Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          IE8IX4JFBa3F1VkT5igv4SwLmFw6k06OrmNbz5PcpVo=
Subject key identifier:   07:01:58:CC:7C:CB:9D:48:11:3D:CF:CE:BF:20:9B:A3:09:87:49:84
Certificate issuer:       /CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
Certificate serial:       6B5D9B933051A7A7129573D01FD8934940F6B561
Authority key identifier: E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
Signing time:             Sun 19 Nov 2023 06:40:07 +0000
ROA not before:           Sun 19 Nov 2023 06:35:07 +0000
ROA not after:            Sun 17 Nov 2024 06:40:07 +0000
asID:                     263584
IP address blocks:        177.129.142.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5d:9b:93:30:51:a7:a7:12:95:73:d0:1f:d8:93:49:40:f6:b5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
        Validity
            Not Before: Nov 19 06:35:07 2023 GMT
            Not After : Nov 17 06:40:07 2024 GMT
        Subject: CN=070158CC7CCB9D48113DCFCEBF209BA309874984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:01:c7:77:6d:be:f9:aa:16:f7:e1:48:f7:
                    1d:7c:f9:3d:d4:9b:02:c2:48:78:a1:9a:b0:f8:90:
                    b9:56:11:0e:de:9e:6f:a1:a8:02:48:c9:b3:cf:a8:
                    e0:c9:34:3d:ab:29:e1:ce:d1:f9:d9:9c:37:bd:b4:
                    7e:12:87:89:49:29:ad:a8:59:04:b5:2e:61:69:96:
                    55:f5:b6:49:d4:c6:f3:a5:9e:27:ac:4c:f3:68:af:
                    4f:9f:a9:40:a3:ae:a9:a6:a5:7b:7d:c2:10:ff:af:
                    9a:d3:35:ea:cd:fd:30:7e:08:8f:45:67:ee:56:73:
                    01:5a:82:00:2d:c1:ba:d6:45:2a:c5:99:16:0b:16:
                    ac:f8:79:a1:b8:cf:da:4c:44:10:1c:79:03:ce:55:
                    4b:17:4d:e9:41:e7:ce:40:e6:00:c9:66:7e:88:1f:
                    e1:de:d1:83:03:f1:dc:af:c7:d0:da:4d:b7:f4:94:
                    22:d7:5b:b7:5c:b1:51:59:b3:5a:54:94:fa:55:dc:
                    c7:3c:e3:3b:83:6c:9e:4a:f9:8d:6e:87:d2:3e:7c:
                    9e:91:ee:80:97:23:09:35:63:8d:ae:08:35:e2:5e:
                    29:c8:56:f9:fd:74:c0:0b:18:aa:a7:e8:42:a5:93:
                    a5:53:16:aa:2a:e9:11:83:63:6e:b5:79:a2:60:9f:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:58:CC:7C:CB:9D:48:11:3D:CF:CE:BF:20:9B:A3:09:87:49:84
            X509v3 Authority Key Identifier:
                keyid:E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:e0:4f:38:55:59:9c:1c:0c:91:33:2f:03:b6:c7:fc:ce:
         46:1b:89:cd:f1:3f:a5:69:0d:dc:8a:98:49:81:9b:06:44:73:
         b1:dd:3c:2c:37:2d:88:bf:ce:0f:4d:3b:c4:fe:5d:e7:a1:ea:
         e9:4c:37:d2:bb:63:88:4e:89:ab:10:e6:4a:b1:8e:f3:38:a9:
         8e:9c:c7:b0:e7:48:5a:e2:8f:4e:9a:40:4f:1a:0a:76:08:c9:
         0c:50:37:9c:ac:d4:3d:bc:c4:64:db:03:dd:13:b4:6f:7e:e4:
         ac:7d:b7:52:89:29:d3:79:59:99:f5:25:e0:83:5e:f2:53:9f:
         7e:a8:c4:2b:ed:52:d8:e8:69:41:4e:05:a1:9c:23:76:97:22:
         20:55:3a:fa:ab:97:2d:c9:5d:29:db:b0:2a:87:a4:1a:f5:b5:
         76:40:25:80:bd:84:7f:83:3d:7b:6a:1f:32:46:11:36:6b:7e:
         10:99:c1:c9:98:e7:08:f8:71:89:39:4f:77:b5:a3:ab:cd:c9:
         e1:41:b8:6b:01:1c:f3:9d:8d:e4:8b:e7:ae:af:94:0e:88:be:
         df:a1:f9:81:a4:dd:2b:9e:63:e3:59:75:22:6c:26:1d:99:07:
         05:9a:c3:92:e0:f0:70:b3:37:22:a1:5c:36:09:ac:ae:39:51:
         d2:e0:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 16:26:41 2024 by rpki-client on console-ams.rpki-client.org