EC93AED2A6CF960B50B175704B9C958C5731E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:51:f0:96:4a:35:c7:90:d7:cd:15:12:80:
                    b1:06:e4:c9:5f:eb:d8:55:a7:f6:60:19:1f:9d:e2:
                    c9:1c:a9:71:c4:8f:7c:22:7c:dc:87:9f:dc:59:e5:
                    82:f4:22:0b:41:41:c2:4a:55:16:af:23:d4:41:18:
                    39:63:d5:b4:49:4d:a4:94:57:77:6e:c8:e9:c1:78:
                    dd:07:f9:7f:9e:72:79:47:0c:c8:63:6f:70:9a:fe:
                    b4:35:bf:a1:3f:0a:48:78:e4:fd:1c:40:26:5b:e6:
                    8c:dd:60:fb:db:5e:e5:00:c9:20:bb:e3:a5:eb:61:
                    78:ac:56:37:c0:a7:2d:d4:15:69:1d:84:86:5b:40:
                    87:b3:73:0d:01:c2:35:09:64:3a:cd:83:75:d4:1d:
                    f7:39:1e:ac:69:96:3d:33:ae:d3:33:96:a2:b4:2a:
                    fc:e9:db:03:81:3e:32:6f:39:84:2e:fa:2c:50:32:
                    36:26:b4:9e:eb:40:aa:a2:89:88:ce:ca:bf:49:24:
                    74:33:0e:8e:77:2e:f2:ac:22:bd:69:46:d8:95:27:
                    7f:32:a0:39:93:c7:70:24:a0:33:d7:3b:ce:1b:dd:
                    d9:b0:1a:0b:db:d7:d9:fa:84:ec:f4:08:10:61:40:
                    5c:46:28:0a:52:c3:df:d4:38:35:71:05:02:2d:18:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:3A:ED:2A:6C:F9:60:B5:0B:17:57:04:B9:C9:58:C5:73:1E:4A
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3232332e302f32342d3234203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:b0:79:0f:b8:1e:b9:e7:b5:5a:0f:42:4a:0f:79:42:32:
         cb:15:ce:30:85:cf:2a:fa:10:a4:4a:18:28:f6:60:ea:74:55:
         ea:ce:ed:b9:92:c0:fa:8b:78:fa:03:81:87:4e:a2:2f:c6:44:
         4e:0b:3e:ca:46:4d:a8:5a:fc:ba:29:2f:f7:fb:74:1b:75:90:
         08:b0:ac:b2:0a:5f:a3:df:80:f4:f4:27:02:8f:c2:9c:9a:b3:
         df:7a:18:9f:df:c0:1c:b5:23:90:6b:2a:8c:79:d7:24:6e:d8:
         9f:93:67:c8:ce:51:98:b7:0a:e1:73:3f:2f:8f:be:bd:46:d8:
         0a:83:1e:44:b8:47:a8:dd:f7:c5:ff:37:74:73:49:45:f6:fb:
         49:97:22:58:9a:5a:81:62:8b:bb:2a:9d:b5:33:a6:52:b8:d8:
         3e:22:1b:e7:bb:06:a3:07:c7:fc:ea:6a:25:fc:1c:cc:f9:9b:
         7c:7a:5e:5a:86:04:8a:3a:ac:dd:f7:fe:57:f4:df:46:f2:12:
         c3:8c:0b:4c:37:23:88:78:25:21:63:98:b7:79:22:9c:ea:02:
         4e:5b:0e:ba:38:8c:ee:2d:f7:0e:fb:5f:73:39:dc:53:21:fb:
         34:2c:dc:45:6f:f5:e4:47:b4:9f:20:4c:fd:6b:d3:9f:71:af:
         07:2f:e4:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJDGhcbi/VRljVpx1aAp4LY1CuUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc0Mzc0M0EwQUI4MjhERDMyMURCMUM5NkI2QUI1NTkx
NkE4ODU5QTAeFw0yMjAyMjQxOTAzNThaFw0yMzAyMjMxOTA4NThaMDMxMTAvBgNV
BAMTKDNFQzkzQUVEMkE2Q0Y5NjBCNTBCMTc1NzA0QjlDOTU4QzU3MzFFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxVHwlko1x5DXzRUSgLEG5Mlf
69hVp/ZgGR+d4skcqXHEj3wifNyHn9xZ5YL0IgtBQcJKVRavI9RBGDlj1bRJTaSU
V3duyOnBeN0H+X+ecnlHDMhjb3Ca/rQ1v6E/Ckh45P0cQCZb5ozdYPvbXuUAySC7
46XrYXisVjfApy3UFWkdhIZbQIezcw0BwjUJZDrNg3XUHfc5Hqxplj0zrtMzlqK0
Kvzp2wOBPjJvOYQu+ixQMjYmtJ7rQKqiiYjOyr9JJHQzDo53LvKsIr1pRtiVJ38y
oDmTx3AkoDPXO84b3dmwGgvb19n6hOz0CBBhQFxGKApSw9/UODVxBQItGKJFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPsk67Sps+WC1CxdXBLnJWMVzHkowHwYDVR0j
BBgwFoAUB0N0Ogq4KN0yHbHJa2q1WRaohZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMC8wNzQzNzQzQTBBQjgyOEREMzIxREIxQzk2QjZBQjU1OTE2QTg4NTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3NDM3NDNBMEFCODI4REQz
MjFEQjFDOTZCNkFCNTU5MTZBODg1OUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzAv
MzEzNzM3MmUzMjMwMmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxFN8wDQYJKoZIhvcNAQELBQADggEBAJ/9sHkP
uB6557VaD0JKD3lCMssVzjCFzyr6EKRKGCj2YOp0VerO7bmSwPqLePoDgYdOoi/G
RE4LPspGTaha/LopL/f7dBt1kAiwrLIKX6PfgPT0JwKPwpyas996GJ/fwBy1I5Br
Kox51yRu2J+TZ8jOUZi3CuFzPy+Pvr1G2AqDHkS4R6jd98X/N3RzSUX2+0mXIlia
WoFii7sqnbUzplK42D4iG+e7BqMHx/zqaiX8HMz5m3x6XlqGBIo6rN33/lf030by
EsOMC0w3I4h4JSFjmLd5IpzqAk5bDro4jO4t9w77X3M53FMh+zQs3EVv9eRHtJ8g
TP1r059xrwcv5D8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:13 2023 by rpki-client on console-fra.rpki-client.org