Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa
File:                     3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa (raw, json)
Hash identifier:          MWJCTFOuRhaOXoeKnuffTVwgtkKwvjIKV5UMOLvrOnI=
Subject key identifier:   A6:05:79:C5:44:13:92:12:F2:38:03:7E:83:95:94:AC:52:3A:2B:9C
Certificate issuer:       /CN=AF8831AC886CB723D7218AAE5E84C889AAA45D7F
Certificate serial:       77547E821FE1BBB735B444BAC516CAA54FA2DF6E
Authority key identifier: AF:88:31:AC:88:6C:B7:23:D7:21:8A:AE:5E:84:C8:89:AA:A4:5D:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8831AC886CB723D7218AAE5E84C889AAA45D7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa
Signing time:             Thu 02 May 2024 23:40:35 +0000
ROA not before:           Thu 02 May 2024 23:35:35 +0000
ROA not after:            Thu 01 May 2025 23:40:35 +0000
asID:                     271102
IP address blocks:        179.48.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:54:7e:82:1f:e1:bb:b7:35:b4:44:ba:c5:16:ca:a5:4f:a2:df:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8831AC886CB723D7218AAE5E84C889AAA45D7F
        Validity
            Not Before: May  2 23:35:35 2024 GMT
            Not After : May  1 23:40:35 2025 GMT
        Subject: CN=A60579C544139212F238037E839594AC523A2B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:71:75:9d:30:80:2b:9f:6c:a0:5a:c6:f7:
                    66:fb:c2:8e:20:53:34:02:c2:ea:10:fb:00:7f:4d:
                    dd:8b:bd:a0:23:39:0e:7d:22:d6:d5:40:4f:b5:c9:
                    cd:70:b9:f2:43:b1:b5:98:05:69:d6:2a:a8:a0:d4:
                    cf:8c:a5:d4:b9:88:49:63:7a:fc:fb:94:d8:e3:43:
                    67:e7:47:87:25:b5:1e:19:75:26:83:3b:97:24:89:
                    4e:82:a6:e7:df:e3:c6:ad:30:3d:b9:7b:66:d3:a1:
                    de:77:14:34:d5:da:e0:00:56:74:d4:5b:d6:c2:4a:
                    dc:b2:49:16:2a:06:40:cc:15:fc:4f:b7:54:bb:c0:
                    89:17:94:5a:d5:10:9f:bb:71:3c:4a:a2:ac:89:2e:
                    34:eb:a3:1d:1d:4b:90:e3:91:fa:47:d9:01:4c:db:
                    86:3b:d0:56:dd:2a:db:a4:5b:57:30:f1:20:94:49:
                    03:01:64:87:3c:20:5a:d6:d7:74:dc:db:77:c6:f9:
                    4a:51:67:c9:a0:9b:da:8e:7d:b7:87:c2:32:53:37:
                    ee:63:7d:1e:a4:e6:47:fb:5c:07:e7:8c:a1:32:67:
                    c7:f0:f3:eb:81:e6:74:49:8d:fa:0f:51:a8:35:19:
                    bb:e5:94:a5:26:cb:94:fe:34:e4:5a:4f:fc:e4:a5:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:05:79:C5:44:13:92:12:F2:38:03:7E:83:95:94:AC:52:3A:2B:9C
            X509v3 Authority Key Identifier:
                keyid:AF:88:31:AC:88:6C:B7:23:D7:21:8A:AE:5E:84:C8:89:AA:A4:5D:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/AF8831AC886CB723D7218AAE5E84C889AAA45D7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8831AC886CB723D7218AAE5E84C889AAA45D7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:7d:e2:0b:10:12:ad:5a:d5:cf:ce:a0:a1:56:04:36:cd:
         60:b6:56:2e:87:0e:41:4b:dd:9e:e3:54:69:09:f9:18:f2:00:
         13:3c:3b:65:b0:34:be:c6:80:35:65:6e:01:3c:a7:09:9a:15:
         f7:39:5b:47:fc:4a:01:a9:1a:9e:58:db:4b:65:f0:e1:ad:79:
         76:37:31:a6:af:20:98:c6:7c:78:6b:d9:10:94:ea:21:04:2d:
         0a:4c:d4:d6:02:c7:4a:3b:1f:40:00:f5:9c:28:bc:68:50:ce:
         ce:68:26:6f:be:6a:40:71:28:23:f1:3e:3e:c3:2f:28:7b:6c:
         f8:89:15:f4:85:35:9d:c6:53:be:7e:51:d1:d9:28:d8:21:35:
         49:48:c2:b5:9a:2e:07:04:f3:51:31:f4:fe:9d:00:db:12:a7:
         5d:3a:67:35:7f:2e:81:56:51:11:1c:12:b8:67:6d:5a:83:a6:
         14:dd:86:7e:84:1d:a5:b4:20:78:b7:09:b4:6b:86:f3:a8:e0:
         8a:e7:57:7b:fe:22:fa:db:9c:4e:fc:47:95:85:21:15:5e:80:
         c2:05:6b:73:83:9a:63:2c:77:be:8d:63:f9:77:15:ad:1a:45:
         11:5c:c8:7a:7d:73:f2:d6:c1:6e:5e:8e:8e:b7:00:e4:2f:9a:
         ba:7c:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 11:49:51 2024 by rpki-client on console-fra.rpki-client.org