Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa
File:                     3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          VjNuMWCh+IG3JXlPvcqsJgY9zvWhnmVkQSxaKmnfNAM=
Subject key identifier:   9F:9C:8E:32:27:F3:85:7B:45:04:97:26:82:22:8B:F1:35:FE:C7:6C
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       5C1EAC54ACF267401E79FF49223925109D4C9DBA
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa
Signing time:             Tue 24 Oct 2023 18:35:06 +0000
ROA not before:           Tue 24 Oct 2023 18:30:06 +0000
ROA not after:            Tue 22 Oct 2024 18:35:06 +0000
asID:                     262505
IP address blocks:        177.55.144.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1e:ac:54:ac:f2:67:40:1e:79:ff:49:22:39:25:10:9d:4c:9d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Oct 24 18:30:06 2023 GMT
            Not After : Oct 22 18:35:06 2024 GMT
        Subject: CN=9F9C8E3227F3857B4504972682228BF135FEC76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:54:4d:82:fe:e5:0a:fe:1e:55:82:20:cc:
                    b6:1c:19:f2:d3:7d:2d:54:49:3a:a4:9d:0d:e9:3b:
                    80:44:77:93:a9:81:37:33:51:89:e7:7b:a5:4a:e9:
                    a1:da:eb:23:59:21:61:8b:f5:62:d5:a9:70:5f:3b:
                    49:65:da:bc:0c:d0:6e:4b:07:6f:b5:b2:c2:64:fa:
                    76:ab:9c:7c:67:08:ed:e6:f1:94:a8:2d:60:4f:f9:
                    f2:40:45:d3:e6:d7:78:e7:6c:a1:42:96:5b:1f:88:
                    ac:f2:46:c7:49:c7:b5:64:9f:93:39:f5:af:4f:e4:
                    7d:50:ee:fb:44:25:db:a0:e5:9e:5f:19:04:3f:31:
                    2a:5b:11:c6:1e:5c:8e:f7:82:a5:ab:97:a3:19:26:
                    b9:54:11:4a:31:d0:2d:85:b3:8c:f2:37:f4:93:cf:
                    3c:42:7f:aa:74:90:14:f8:ab:d4:8b:8f:83:52:0e:
                    7b:94:4e:7d:b6:89:73:5a:e3:3d:f5:5c:73:cc:be:
                    8a:76:3c:56:05:eb:b1:ad:b9:ad:c7:86:d2:62:d9:
                    47:88:ba:fb:e2:af:b1:6e:9d:57:b8:75:7a:fe:5b:
                    0e:29:32:df:e5:82:d8:42:57:41:d5:6e:05:bd:c7:
                    bd:e9:74:1c:d1:6a:35:63:ee:37:04:1b:c7:9d:2f:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9C:8E:32:27:F3:85:7B:45:04:97:26:82:22:8B:F1:35:FE:C7:6C
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:af:88:b2:dd:dc:2a:e3:bd:82:0b:67:f9:d4:a9:f5:01:bc:
         0d:85:73:70:e7:b4:2f:58:29:40:50:b5:b2:49:02:64:68:36:
         18:13:ef:81:79:bd:d4:92:2f:e8:c1:e7:a5:43:d6:5c:b5:b9:
         55:e2:90:7a:7d:08:0d:2b:93:3c:20:78:6b:c4:9f:9a:48:1a:
         a1:47:48:b3:56:b6:b0:4b:81:c8:d0:db:13:6e:d6:c0:11:bd:
         6a:af:fb:3c:09:44:49:f7:4c:92:c0:88:46:35:44:97:cd:a6:
         d7:26:63:2d:04:fb:bf:68:1b:6e:f5:5b:d6:df:07:16:cc:40:
         1c:99:d8:b6:18:df:85:d3:fe:44:08:24:71:30:d3:5b:da:dc:
         a3:e3:16:db:23:f9:24:a7:bd:0f:df:66:f8:1b:24:da:0c:e9:
         a4:ea:c3:75:7e:82:2b:68:28:21:d8:6a:c5:0f:c7:50:75:76:
         b3:d3:bd:2a:82:da:42:c0:05:fb:a6:8f:3c:94:0d:fd:87:93:
         d8:95:0f:b8:76:47:4b:86:80:4b:fe:d6:c6:c5:1e:55:fd:50:
         27:f4:ea:5f:c0:54:60:7b:4a:aa:5c:0e:bb:18:0a:23:f8:f6:
         69:ed:4a:bc:76:33:77:01:63:91:5f:90:53:40:75:2e:2d:1f:
         5a:32:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 04:46:35 2024 by rpki-client on console-ams.rpki-client.org