Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230302e302f32322d3234203d3e20323633303235.roa
File:                     3137372e31302e3230302e302f32322d3234203d3e20323633303235.roa (raw, json)
Hash identifier:          pwQ4l4Ue10O4abQ/xphJuetTwyNXjCNZfIFpQLbsPsk=
Subject key identifier:   25:96:99:86:5F:F5:7E:5D:4B:EB:56:2B:B2:71:84:E7:CB:0C:6A:36
Certificate issuer:       /CN=FF861D858835AF9AA140FBB590B4E00FB71D923B
Certificate serial:       0F373866F7D42347D8847D159892C313F3DA32EA
Authority key identifier: FF:86:1D:85:88:35:AF:9A:A1:40:FB:B5:90:B4:E0:0F:B7:1D:92:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF861D858835AF9AA140FBB590B4E00FB71D923B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230302e302f32322d3234203d3e20323633303235.roa
Signing time:             Fri 17 Mar 2023 11:28:46 +0000
ROA not before:           Fri 17 Mar 2023 11:23:46 +0000
ROA not after:            Fri 15 Mar 2024 11:28:46 +0000
asID:                     263025
IP address blocks:        177.10.200.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:37:38:66:f7:d4:23:47:d8:84:7d:15:98:92:c3:13:f3:da:32:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF861D858835AF9AA140FBB590B4E00FB71D923B
        Validity
            Not Before: Mar 17 11:23:46 2023 GMT
            Not After : Mar 15 11:28:46 2024 GMT
        Subject: CN=259699865FF57E5D4BEB562BB27184E7CB0C6A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:cf:0b:b9:9a:09:80:a6:58:75:0a:9a:e0:
                    9f:b6:3f:bf:a7:06:a3:86:63:0a:5d:f8:33:7c:79:
                    fb:4a:15:85:34:69:09:85:dc:76:60:ea:78:36:94:
                    bb:22:96:c0:bd:e1:79:91:66:8f:a7:35:df:be:a1:
                    7d:9d:e4:73:c2:4e:4d:76:e4:88:8d:58:86:d3:ef:
                    3a:b4:20:b0:c7:21:b6:55:ff:33:9a:58:9a:b0:5b:
                    fc:b4:5e:16:85:e2:92:8c:a4:61:a8:11:9a:60:b3:
                    9d:5d:ca:94:d7:72:e9:c7:47:0f:68:b7:b3:82:04:
                    dd:77:1a:e7:f4:6a:96:aa:0a:92:e4:23:47:49:bf:
                    7c:5d:33:1d:16:4b:ac:f5:df:09:20:55:cf:1f:e6:
                    f8:84:65:bc:b3:d9:b8:8b:7d:78:2a:38:d6:7e:86:
                    f0:86:b9:f3:b2:34:44:4a:ea:de:1f:fa:82:ba:6e:
                    bf:bd:df:b9:83:a1:e7:e3:a4:8d:4f:c7:bb:14:e6:
                    74:19:7d:86:9d:5d:2e:20:24:eb:89:ad:8c:73:aa:
                    31:46:45:c7:42:04:4b:c0:e0:e4:b3:4d:b5:17:f3:
                    3f:8f:5a:1d:c1:8a:87:a6:85:cb:02:e8:e2:1c:b6:
                    a1:e8:3c:fb:5b:af:e7:2d:de:0b:c2:d0:c5:48:4c:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:96:99:86:5F:F5:7E:5D:4B:EB:56:2B:B2:71:84:E7:CB:0C:6A:36
            X509v3 Authority Key Identifier:
                keyid:FF:86:1D:85:88:35:AF:9A:A1:40:FB:B5:90:B4:E0:0F:B7:1D:92:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/FF861D858835AF9AA140FBB590B4E00FB71D923B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF861D858835AF9AA140FBB590B4E00FB71D923B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230302e302f32322d3234203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:ef:45:fa:e2:2f:a4:b9:94:f8:74:8d:96:0f:4d:3d:b9:6a:
         12:95:7f:be:88:02:94:3d:87:e2:d9:98:01:18:0d:76:27:52:
         97:fb:81:1d:10:73:87:4d:20:7e:97:a5:50:28:31:52:91:31:
         af:75:0f:52:b2:66:0c:85:a4:f3:9f:fc:27:1a:38:c2:26:33:
         19:f9:5c:48:47:d6:22:30:52:f2:c9:08:9d:68:96:77:eb:91:
         97:4a:08:c4:e5:3b:41:b8:bc:5b:86:c4:7a:38:5a:0c:e6:87:
         4e:2d:63:23:73:e6:45:1d:06:e5:02:2f:68:bd:92:f0:cf:bf:
         19:64:d4:d7:80:03:63:6a:bb:59:ad:1b:70:6c:5c:f8:f4:87:
         2a:6a:7d:82:55:6e:ad:82:7b:e7:4b:a1:f6:b9:06:46:5f:64:
         d3:23:02:d2:a1:1d:1b:85:2c:4a:69:eb:3d:b2:8e:08:89:79:
         b0:5b:60:6d:d6:aa:35:83:4f:47:87:f1:10:69:02:76:95:0a:
         dc:35:91:fe:14:c5:ce:e9:63:76:04:e1:b6:a3:16:c4:85:eb:
         91:ef:d3:2b:7c:8f:2c:07:05:a8:df:15:bb:c8:c4:fb:b9:b5:
         fe:3b:c7:81:06:83:20:b8:9f:96:e6:a5:9a:10:f7:57:24:16:
         69:52:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 22:17:00 2023 by rpki-client on console-fra.rpki-client.org